Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File:                     HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier:          EKvquMb3l6KmKz1F4yVQsxDqU6+RIyGpOP9rTAe17hE=
Subject key identifier:   6E:1B:C9:71:B1:61:7F:45:DE:DC:3B:1C:AC:55:D0:42:3E:CB:56:D2
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer:       /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial:       01962F74752D1C72ABE773DB13B1648793A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number:          030A
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
                          2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: uvp8gRLJZH4CaDkKjumizcKjoVM0L4pcucTn7RqJr5Q=)
                          3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:2d:1c:72:ab:e7:73:db:13:b1:64:87:93:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=6e1bc971b1617f45dedc3b1cac55d0423ecb56d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:24:bb:e6:c4:4d:1e:44:93:4e:0b:fd:29:
                    96:b3:f7:82:d6:9a:5d:3d:f6:7c:97:b7:3b:6b:d4:
                    5c:04:07:97:5a:7e:b4:cb:c0:9d:c4:d4:f1:8d:1f:
                    51:8f:98:f8:32:d0:ca:91:7d:df:6a:93:4e:19:7f:
                    17:52:73:d3:a4:f1:85:ed:10:dd:af:8f:40:69:53:
                    98:36:30:ac:6f:4e:3d:0e:28:52:9a:2e:37:18:39:
                    7e:cd:87:dc:f1:ff:fd:87:6d:0e:cc:6c:a5:88:14:
                    59:bb:c1:64:da:e5:0e:09:18:44:ba:21:47:c5:14:
                    12:eb:76:11:81:ce:90:83:f4:da:f2:e9:bb:8e:b5:
                    98:9d:94:04:00:9b:22:88:28:e3:6b:98:ef:66:11:
                    61:3a:b4:cb:c4:0a:84:d3:3c:cf:4b:d9:bd:25:ab:
                    e6:ac:b2:45:dc:27:50:de:5e:e7:e1:73:5a:cf:8b:
                    a9:d3:7d:97:73:cb:aa:6f:52:8e:d3:42:36:57:b2:
                    2f:16:32:10:39:f1:d8:59:b3:12:35:f4:58:61:d3:
                    5e:69:31:7a:b6:ec:29:7e:48:93:3c:f8:07:97:b3:
                    b7:41:7c:16:e3:17:8e:55:cf:64:5b:39:56:48:5c:
                    b2:44:60:37:1a:14:b9:0d:5e:50:20:89:9e:8b:87:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1B:C9:71:B1:61:7F:45:DE:DC:3B:1C:AC:55:D0:42:3E:CB:56:D2
            X509v3 Authority Key Identifier:
                keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:da:51:43:d0:60:f4:f8:f5:69:68:4c:05:7e:4e:15:03:3b:
         97:57:08:82:b1:06:a1:e7:a1:ff:6c:38:b3:19:f9:f0:9a:42:
         56:43:39:96:2b:d1:90:32:65:b3:57:74:b5:b9:b7:34:97:08:
         6c:63:96:95:44:7b:cb:91:f3:b8:0e:65:74:51:43:b0:06:95:
         5d:33:bc:5d:cb:75:48:fc:e1:e4:50:9c:04:ce:9c:39:d9:45:
         10:0d:a6:c1:43:d7:e2:0a:a3:64:6e:2d:c4:bb:35:ef:aa:e8:
         57:91:79:7a:4b:3c:55:0d:5d:c4:47:bc:43:c9:4a:b6:0b:26:
         3e:9e:f9:6e:b2:a9:68:92:eb:0b:62:0b:8d:d6:f8:62:d7:e9:
         5b:47:4f:f2:2e:26:3a:fa:5f:0a:37:62:58:41:36:8c:47:88:
         b4:ae:7e:a7:31:39:a9:70:85:5a:6c:7c:22:c9:27:c8:5e:fc:
         05:d6:8c:66:dd:00:85:c6:0c:87:1f:b0:57:09:a9:ee:2a:78:
         8c:a4:ae:45:88:62:25:8d:db:0e:0a:39:b6:74:b3:c5:11:90:
         3e:e7:80:a7:54:9c:28:a4:68:e7:a7:37:88:4b:8a:65:d3:20:
         e0:c1:7a:69:71:60:5b:5b:d3:09:8b:65:3d:4a:f7:ba:af:ac:
         3c:fe:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----