Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          ySLlcpJYr5KpYaZinxMK+My3edhIDpz2bZXecrKmCp8=
Subject key identifier:   71:64:81:6C:04:19:9F:29:C6:B0:AA:65:76:1A:9B:5C:3B:EA:5F:67
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       01962F74C7F2EB2098BCA80A40C129D882AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          107D
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=)
                          2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: koAszZnbf3R2Qg0EWVzYei/JyBLkR7ZB3EwqYD0Kuyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:f2:eb:20:98:bc:a8:0a:40:c1:29:d8:82:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=7164816c04199f29c6b0aa65761a9b5c3bea5f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:26:85:98:80:99:cf:17:0f:f0:a6:9b:41:
                    6e:8f:a6:24:6c:4a:26:b1:8c:0e:ac:8f:3f:6c:30:
                    94:66:d8:1a:40:34:24:3b:de:bd:07:76:25:4d:67:
                    d0:d8:58:1f:e5:be:6f:b0:8f:dc:fb:47:fc:c2:54:
                    0d:33:44:e7:f4:38:66:24:7a:a9:0f:b2:db:e7:23:
                    a5:45:d9:97:7e:dd:ba:0c:af:e9:30:20:79:d0:dd:
                    c9:99:2a:3f:9b:04:0c:e2:83:86:81:ed:84:37:57:
                    58:fe:83:60:9e:c8:0b:77:3d:6e:c3:41:ca:dc:b6:
                    6b:cd:5d:c7:f0:cb:1b:74:8d:c8:29:e9:9e:4d:59:
                    6b:9c:50:41:88:19:a1:74:c6:37:3f:19:19:b2:fb:
                    9d:18:ee:d7:6e:70:a9:b3:11:86:c7:e1:6e:53:e5:
                    49:2d:01:44:80:ba:a4:0c:2b:84:54:2d:1b:3b:a1:
                    03:88:54:bf:50:b9:c1:ca:fe:cd:c8:01:7d:fc:84:
                    9d:e1:73:a5:b8:0a:63:5c:d7:f1:3e:72:76:21:3e:
                    03:aa:3c:34:38:c2:c7:32:39:eb:7c:27:02:d9:a1:
                    c2:a1:47:a1:13:d8:97:5c:bc:21:c8:b6:c2:3a:48:
                    72:85:93:ad:b0:8f:bf:c2:63:b8:6e:c7:c7:a1:97:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:81:6C:04:19:9F:29:C6:B0:AA:65:76:1A:9B:5C:3B:EA:5F:67
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:f5:e7:49:74:2b:f0:67:ca:52:45:86:4e:b5:dd:7d:c8:
         d8:4b:64:b8:a3:1f:06:05:48:96:3f:6d:bc:69:02:89:e6:93:
         2e:ae:dd:3a:44:8c:d8:2a:4d:03:44:f1:15:82:10:ab:30:b1:
         5e:9f:0e:c1:9c:94:e4:f1:1c:00:76:6c:1d:17:d0:12:12:af:
         ba:2b:b5:7a:db:05:e6:9c:c6:1d:d2:f8:0a:1d:0a:a6:7a:bd:
         4e:7b:fd:51:58:d8:a2:83:1d:7b:45:10:13:55:03:3f:5e:2b:
         9a:f2:a9:16:ca:38:e8:76:85:56:77:dd:d6:7e:4d:01:48:ff:
         ac:54:18:22:d3:d6:0c:8d:16:43:5e:d5:22:58:1e:09:4f:5b:
         5a:49:f0:a2:8a:1b:ef:0f:c9:7b:c4:93:5d:a7:9a:61:56:4a:
         4d:f6:56:88:97:1b:e0:ef:4e:59:b2:67:ba:a3:5b:04:42:31:
         16:5f:e7:b3:61:49:cb:73:b1:f6:4f:79:8f:b4:d4:64:0d:de:
         bb:ef:42:21:97:48:4f:e5:be:42:fd:13:ee:cf:74:b3:09:8e:
         c3:18:5f:6b:40:c7:c2:c7:03:df:a9:4c:f8:6a:b0:ba:4e:85:
         5c:83:d3:64:68:f5:27:10:3a:b7:ff:9f:ac:63:71:0d:6c:53:
         1a:d6:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----