Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File:                     HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier:          mPG4Ty4CLaVk43vrVoMDeZ1sD8ZtOjjYO2innlhhDV0=
Subject key identifier:   EC:89:C9:5D:44:9F:72:4A:C4:39:A0:55:E2:C8:94:66:1C:D6:EF:23
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer:       /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial:       01962E99907EA96A07BF03E9227F704D2294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number:          0ADB
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: i64Vt0mKWVsPAUqXmagtBPRQtcEjCnquDnWrktWlZ+A=)
                          2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:90:7e:a9:6a:07:bf:03:e9:22:7f:70:4d:22:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=ec89c95d449f724ac439a055e2c894661cd6ef23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:7f:42:45:da:ed:a1:c3:64:58:20:a0:2b:
                    cd:a2:04:c5:3a:af:e8:ef:75:72:a4:a5:a5:f2:b8:
                    90:ce:7d:9c:d2:7c:35:58:ca:1f:8e:d5:d6:59:f0:
                    26:03:d3:e7:1f:a1:fb:e9:a5:1d:79:bc:56:4f:6d:
                    14:7f:d9:95:bd:94:f9:1c:95:f9:02:d9:ee:42:66:
                    6f:8a:08:63:50:bd:bb:7e:0a:99:5a:bc:19:83:de:
                    df:80:d1:b1:6d:90:fe:0c:f7:21:47:6e:95:94:be:
                    e9:3f:78:84:12:4d:fb:54:17:2d:8e:03:ba:53:09:
                    d4:00:c9:a4:fc:09:a5:cb:d6:1f:f8:64:95:89:cf:
                    9c:61:02:2a:5c:6e:80:13:97:bb:5f:c0:ee:13:f7:
                    aa:be:fd:59:47:84:b8:2e:31:07:0a:a7:fe:57:de:
                    e5:62:a3:65:f6:d0:6a:08:06:8e:a6:45:19:1f:87:
                    aa:75:47:2d:aa:ec:2f:1e:f2:86:50:02:71:3f:13:
                    96:1d:c5:42:de:ec:c0:fe:a5:d3:98:9e:91:0d:cf:
                    38:1d:bb:6b:47:2d:ca:d1:b7:2b:d0:07:df:16:16:
                    e9:b5:07:22:16:eb:9a:ad:db:e4:5b:95:9d:a6:f4:
                    41:5f:77:cc:73:97:bd:ff:52:f9:e7:63:54:88:f8:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:89:C9:5D:44:9F:72:4A:C4:39:A0:55:E2:C8:94:66:1C:D6:EF:23
            X509v3 Authority Key Identifier:
                keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:f1:53:3b:2a:a6:f4:44:1b:17:2f:a9:73:7d:c5:96:bc:
         a6:1c:a2:6a:7f:2f:86:21:9c:ac:83:9f:7f:1e:92:64:5a:20:
         74:88:a2:ec:ab:4d:2d:a9:d4:b2:ce:77:9d:3b:03:a4:c1:14:
         77:b5:40:89:76:a4:df:37:d1:60:87:50:79:af:38:81:d8:c5:
         a8:c0:a2:2e:3a:19:62:2f:73:02:b3:70:09:ab:c4:bf:4a:f5:
         16:25:b5:09:f0:e6:26:f8:a9:45:23:e1:99:17:ef:c3:ec:73:
         9e:9b:ce:ca:da:68:9a:de:cb:8e:19:b9:83:c0:78:c6:f9:de:
         d9:c6:61:5f:72:5e:4e:94:7f:ba:61:76:fb:d3:66:f3:f3:4e:
         83:6b:a6:03:bb:58:96:1a:42:35:73:50:e1:da:8c:70:02:91:
         e0:16:74:11:8b:10:c7:95:15:89:23:af:1c:4b:1b:6c:18:bc:
         aa:1f:3d:84:00:b3:c0:ec:9c:24:4c:81:63:1e:b6:97:cd:e9:
         c3:41:43:9a:b3:fb:34:e7:20:04:2b:16:84:41:d2:9f:06:40:
         87:86:da:34:18:d6:6b:88:b6:47:f1:8b:8c:71:03:fe:69:9f:
         a7:87:4b:e6:a6:48:e8:66:1e:d4:af:99:d3:e7:f9:e5:27:70:
         e8:79:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----