Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File:                     HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier:          EVj22nWjjc92s6jLQGYqAQnJVD03vDEys8DRYN0MwKs=
Subject key identifier:   C0:ED:A6:6C:AA:60:00:D9:6C:EB:E8:8F:A0:20:73:55:1F:5B:4E:08
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer:       /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial:       01962E98D182ACB8C33C3B5F1936E620B872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: V/K6dp1Ce33kwnFVGD4AIyA448plwDWOkDc4TB8WbMo=)
                          2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d1:82:ac:b8:c3:3c:3b:5f:19:36:e6:20:b8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=c0eda66caa6000d96cebe88fa02073551f5b4e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:51:43:73:48:ea:c4:62:2d:07:94:20:43:
                    c6:cf:14:2a:1e:64:6a:48:46:00:7b:82:2c:de:73:
                    1d:a4:f6:3c:d6:1f:26:63:80:0b:c2:9d:38:22:55:
                    f8:df:f5:36:3e:b1:4f:ee:eb:56:59:47:ce:47:38:
                    21:d8:54:4f:5b:8e:5c:d5:61:70:66:d5:7b:26:6a:
                    e3:92:96:1b:77:17:ff:e7:80:bd:0d:5f:07:40:19:
                    df:90:25:a4:46:a8:86:d0:d6:c0:9a:a9:4b:13:45:
                    fb:a7:87:c6:f3:d9:04:27:a0:79:0d:bb:df:1f:6c:
                    8a:92:0d:cf:ef:f7:9d:65:f4:5a:7f:a9:78:f8:cb:
                    d2:81:b7:f1:89:5e:4f:a1:38:93:65:ab:d3:40:11:
                    34:a0:eb:35:28:6d:84:9e:cf:95:5d:09:70:61:a5:
                    0e:75:47:1d:ac:25:54:5a:03:4a:7c:7d:fc:b8:63:
                    fb:2d:6d:3d:63:8d:c4:66:ee:95:e4:dc:ed:3a:da:
                    a3:9f:67:1e:89:ff:aa:3a:b9:8a:58:ba:0c:46:e6:
                    7f:9b:b5:c6:9b:b4:45:b5:6a:06:16:68:58:98:63:
                    f0:64:0c:33:ad:1c:53:4c:f9:ba:93:d4:96:9c:b9:
                    53:51:ba:bc:67:fa:16:a5:62:ac:5e:e1:7f:8c:9c:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:A6:6C:AA:60:00:D9:6C:EB:E8:8F:A0:20:73:55:1F:5B:4E:08
            X509v3 Authority Key Identifier:
                keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:8f:c4:79:f2:ac:ed:04:c2:69:b1:8d:9d:16:b4:0e:2f:
         5c:72:b8:b1:74:36:b1:27:17:20:a2:ce:18:bc:22:7b:0f:93:
         c7:70:35:39:74:c2:99:d3:94:af:e0:1f:b2:84:a1:4f:89:79:
         57:16:e9:10:79:6e:93:97:1d:c5:60:87:87:07:5c:ee:43:37:
         c3:3e:96:ee:67:cb:ed:34:8a:a3:4f:e0:3a:0c:5c:d9:5e:f8:
         6c:e9:dd:33:ef:85:e5:a7:8e:79:65:87:49:9a:49:18:4c:77:
         a2:3a:ff:90:e4:9f:44:e8:74:b0:ec:5c:03:55:70:17:33:b3:
         5f:d8:84:f3:ab:1f:b4:75:fb:0c:8e:83:cf:f3:09:4d:3a:0d:
         f2:fb:1b:88:6a:bd:81:a8:12:61:5f:4d:ea:12:4e:37:dc:1c:
         c4:fb:3d:14:6d:a4:4b:9f:74:c7:23:6b:9a:9b:9b:84:9d:8c:
         36:8c:03:b5:8b:89:13:d0:01:4f:67:8c:6e:68:ac:df:72:fa:
         e7:44:20:7f:92:6f:0c:3b:f1:6a:ab:78:fc:72:74:22:de:bf:
         f0:b0:81:ec:00:a7:8f:84:96:af:0e:e6:02:d2:7b:ef:ea:86:
         23:cd:7e:36:3e:7f:1a:2e:5f:7c:92:16:42:1d:ed:fc:93:d2:
         c5:00:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----