Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File:                     HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier:          +KNiHReobk0NtbVU0jCgciB/wpf0G2uvSazciCmkIFQ=
Subject key identifier:   11:C1:FF:F4:C0:FA:DC:7C:14:04:28:2F:6D:30:A0:DA:B9:AC:BC:D4
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer:       /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial:       01962E61A4B705F5BB1A47E9D973A635C3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number:          0E78
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: RzQp1v+vYu+NvTOQyZ4YjrdwUIsYS6Tw3qnWDkLmGSI=)
                          2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:b7:05:f5:bb:1a:47:e9:d9:73:a6:35:c3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=11c1fff4c0fadc7c1404282f6d30a0dab9acbcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:c0:7c:67:ba:5c:6c:1a:a3:24:58:c0:1c:
                    42:d7:1e:f6:2f:40:b7:21:5d:e2:5a:71:d9:5f:c8:
                    8c:bf:be:b6:4f:ed:02:d4:d2:e2:78:33:cd:b7:52:
                    2b:55:8d:a8:c1:29:ae:86:f5:78:b5:84:d0:39:5d:
                    52:26:4c:68:7a:a1:f5:4f:bd:ea:b1:b0:b1:f8:f3:
                    32:60:fe:70:2d:88:24:65:05:38:47:9d:e7:e3:3a:
                    b7:51:f0:c7:ef:fb:ff:2a:a0:e2:ea:b4:75:44:8e:
                    3a:9f:23:2c:06:76:e8:fd:5f:28:3c:22:81:18:b0:
                    11:61:df:88:fb:d2:a7:3f:08:36:46:3e:2c:8f:86:
                    cc:81:fe:d0:c6:ee:6e:37:49:e8:e9:18:ad:af:ee:
                    ba:14:80:4a:0b:3d:f3:79:4f:b7:4b:36:dc:03:af:
                    20:95:e7:fd:26:73:1a:26:56:d9:4c:5e:3c:70:14:
                    b0:3b:e8:35:24:52:03:37:48:e5:e5:3c:83:46:91:
                    47:b3:71:3a:01:be:48:8a:48:b8:81:64:37:22:99:
                    4e:39:4d:4a:35:4a:f4:f8:51:1a:3d:9b:00:f8:50:
                    78:0a:69:e0:41:1a:ce:97:ed:f3:b2:23:35:55:a8:
                    40:3c:18:8f:b8:f8:b7:25:b7:e3:bd:e6:66:4c:66:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:FF:F4:C0:FA:DC:7C:14:04:28:2F:6D:30:A0:DA:B9:AC:BC:D4
            X509v3 Authority Key Identifier:
                keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:a2:09:d8:18:56:ae:9d:39:6e:74:67:84:b1:6e:a1:bf:
         91:7b:a3:cc:ad:83:23:ba:8d:06:77:f1:41:03:4b:82:c6:20:
         4a:6a:b7:74:33:f8:ed:7a:6d:f3:88:a4:7c:18:f2:d8:1c:22:
         d9:8d:0a:a6:45:fd:c2:a3:6b:2d:73:39:c4:ec:56:82:cd:7b:
         5e:df:2b:15:cf:0b:93:e7:d8:dc:a4:ef:54:2e:bb:74:da:bd:
         47:f4:d4:0b:6f:f5:77:1d:b3:30:21:07:2e:97:76:af:30:2a:
         75:80:56:e1:76:aa:43:35:9d:6d:1e:ef:cf:4c:f1:09:c8:43:
         f2:26:67:6b:ea:01:dd:fc:1c:cb:cc:eb:0e:c9:c2:5e:aa:93:
         ad:2d:f3:cc:98:b5:4a:a0:eb:38:ba:8e:b5:6e:f2:54:cb:b6:
         5d:d8:4c:81:92:5a:3b:7b:ae:02:bf:22:8a:b3:97:69:53:9f:
         a2:4e:4a:c4:71:dc:27:ac:8f:b7:be:54:db:20:ea:72:2b:19:
         0e:4e:7f:79:0b:d8:d0:c2:50:cf:be:2e:12:fc:6d:e8:37:18:
         ec:24:53:ef:d6:b9:e4:82:09:8b:a5:77:24:0c:90:69:f1:27:
         66:c7:87:72:82:d7:11:e2:b2:50:d6:7b:53:1b:21:7b:30:2f:
         00:4b:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----