Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File:                     HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier:          Zr5uSjWbkjNYoTSM4UE8T18Kud5tNC9tqdixb3JLoPU=
Subject key identifier:   16:AD:BE:85:7A:CA:D7:5C:E6:C7:FD:8B:3E:92:82:F7:D9:5C:9C:54
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       01962FAB4DBF757CF4406154FAA6ADEBC68A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number:          127F
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: jVWts7Y5pI9x9tj5zaohlJThYoaB8PDEi6IrhvPyW4s=)
                          2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
                          3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:bf:75:7c:f4:40:61:54:fa:a6:ad:eb:c6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=16adbe857acad75ce6c7fd8b3e9282f7d95c9c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:98:f6:9a:02:3b:6b:fe:ec:b2:65:cd:f7:
                    45:39:5d:e5:43:95:0f:19:e3:73:1f:f5:79:f5:31:
                    2a:e5:13:95:ca:2d:55:ff:3c:7c:ea:f0:43:38:12:
                    06:a9:d1:2d:72:8c:48:d6:e1:54:86:37:be:84:06:
                    f6:21:a4:68:3f:cd:05:04:d2:f8:08:70:15:13:86:
                    c5:1d:64:52:db:b9:b6:8f:ec:dc:84:49:9d:c9:c0:
                    1e:5b:b6:ad:d2:3b:b0:83:1f:c1:82:e7:88:f3:65:
                    fc:d9:0a:fc:56:d3:e5:39:a9:cd:d9:ae:bc:21:d1:
                    35:2e:9c:92:ab:1b:e2:55:77:e3:ed:aa:c1:ce:65:
                    cf:51:84:0f:65:7f:31:a6:fa:bb:4c:41:b3:9f:54:
                    ff:74:5b:3c:90:2d:00:49:3a:72:ed:8e:00:fe:98:
                    5b:4d:b7:72:c0:07:b6:3b:d2:c0:d4:f1:cb:92:c4:
                    b5:28:4e:67:e4:64:ff:e8:93:80:97:04:f4:da:42:
                    a1:21:d2:d2:06:93:ec:e2:5d:49:25:ca:da:3e:71:
                    23:1b:a3:ea:e1:e3:eb:e5:9c:11:bd:de:0a:db:e6:
                    1c:5c:3e:9f:13:35:64:60:fc:83:22:97:f1:32:40:
                    25:d0:39:1e:92:4e:65:73:c3:41:f6:f5:da:d4:34:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:BE:85:7A:CA:D7:5C:E6:C7:FD:8B:3E:92:82:F7:D9:5C:9C:54
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:c1:b0:2d:25:cb:a4:45:66:85:f3:4c:d5:24:c9:ac:3e:
         47:dc:1a:d8:34:8f:8a:cf:57:8e:50:d7:eb:9c:2b:91:9c:33:
         76:5c:a6:df:c8:1c:47:80:18:08:a7:69:c7:c5:77:08:2c:93:
         f5:6d:0e:77:27:ee:54:4f:e2:89:4a:08:f1:15:cd:95:f3:9b:
         b3:69:b1:f3:df:a6:86:1f:a4:c5:56:e6:82:83:df:2f:62:bc:
         6c:1b:3b:37:9c:52:c7:7e:fb:13:41:e5:cd:02:39:60:6f:10:
         f9:26:6a:49:3d:e3:46:1b:ec:4b:99:23:99:7e:a4:41:29:44:
         1e:f4:53:66:63:d9:86:37:ee:60:47:6a:e3:af:26:52:ac:98:
         cb:cf:87:1c:1d:b8:e0:70:03:b9:c7:25:48:b1:f6:5b:7b:b4:
         1b:d6:7e:02:a1:b9:90:3a:ca:ce:88:e4:56:06:7d:f9:9a:fd:
         2e:2d:61:8a:c8:62:04:c6:1d:e1:04:f7:c8:58:4d:93:79:d2:
         a9:39:b1:68:2b:4c:fe:fe:b0:ed:16:f4:65:2c:a7:14:7f:47:
         44:ce:c0:d9:c1:ba:ad:d8:ba:b6:f6:9c:b2:f9:23:f6:c4:b3:
         88:a4:6e:31:cc:f1:5e:5e:2a:3e:57:26:90:f7:0c:c2:7f:74:
         47:af:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----