Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          SLr/+R99RHpKx5SFsDitnsCHdj1avnlDoD4uweBCTh8=
Subject key identifier:   F7:F5:08:62:66:F2:4D:4D:24:CD:AC:AE:2A:9A:9A:95:2B:1A:38:BD
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       01962DF40909CB9E9A37199A900AEFB57C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          1252
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=)
                          2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=)
                          3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=)
                          4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=)
                          5: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=)
                          6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: 6lgTsbZqOQfYkHez9STFE7ggxBmvN/tIe6+nPgAaa40=)
                          7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=)
                          8: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=)
                          9: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=)
                          10: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=)
                          11: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=)
                          12: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=)
                          13: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=)
                          14: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=)
                          15: dpNKQ2Sgz6QIHDbXymZzkoop83E.roa (hash: VrlYMgpMUbMGcZ9vFi+tBzjsUYnk4uGqxHrElmnVkpU=)
                          16: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=)
                          17: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=)
                          18: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=)
                          19: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=)
                          20: w9RX6MaAp0BwQCPK8hrZIWWzFm4.roa (hash: 6rxWErjQqbL7+OcI7QwVV76+tY/f2tbAGsAv/hz0KnE=)
                          21: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=)
                          22: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:09:09:cb:9e:9a:37:19:9a:90:0a:ef:b5:7c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=f7f5086266f24d4d24cdacae2a9a9a952b1a38bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:3b:d7:0e:31:04:d1:a2:bf:cb:86:f7:3b:
                    96:70:02:07:1d:ca:67:0a:6e:14:ab:23:73:bf:f8:
                    80:b4:a0:33:24:c2:99:88:cc:fd:ce:c4:5f:21:f1:
                    55:4f:93:77:1c:d5:ce:74:7c:58:87:ad:e5:f7:77:
                    c2:f8:a1:ef:fe:e5:0c:b6:86:99:d2:96:c8:8e:91:
                    f1:e7:11:93:85:3f:ce:12:09:e2:f4:ae:b9:64:02:
                    e1:d8:d3:35:c0:ca:1d:7a:19:46:1a:64:0d:ed:de:
                    19:45:05:dd:8d:46:c6:c6:16:72:e5:bc:96:ab:56:
                    73:a8:ab:d5:73:3e:3c:62:51:b6:a7:ba:fd:ce:24:
                    0f:8f:7a:4d:e8:80:b1:f1:bf:c4:a6:fd:90:39:d0:
                    58:0a:d6:de:68:90:69:ee:48:a8:0e:55:77:35:c9:
                    31:f0:a6:b4:af:60:2e:8b:9f:bc:74:c1:67:b1:dc:
                    e0:8c:7b:47:48:85:37:39:ad:04:29:71:6c:55:3f:
                    8e:d6:d6:28:69:36:78:4b:a7:1c:80:f9:59:c0:0a:
                    f9:ca:9d:a2:e2:cf:6f:20:e3:04:e9:1b:86:29:0b:
                    cc:e3:3a:89:4e:f0:ff:e4:1c:1e:98:37:7a:5b:09:
                    40:cb:55:d0:d6:dd:32:b5:43:92:87:95:1e:c2:94:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:08:62:66:F2:4D:4D:24:CD:AC:AE:2A:9A:9A:95:2B:1A:38:BD
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:33:02:4d:23:ac:26:b2:e0:49:40:58:e9:e7:81:9b:b5:
         45:aa:a9:1f:56:ef:70:72:a1:65:0f:16:1c:d4:9d:fe:8b:c5:
         70:31:85:58:dc:ff:6f:b7:40:be:b5:d0:35:eb:e0:f0:c2:62:
         be:85:bd:b8:49:7a:a7:68:7d:0a:64:ac:ec:90:17:4f:a6:97:
         d6:fe:06:ae:39:d2:ed:7c:40:3f:37:eb:10:0c:3c:3d:63:af:
         b2:27:ec:52:c4:1b:80:26:a9:8f:59:93:7d:87:d8:e0:57:d6:
         e7:6a:24:39:06:11:81:82:12:96:60:52:09:87:7d:ae:aa:f7:
         a1:77:a4:12:22:c1:d0:a7:35:8c:3b:75:aa:ac:96:a1:54:dc:
         61:4d:9c:64:90:d7:a9:99:28:a3:38:66:5f:6a:53:74:e1:26:
         d1:f2:ad:13:14:10:22:09:9b:b8:eb:90:12:61:fd:e4:c5:e1:
         e2:c7:ca:cc:66:c0:94:be:49:b5:3c:49:33:be:69:78:eb:b6:
         e8:99:30:6e:31:13:a8:08:4c:a4:64:9f:43:b4:4a:bf:b7:5e:
         0d:d3:35:30:1a:dd:2d:ce:6b:1f:1d:17:41:24:55:b0:80:24:
         44:b5:23:58:86:b7:f3:fe:55:8b:f3:dc:e6:bf:a0:52:09:1b:
         00:ed:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----