Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File:                     HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier:          kS4t7w1O1cz3BPf/PzXZ3QypORM3gBDJnj8oO6fP40Y=
Subject key identifier:   A4:FE:14:38:F6:61:3B:11:72:41:C0:6C:5F:7B:5A:BC:03:38:F1:AB
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer:       /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial:       01962DF3C0F8F39BA120C02A718F38A5DDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: c8XrSe2eqn9DW2/s8v4iY27cYraMmhI7POvnxvmHWNQ=)
                          2: pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa (hash: DbYaOM55FhKgmSDQxNENLAyQLbX8jvEl6m8BL1vC3Fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c0:f8:f3:9b:a1:20:c0:2a:71:8f:38:a5:dd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=a4fe1438f6613b117241c06c5f7b5abc0338f1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:f1:ea:85:99:ea:69:36:39:31:7b:6d:67:
                    f5:aa:f7:ba:32:05:c5:bb:ad:06:19:cb:88:fc:d5:
                    b0:92:e4:2a:bd:16:64:bd:f9:c1:0d:68:2d:08:aa:
                    bd:24:e2:55:cc:c9:f9:de:35:42:5e:be:1f:fc:8d:
                    6c:c8:48:6d:9e:34:bb:f7:e8:d4:b7:5c:2f:42:9f:
                    25:98:6c:8e:ad:03:3b:cc:c5:5a:ff:b7:63:29:cc:
                    10:f6:fd:98:77:a3:70:c5:1a:43:1d:cb:2d:82:fe:
                    26:c2:0b:04:c4:a0:37:62:66:82:50:a9:b2:6a:03:
                    38:82:65:29:7f:86:ef:2a:9b:df:92:df:e9:5d:69:
                    cb:9d:65:b5:b1:f8:d3:7d:fd:e9:cb:7a:9b:ff:2b:
                    1b:b2:28:9a:58:5c:16:b7:29:59:fd:dd:c4:08:c0:
                    ba:2f:3f:6d:f2:d0:c4:ea:21:b3:c4:f0:c4:b6:59:
                    22:44:c2:47:6d:73:f1:e4:fc:67:e5:92:05:30:ec:
                    0b:c8:46:c5:de:03:1b:3b:8b:58:f0:33:40:7c:b0:
                    c8:8c:11:3c:da:36:f3:84:a2:d7:b1:f7:3b:d1:32:
                    00:2a:9b:04:83:95:1d:ae:d6:af:cc:e0:f0:eb:35:
                    d2:1f:01:86:5d:fc:40:68:92:16:f1:33:d0:bf:71:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FE:14:38:F6:61:3B:11:72:41:C0:6C:5F:7B:5A:BC:03:38:F1:AB
            X509v3 Authority Key Identifier:
                keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:30:8b:04:c9:42:3e:c4:3e:c3:ef:1f:da:68:5f:3f:12:
         71:d3:75:82:ca:98:11:b8:1b:1b:8f:25:64:60:98:c1:4c:93:
         d3:29:47:a8:58:47:d3:c8:8b:56:6a:25:34:53:a7:a9:4c:95:
         12:00:1a:62:2a:39:4f:5d:2a:cf:f7:92:63:3b:61:3a:10:af:
         86:29:ae:2c:2b:a3:bb:ee:1b:6e:7c:74:96:9a:12:a5:88:da:
         a5:b6:1f:c6:2d:0f:11:a4:f8:d1:12:ce:c2:d0:a6:0e:e6:2e:
         38:11:93:ad:25:0a:99:fe:b3:00:e6:ab:65:26:8d:d6:38:be:
         b2:76:dd:e4:b2:f7:ba:01:fc:d1:b3:a8:76:c5:32:4a:c2:cc:
         ba:b4:73:60:f8:9c:87:79:08:79:48:10:a5:12:69:ff:62:f8:
         28:0c:4d:5f:e4:9e:cc:69:09:0d:ee:ec:fa:1a:10:bc:fd:8d:
         12:3f:22:d4:3c:f5:ef:2c:fc:34:ab:f2:b0:8a:aa:df:98:c6:
         85:62:40:fe:4e:bb:83:ab:0f:d8:56:24:4c:bc:c4:dd:75:c9:
         d4:a6:db:b2:2f:a1:78:b2:b2:8d:64:21:c1:3b:7d:90:3d:2a:
         da:cb:a0:47:5b:34:f4:53:b5:54:ec:98:de:de:d5:1c:6f:74:
         95:71:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----