Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File:                     HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier:          vSw6BhE8pAhVXofvBSDMczQfE0tEN52BD0s8LTqJq2g=
Subject key identifier:   4D:F4:86:E6:4A:64:C3:E4:CC:D5:8D:28:D3:47:95:56:F3:41:78:E5
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer:       /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial:       01962FAB2C6D5CE56E7A8DC2BAFC86116B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: hVl/9GC6vQ3L9VBUKpfQlPHJQO63pQuAyF99h6inIPY=)
                          2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:6d:5c:e5:6e:7a:8d:c2:ba:fc:86:11:6b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=4df486e64a64c3e4ccd58d28d3479556f34178e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:4e:26:af:4f:17:43:e6:95:28:47:7e:ea:
                    3b:27:5f:7c:07:2c:e3:56:38:7a:1c:e9:61:5c:ad:
                    04:10:31:e7:52:bb:e8:33:4f:aa:96:f1:ea:2b:4f:
                    99:1d:1d:8c:1c:3d:84:95:79:87:ee:02:5d:ac:fa:
                    91:6e:f7:85:46:ca:95:bf:69:67:35:8d:27:43:9b:
                    18:82:28:97:98:c7:f0:ed:93:7d:5a:79:76:a4:bd:
                    df:a4:43:42:18:dd:f3:d9:63:6d:05:96:2d:16:03:
                    1d:d1:42:17:a7:ae:0c:2c:fc:b7:f5:67:b2:94:bb:
                    60:3c:5c:bf:84:7c:13:ba:69:cd:96:45:66:b4:b8:
                    ed:12:3c:28:dc:2d:7d:49:f4:a6:f0:3d:ef:d5:1a:
                    91:d9:96:29:f5:9b:d2:28:2f:c7:ab:ce:ef:1c:1f:
                    cf:d0:50:be:1e:59:fc:14:7b:84:c6:b9:8d:54:46:
                    c5:f0:e1:c6:4f:ca:16:23:5a:91:a6:04:11:d2:38:
                    cc:04:bf:05:52:4c:3b:51:36:9a:ce:7c:34:7f:81:
                    f9:c0:3f:1c:db:fe:2d:02:84:0c:e1:d6:f4:d8:8d:
                    76:ce:02:15:a9:ec:46:49:f4:81:f9:19:3d:c6:e1:
                    e5:dc:df:ea:84:1e:d3:bc:f8:81:3b:95:8f:38:3e:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F4:86:E6:4A:64:C3:E4:CC:D5:8D:28:D3:47:95:56:F3:41:78:E5
            X509v3 Authority Key Identifier:
                keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:13:6b:e6:e5:ce:f5:59:60:fa:cb:a6:04:72:db:28:71:
         07:20:4d:a1:3c:93:f5:e5:60:7a:fc:43:64:e3:7a:c8:68:b8:
         12:a9:07:05:bc:16:f7:58:ef:b2:85:a4:9f:64:5b:d0:1b:70:
         08:be:d4:01:8b:49:6c:f3:2c:eb:10:e5:c0:fa:47:30:ec:65:
         50:b5:bd:ba:aa:3d:03:45:47:1b:a7:1c:d2:4d:dc:5f:17:7d:
         67:83:ea:8a:7a:d3:93:97:a3:17:19:6c:0c:bc:19:8a:cb:05:
         06:d2:6f:6c:b1:11:a4:0a:84:97:86:b0:ff:02:8f:90:c4:d8:
         5a:ce:ab:39:53:38:9a:9e:5f:68:21:11:07:7e:81:ad:6b:92:
         80:43:dc:03:2b:e9:26:e9:bc:d9:5a:e4:14:e3:70:20:3a:06:
         f4:3d:4f:1d:ec:a2:40:99:ba:56:39:4a:7c:bd:69:b7:3f:8c:
         66:30:8a:19:50:d8:dc:62:88:57:5b:ac:c1:a4:15:dd:b2:db:
         25:4d:5f:6f:26:d8:f0:15:c2:36:a0:5f:39:46:10:14:40:96:
         55:93:b0:ee:7c:d9:a9:32:f1:0b:ec:27:c2:b3:60:b7:f2:f5:
         91:cf:6a:6e:b2:d7:98:71:bc:03:ed:e3:d4:72:be:d5:7c:30:
         87:b1:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----