Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          TeRfZqUkb0+1ePzJDhW8q+qqmxXj+Pg7MM/dUW5CRQ0=
Subject key identifier:   52:47:10:58:45:24:65:7E:51:92:21:1A:84:CE:B0:35:A3:C5:00:2F
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       01962F07050F57B19764D54EF2BBF172223E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa (hash: 49YBW2j0tiBN16/cc6cP9HT+URCIjSHjxZeBvIsvdsc=)
                          2: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: qg9XWSK6Q8/JZ8qBJ9JS0YLE1vaR0fjxV7ayMH5CoP8=)
                          3: mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa (hash: 4FwhfGdWmlyBhnx1X+ZJalRnXOeqaX7xZDQnuMN3V5I=)
                          4: qLkvJ0dRmfL0QBHRb9r1vRVUITA.roa (hash: uVLCZ/Z/jxamtxU6+Njb90gPAMuKb8Jw/Ec8/lYETUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:0f:57:b1:97:64:d5:4e:f2:bb:f1:72:22:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=524710584524657e5192211a84ceb035a3c5002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:36:60:03:97:29:32:6e:94:b4:2d:6f:da:
                    95:cf:59:d7:34:72:0a:51:8e:6e:c5:88:22:14:9d:
                    1d:0a:a5:d4:ef:35:c9:05:f2:ff:db:cb:4a:37:33:
                    40:d3:3d:26:c1:d5:96:4c:e1:13:05:2a:12:75:3c:
                    a5:8c:93:c3:94:de:8b:65:53:e9:1b:4f:07:04:fc:
                    fa:91:0c:3b:d6:06:3f:81:20:de:7a:51:db:4c:bc:
                    b0:98:c1:80:bf:67:78:ba:ae:8a:c3:c8:1f:83:54:
                    59:b6:2f:28:3c:2e:3a:e0:7d:87:da:75:89:32:e1:
                    2c:25:37:f4:13:e5:1c:68:f5:81:59:ca:5c:16:97:
                    c2:95:2f:28:30:72:de:9c:92:af:87:35:95:20:3b:
                    47:ce:6d:18:41:80:d4:ad:9a:70:12:98:0c:9d:11:
                    9a:31:10:0e:e4:8e:a1:92:76:14:9b:1d:8b:83:45:
                    93:fb:99:ba:04:09:05:3e:97:36:7e:bc:bd:43:e3:
                    e5:9f:c2:0d:e6:9f:73:e3:90:c4:96:bd:4f:e7:cf:
                    82:9e:b5:bd:2e:ad:9d:a0:67:df:a9:2a:2b:d1:09:
                    8c:5c:e6:fc:2e:a7:0d:58:97:63:1b:64:54:76:d9:
                    2f:96:1e:f1:50:9a:b5:48:23:2b:70:5c:e1:1a:6b:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:10:58:45:24:65:7E:51:92:21:1A:84:CE:B0:35:A3:C5:00:2F
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:84:fd:94:4e:48:35:21:63:74:45:20:77:87:99:91:f6:15:
         eb:93:9b:88:8d:c6:bc:27:18:d0:51:13:c3:61:e0:a4:5d:5c:
         54:8b:c5:10:70:6c:eb:d6:42:70:98:ea:9a:80:f5:37:64:bc:
         b9:8a:a1:97:69:2f:41:cc:be:08:15:fd:54:1f:cb:7f:59:1e:
         5a:ea:30:52:3f:f6:bd:6c:84:33:dc:dd:d0:27:3f:48:b8:5f:
         7b:58:8a:c9:7a:0a:88:90:c7:ea:65:e6:6e:bb:fd:74:a9:a7:
         3f:04:3a:d0:bb:32:f3:63:19:0f:92:ce:8e:41:04:6d:93:55:
         c6:c1:fc:2f:e0:e6:fb:d4:54:0e:d9:d5:8c:8c:ca:76:09:e0:
         c2:86:91:4b:b3:91:da:a8:8e:eb:bb:0d:a0:17:37:58:07:b5:
         51:71:2f:11:9e:1f:62:7f:70:6f:8c:b5:a0:81:10:da:36:1a:
         04:5a:83:ef:63:64:2e:07:11:f3:fd:e2:6b:bd:5e:b1:dd:67:
         bc:c6:f0:9b:e9:e4:b3:cf:5b:3f:7d:2b:b6:26:49:9e:7b:95:
         25:cc:f2:1b:72:f4:5b:01:c2:0b:34:82:32:ed:ca:c4:51:27:
         29:d1:eb:a1:95:9d:e9:39:07:4e:3c:d4:7b:03:e1:fb:72:80:
         06:f1:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----