Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File:                     HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier:          70pAlGNTGJTHJaKAnrbKNXi90u4AuTlW6eQ5IK0+xuQ=
Subject key identifier:   F0:AB:F7:A2:CB:57:03:DB:D4:50:12:26:35:5D:76:1E:4B:7E:E2:8D
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer:       /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial:       01962F74D3ED0D403C9DD7FA9EDCBEBC4A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number:          117F
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 1N1FY9ReqgGhO1SwHgl8M7Tx42uyteN65EbIPaTahaQ=)
                          2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:ed:0d:40:3c:9d:d7:fa:9e:dc:be:bc:4a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=f0abf7a2cb5703dbd4501226355d761e4b7ee28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:cc:c1:b3:58:87:18:50:88:84:f8:03:01:
                    11:96:62:cc:17:6d:d2:69:5d:b2:84:ed:dd:b4:4e:
                    3c:30:63:d7:5d:c2:3d:f6:76:23:27:95:27:74:09:
                    a1:81:11:5f:45:f2:74:04:c1:ae:ab:56:5a:cd:2c:
                    6a:df:48:f9:c3:e5:0f:f0:6c:aa:62:92:a6:54:4d:
                    9c:74:19:de:78:2d:c0:b1:a3:9b:5e:48:67:48:ec:
                    f7:a6:13:11:3a:99:84:52:63:75:07:5e:72:8e:aa:
                    b4:21:bf:24:7e:d0:de:45:47:ee:d2:fa:22:bb:ad:
                    60:e2:9f:2d:18:d9:81:32:55:1e:3b:59:6f:78:30:
                    0c:d6:91:2b:dd:fa:63:7b:f9:7a:5e:70:37:e3:95:
                    a2:b6:f6:2e:eb:aa:5a:f4:e2:a0:ab:0b:3f:46:5d:
                    cc:9f:3b:be:5a:e6:9b:0d:1d:38:77:dd:f1:f1:32:
                    fb:d5:d5:43:67:46:7d:4e:fc:90:ee:e2:ec:be:c2:
                    0f:de:1d:69:1c:6f:35:8e:f6:4e:0a:84:ce:cc:58:
                    94:8c:28:4d:e8:1a:d4:f0:0b:ec:fe:5f:13:14:2e:
                    d0:b3:fa:36:c5:b6:91:3f:17:71:48:b7:88:50:42:
                    96:98:a6:64:92:00:e7:e2:57:19:f5:c4:b7:fe:50:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:F7:A2:CB:57:03:DB:D4:50:12:26:35:5D:76:1E:4B:7E:E2:8D
            X509v3 Authority Key Identifier:
                keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f3:71:9d:ef:b4:70:7c:54:f4:d2:56:d5:49:51:84:9f:41:
         30:34:42:5d:1a:31:e1:12:55:6b:89:35:ad:60:66:3b:ce:76:
         a5:1b:87:88:cb:7d:7a:43:6f:0b:05:2a:c0:d7:41:c5:9d:44:
         8b:73:9d:97:e9:d2:6e:08:fb:e1:d9:0e:9c:89:f9:24:1a:0b:
         80:e2:59:20:52:29:01:fb:b5:dc:7d:2e:1d:8a:9a:aa:31:0d:
         c3:05:1e:3b:a0:33:7e:02:83:4e:04:7c:11:40:9b:6d:d5:fe:
         ac:e6:33:bc:48:63:fb:60:69:c1:43:68:bd:aa:8a:8f:34:58:
         45:bf:2e:30:36:9e:bd:4b:7b:72:07:90:05:ab:12:d9:33:9c:
         8d:4f:8f:b2:e1:2c:ad:ae:01:64:de:18:29:d5:32:b6:c9:ae:
         c6:86:94:94:1c:4c:d5:ab:63:80:8a:31:14:ab:ab:d7:63:5d:
         54:aa:93:82:ae:35:71:00:cb:5c:c7:37:f7:d4:fe:ba:10:cf:
         1d:89:5b:bc:da:ce:7e:f7:8e:5e:63:5d:ba:86:57:2a:bf:ad:
         54:a3:0a:a3:e3:46:26:b8:95:19:ba:ee:21:99:93:32:1b:cc:
         18:fc:50:d2:ce:17:8c:24:88:49:d3:75:5f:e6:dc:29:b5:3d:
         5c:9c:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----