Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
File:                     Hd51apttFAAMPhUNW31glbdhP-Q.mft (raw, json)
Hash identifier:          2BbFYdCdNyaUybAgUPX5sXb10kJUpq2co6x0pg4OR/U=
Subject key identifier:   7C:3D:02:55:C3:69:AB:D5:B4:5E:BB:E1:69:35:43:1E:44:11:76:89
Authority key identifier: 1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
Certificate issuer:       /CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Certificate serial:       01962F06AC79A2DB56B6850B9578D58CFDAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: Hd51apttFAAMPhUNW31glbdhP-Q.crl (hash: DrPvc9OlVdTvOucPiUCwZdeUarscnkq8Saj1day76NM=)
                          2: dcbMwMMoAbrSDYORYR-a2Au1hPA.roa (hash: GaJP4UO0sS8NGTP1pZn3Q8XkpBsgZUPrCjP5yXsfKKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:79:a2:db:56:b6:85:0b:95:78:d5:8c:fd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=7c3d0255c369abd5b45ebbe16935431e44117689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:38:f1:04:35:49:58:2b:f3:21:13:97:17:
                    fd:52:11:ce:2c:be:08:7a:79:e5:23:2a:af:03:ff:
                    70:5b:40:19:3e:40:62:50:a8:1a:84:76:d5:18:aa:
                    8a:95:d3:e4:b1:90:5f:0d:ae:d2:4e:64:6e:5f:14:
                    b8:87:72:13:9b:b3:da:ad:53:52:a5:ff:a6:0f:4d:
                    e7:21:8e:13:aa:cf:c1:4f:e2:9c:46:dc:67:ef:bd:
                    01:01:33:12:a5:3d:bb:70:71:13:4f:a5:67:39:c8:
                    6a:e7:3b:0d:d8:bf:6d:7f:87:e3:2e:94:b3:3c:5a:
                    84:ff:3f:6a:6b:c4:06:fd:5f:7e:6f:ed:f5:d5:0a:
                    d3:1f:cd:ff:a0:72:32:54:46:89:f6:16:18:b4:46:
                    a6:fd:a4:34:c3:f9:98:84:44:a4:db:2e:3e:59:2d:
                    0d:e3:d9:cd:9a:74:af:23:ce:f8:4f:db:42:f5:a5:
                    77:d2:7e:c6:c5:8b:76:21:0a:75:49:b8:52:67:61:
                    e7:69:41:dc:a8:cb:56:fc:e0:0d:24:14:75:14:de:
                    29:ae:1f:c3:38:f0:4e:80:3f:9d:36:6c:92:16:ac:
                    31:e6:e2:04:05:67:25:1d:24:7c:01:ba:87:64:35:
                    8d:12:33:be:3f:88:9f:1d:69:3b:8f:3e:06:2e:92:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3D:02:55:C3:69:AB:D5:B4:5E:BB:E1:69:35:43:1E:44:11:76:89
            X509v3 Authority Key Identifier:
                keyid:1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:a1:86:e7:f2:47:af:11:f5:d2:71:77:17:2c:2a:f4:00:
         c2:d0:d4:f5:26:d4:0b:07:c9:82:d1:55:e6:ee:03:1a:53:f5:
         83:49:eb:03:57:13:d5:68:44:a5:aa:f8:c5:22:c7:8c:77:e5:
         86:62:4a:35:6c:7a:d5:94:c5:0e:83:a1:fc:5a:36:b2:92:12:
         91:ec:83:2e:ca:e4:6e:01:40:6a:94:9e:2e:ea:be:86:33:df:
         79:5b:85:99:71:9f:35:1e:bf:fc:93:41:55:9b:02:79:42:7c:
         15:ac:8f:ad:cc:a8:0e:b4:52:b6:83:9b:d1:b8:a0:47:ef:42:
         c4:6c:bd:28:89:da:a3:1b:34:0b:ec:71:c0:f9:18:9b:aa:4e:
         ab:0c:83:90:a5:51:47:11:69:47:91:2b:87:0a:92:cd:fe:bd:
         40:56:41:ec:8c:fb:c5:14:63:83:e8:dc:c9:ff:91:93:7f:ad:
         51:47:7e:43:61:59:89:6e:6a:30:28:41:70:ad:28:73:82:cf:
         ad:93:f7:40:9b:dc:9c:83:fd:2a:74:18:b1:85:73:75:d3:ab:
         f2:f8:c0:59:a8:05:3f:61:0a:8d:0b:ac:e1:5e:63:cf:6c:a0:
         7b:d8:ee:98:52:0c:58:5f:30:87:b6:da:7f:a9:f6:03:30:02:
         89:1b:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----