Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File:                     H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier:          uP6TQopVUFGfc7eqny9cAM4Xr1Pn3aYfVJunccHQ3zc=
Subject key identifier:   08:18:A2:A0:14:62:4A:DC:CE:E1:D7:1D:B7:B5:F7:45:85:39:BC:8B
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer:       /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial:       01962FAB1D8B1A80B35FD41C3AFC2B82BE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: tUGUY+AI3gfYeT+TyCYVFdNnFij01nsa7XX65XFnLvM=)
                          2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
                          3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1d:8b:1a:80:b3:5f:d4:1c:3a:fc:2b:82:be:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=0818a2a014624adccee1d71db7b5f7458539bc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:8d:64:18:df:38:14:7d:35:d5:45:e6:92:
                    13:5e:c5:d1:08:9e:e8:b3:bc:ba:e7:d7:0b:30:b5:
                    6f:82:ba:b8:50:70:e2:fa:40:e9:40:3f:6e:c0:7a:
                    d5:fc:2e:57:2d:9b:41:c9:ce:e5:f4:03:70:16:63:
                    00:e2:67:b2:96:50:3c:25:10:85:a0:1a:fe:35:f1:
                    02:01:71:85:ff:17:68:f6:0a:97:aa:9c:f7:6c:e1:
                    54:04:ec:74:ff:48:4b:6f:a3:ae:0d:4b:3f:5c:94:
                    34:d7:12:c8:6b:e4:31:7c:a6:4a:8d:9b:07:2a:eb:
                    f5:83:23:aa:a8:90:f5:cd:2d:ca:36:c7:d7:6b:27:
                    bf:3a:dd:68:35:26:8e:24:c9:eb:55:52:f8:0f:17:
                    35:89:83:5f:a8:7c:e3:32:8a:23:30:79:f0:70:f1:
                    00:75:6e:ed:50:cb:56:18:2e:8c:9c:37:24:0d:8d:
                    09:9c:61:fa:2b:9f:29:90:e4:15:78:1a:67:54:a5:
                    64:65:b4:ef:08:80:a4:c8:5b:34:b3:46:8a:42:e2:
                    5d:26:18:4b:8a:25:5d:b0:c7:74:ad:f8:7c:ac:80:
                    3a:79:c2:49:4d:d9:56:19:77:22:0e:39:f2:11:41:
                    fa:e8:df:93:22:87:e0:6c:dc:b7:fe:bd:0b:46:63:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:A2:A0:14:62:4A:DC:CE:E1:D7:1D:B7:B5:F7:45:85:39:BC:8B
            X509v3 Authority Key Identifier:
                keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c1:5c:dc:0a:5b:cb:39:7b:05:f4:50:d4:66:13:0c:5f:08:
         7b:ee:4c:25:b7:e3:7a:7b:b9:7a:28:42:ed:b9:52:bc:dd:08:
         4f:31:14:56:1c:d7:cd:b1:12:9f:65:97:f6:d1:3f:53:a0:fb:
         32:10:41:30:4e:08:fb:ef:4c:3e:2b:57:c0:90:31:23:01:57:
         aa:cf:da:d0:67:3e:ff:ca:63:f2:31:e5:ac:ce:65:e7:22:d7:
         68:4a:72:dc:c8:5a:60:77:34:41:6b:24:32:30:e0:dc:1b:9b:
         d9:36:3f:95:ef:4b:28:47:4d:9f:d9:da:0a:c6:5d:31:3c:ea:
         c8:8f:c6:39:21:41:77:3f:c6:1b:45:1a:cd:23:b5:f2:66:27:
         3f:e2:9f:33:43:53:70:16:b0:08:3e:5e:73:da:c2:9e:1a:6c:
         18:68:7e:55:8e:f2:72:8a:dc:26:7e:b8:29:72:a7:41:4d:e9:
         57:73:62:a4:0e:de:a6:b7:de:5e:c3:be:21:51:03:3e:4c:d4:
         4b:4e:dc:55:00:c0:c4:dd:9f:04:be:e6:f7:fa:5b:0c:4c:34:
         ce:7d:36:11:8a:60:ed:8a:90:49:3b:a4:67:d0:df:67:ae:f5:
         7c:f1:34:80:d4:33:e5:ba:00:8c:58:f3:ac:58:2c:01:bb:5e:
         68:54:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----