Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File:                     HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier:          5PXVWsTvUoOPEOXfiPvAHNJnHq7gdrZoS48q/UGuPzs=
Subject key identifier:   FD:D2:34:E1:F3:82:53:37:19:CE:E2:C3:CA:4E:64:46:62:3C:69:73
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer:       /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial:       01962E61D121F3AB38281FF3EA025938A266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number:          0F9C
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: X4fCJ77yeJ8eZXvMomCPDGz8TcGbXeceMzYoOCMteCI=)
                          2: OoGFPfomo3cQZiCz4qsidreDjCc.roa (hash: nmvopa2kUZd9MIXgbeUNiD86irOgkmmL30is65pmYug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:21:f3:ab:38:28:1f:f3:ea:02:59:38:a2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=fdd234e1f382533719cee2c3ca4e6446623c6973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:69:77:a9:19:f2:ce:ec:e8:e3:aa:ce:18:
                    f3:98:76:74:11:70:e1:2a:9d:f0:64:76:e6:97:25:
                    a7:02:ad:11:18:20:74:4f:13:c0:9f:6f:2e:41:2f:
                    b0:16:70:2a:f9:e8:cd:41:ae:88:cf:f5:2a:31:08:
                    54:44:df:fb:cf:0c:3f:2a:22:26:5b:03:45:ec:79:
                    d7:6c:cc:ea:e7:ce:47:c8:24:63:8b:50:4b:c4:85:
                    69:dc:97:87:e7:18:39:ef:e5:6a:3a:0a:bc:c4:1a:
                    1e:f8:fc:3c:61:29:09:0d:9e:e7:fd:21:86:f0:6a:
                    4f:ec:c3:8b:4a:e7:45:4a:7a:13:d2:a4:7c:e1:22:
                    9b:f3:52:c6:6e:df:5b:82:35:e5:85:85:8c:d7:c8:
                    7b:6d:1c:77:cb:6d:58:78:21:09:ac:6c:46:e5:ca:
                    65:f3:74:ae:6c:a7:be:9a:21:4a:1a:7b:3b:c0:fb:
                    99:34:70:9d:e3:4b:56:3a:e9:94:25:ab:2a:2d:4f:
                    6f:bd:f6:bd:69:10:6e:70:bc:53:f3:9c:d4:59:5d:
                    68:eb:1e:f0:4e:62:c7:6f:7d:e9:0c:4f:fb:36:2f:
                    a1:40:14:87:f6:2d:e4:eb:7d:52:70:3e:61:90:46:
                    74:75:fa:7d:28:ed:6e:da:2c:fa:fa:c3:6a:91:35:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D2:34:E1:F3:82:53:37:19:CE:E2:C3:CA:4E:64:46:62:3C:69:73
            X509v3 Authority Key Identifier:
                keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:c6:c9:57:f6:97:16:c2:73:c2:fd:6b:4b:42:6a:ce:f2:
         ee:2c:09:e7:3f:46:75:14:6c:44:72:b2:8f:30:86:9a:59:87:
         6a:27:78:59:43:3d:8a:e7:78:da:62:49:f2:84:17:8c:65:49:
         28:43:d0:7f:70:98:d6:5a:93:dc:bf:b0:60:91:16:9a:79:9d:
         47:73:d0:9a:71:f8:9e:49:73:b0:ce:c4:80:55:c5:fb:47:79:
         cf:df:5d:4b:6e:e1:64:0a:3b:0a:7e:76:a6:e6:59:c9:b2:f5:
         84:72:04:66:36:5d:fd:74:53:e7:b3:97:72:c5:df:43:d0:2f:
         7b:4c:81:77:af:80:b6:5e:f6:bb:72:9f:40:c6:53:3e:0b:35:
         65:1d:e3:16:00:1e:9f:c3:2f:cf:ff:39:4b:7b:0f:9d:56:89:
         8f:d2:a3:25:04:db:f4:fe:7e:1d:1f:84:01:10:94:ba:61:e3:
         e1:73:6e:1d:b3:1a:b7:a2:9a:f4:4e:43:fd:31:44:ff:cc:d6:
         d1:40:bc:96:86:9d:af:2d:7f:33:5d:80:cc:c2:d7:3c:15:b9:
         a4:8a:b6:04:b4:c4:ab:69:2b:6b:d4:db:c3:27:f6:17:d1:1f:
         e7:74:fd:86:9f:9b:9b:6d:a8:93:64:d1:98:51:28:2a:c4:75:
         50:06:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----