Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File:                     HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier:          JdSoEnX9CpoCh6QDsNrN2P3s0F2XVprz6E0lW96/3Cc=
Subject key identifier:   85:16:77:48:B5:24:6A:9E:2E:66:BE:D5:6E:7A:B9:C7:1C:C4:F0:BE
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer:       /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial:       01962E61F2728E1EAB2AE7161A31651EC3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number:          014A
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: BCpGmAAybEKlV3wOuVSBe587d6A.roa (hash: OMYJrykGqoEHSJmtTAAKG/WGPSWVW40cgEc5tVnY4H8=)
                          2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: flPiljSxExAGspXbjjtMdKgwUHhTubD+ucqP+IVVVOA=)
                          3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f2:72:8e:1e:ab:2a:e7:16:1a:31:65:1e:c3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=85167748b5246a9e2e66bed56e7ab9c71cc4f0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:5f:d0:8c:ff:cb:70:44:e4:33:8e:bb:d3:
                    09:63:ba:45:73:5d:cd:9f:a2:c1:2f:bb:b0:b5:2d:
                    0a:d5:b2:53:df:74:ae:db:c9:fb:e1:48:d5:d8:c6:
                    28:f8:1d:1f:a2:49:34:0a:fe:4f:8f:4c:31:5f:6e:
                    1a:36:13:90:9f:eb:59:54:c6:d6:d3:22:0d:d1:26:
                    1e:56:0c:7d:6a:94:f6:f9:12:d9:2e:6d:07:67:32:
                    a2:49:03:29:22:0f:4d:51:b9:75:ff:77:55:27:7e:
                    90:c0:c6:c0:13:3f:e7:a0:96:c2:c7:08:3a:a0:8f:
                    7b:3b:cd:f5:e5:16:12:6c:0c:fc:c7:1e:0a:21:93:
                    b6:4c:c0:bf:40:00:9c:be:fc:e4:e0:5e:46:1e:b5:
                    cb:c6:a9:97:da:ee:64:6c:da:40:b6:73:b4:76:0d:
                    e7:61:4d:cd:a1:ce:d4:33:b5:51:ba:f7:8f:88:46:
                    d7:47:f1:27:f0:b2:3e:91:67:bc:1d:5a:27:17:67:
                    c5:80:cf:fa:66:32:22:15:cb:49:d3:76:2c:36:0a:
                    c7:b5:53:79:ee:7c:73:67:0d:40:d3:a8:87:79:53:
                    be:c4:f1:19:8d:6f:b1:da:f5:2a:32:05:f4:de:6a:
                    3f:94:e6:4a:5f:dc:b9:71:d9:91:82:5e:05:e2:49:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:77:48:B5:24:6A:9E:2E:66:BE:D5:6E:7A:B9:C7:1C:C4:F0:BE
            X509v3 Authority Key Identifier:
                keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:18:28:de:09:50:f5:a2:b0:bb:84:f1:db:0d:03:9b:f3:4b:
         0e:7b:3c:fc:65:7d:6f:7b:53:31:ff:ec:33:e3:84:06:5f:47:
         79:40:64:5c:60:1a:a5:06:6b:ab:51:40:c9:c0:83:b8:04:22:
         4b:28:16:f9:d7:13:08:84:6a:ef:b9:70:cb:33:7c:71:44:86:
         62:36:23:00:5c:98:bb:86:02:7d:ab:7b:51:06:f4:32:e8:04:
         fc:5e:b9:0c:43:63:25:c0:da:61:9f:ea:9b:15:03:ce:c6:72:
         81:61:ca:08:86:58:70:20:4f:52:47:34:2a:c9:53:05:8a:bf:
         c0:43:18:9a:d8:df:02:39:ee:d5:3b:eb:5c:96:85:07:98:3a:
         b3:82:2b:8c:bd:84:d0:d8:00:78:1d:09:c4:36:a3:c6:0f:b1:
         d6:5b:11:6f:e6:cf:ee:1b:94:33:d9:24:c6:18:27:9f:d6:bd:
         ef:48:5c:8d:b0:81:a2:b1:07:81:b0:89:35:13:98:de:ad:8b:
         35:6a:75:14:9e:9e:f5:a7:89:cc:a6:88:28:a1:43:a1:7c:16:
         d0:e7:ea:85:7c:ae:4b:c6:f9:5d:09:0c:ae:52:ce:1a:97:df:
         1b:38:cb:6e:09:35:36:1b:1c:d2:05:d9:d3:4e:6d:41:80:f5:
         b7:d3:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----