Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File:                     HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier:          PSlKcIChq17aFCV2IGfg5T0vWkHLDJEPnBg4M2sKAS4=
Subject key identifier:   88:31:46:94:E0:D4:82:54:0A:74:6B:72:A2:48:7C:40:F1:1E:A9:20
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer:       /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial:       01962F06D5430B1C8777D3C322E374C48CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number:          0E43
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: IRnOgjO3bojYjL737raOeIdE+JPGNJ5SZJ9H+hbBgQk=)
                          2: V9AZTNgU1d002QfKUotGNDSDtvk.roa (hash: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d5:43:0b:1c:87:77:d3:c3:22:e3:74:c4:8c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=88314694e0d482540a746b72a2487c40f11ea920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:3d:cf:90:2d:b6:b2:6e:8c:42:47:0d:c3:
                    f7:54:19:56:fe:6e:4e:a9:c2:b0:00:55:f3:33:41:
                    f9:b5:f5:6e:bb:7e:ca:b0:58:e7:d8:3a:cd:6d:6a:
                    48:e7:a0:40:6a:8a:73:90:66:e7:ad:af:d0:74:ca:
                    14:ae:5b:82:c5:30:44:d1:fc:f8:60:e4:e3:3c:49:
                    ff:e3:c6:74:ba:1b:7d:24:91:e4:39:c3:e1:89:cf:
                    07:ee:cf:68:b0:d7:73:80:d2:4b:c0:3b:62:54:12:
                    f5:8e:17:8e:46:d2:c2:80:82:f5:01:8b:e5:a7:75:
                    30:e6:df:89:d3:52:fd:53:24:a0:dc:42:f4:e7:e2:
                    30:18:b6:3e:f5:e2:ad:65:c8:e3:28:54:94:11:90:
                    1e:64:98:26:f5:de:87:2b:3a:8a:83:be:fb:3e:55:
                    38:34:5a:ce:87:9d:6f:1a:e8:93:9e:e0:f0:6a:cb:
                    ae:7a:a4:d3:fc:ce:85:9f:ef:0f:43:15:56:99:cb:
                    db:cc:ea:79:8f:83:a6:0a:1c:bc:9e:cf:b6:47:fc:
                    eb:1e:45:9b:3d:57:69:25:65:47:6e:17:41:4e:b7:
                    73:fa:57:c4:8c:da:a9:59:c8:af:cf:51:b1:35:d5:
                    0a:c1:9a:36:46:7a:c0:d9:49:8c:7f:cc:87:c2:bd:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:31:46:94:E0:D4:82:54:0A:74:6B:72:A2:48:7C:40:F1:1E:A9:20
            X509v3 Authority Key Identifier:
                keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:99:97:19:24:a6:0d:e7:3e:f5:55:2d:ce:64:e3:5b:f1:
         e5:9a:f5:cb:f6:73:77:20:b8:3e:55:67:22:05:01:c2:ce:19:
         82:9a:20:5a:3e:69:2d:37:ea:64:5d:6d:eb:73:97:c2:86:1b:
         45:1a:38:15:b0:a6:3c:16:94:0a:fc:0b:fe:1d:80:0c:26:57:
         9f:21:09:d7:46:e7:79:65:08:b4:4b:a4:9d:1a:2b:94:25:fa:
         d6:77:d7:66:13:81:9b:14:59:3f:f0:2c:94:8b:c8:cc:3b:e1:
         17:7e:40:20:b5:f1:23:61:25:c8:9a:76:0f:29:d7:4b:6e:71:
         e6:23:84:9d:b2:ff:3b:27:9e:3b:f2:f6:88:e0:f9:c2:51:46:
         6a:72:40:20:64:16:2d:bb:18:0b:cd:3a:8b:75:2d:03:22:91:
         0a:d2:46:c8:7a:93:55:ce:06:89:4a:e4:4e:d5:db:b9:55:08:
         7c:89:62:05:1f:66:5a:51:c9:9a:47:56:49:f8:bd:32:76:09:
         81:71:a2:ed:52:16:95:b1:09:a5:7a:50:43:66:32:43:ec:86:
         b0:75:d8:22:46:5d:63:2d:0a:56:24:70:f1:8d:5c:f1:b5:19:
         e6:48:9e:c5:43:26:a3:16:32:ee:bc:54:0d:78:d8:05:aa:cf:
         3c:fb:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----