Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File:                     HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier:          zNjNwevlHyonvcIWaGAgjVKsXXNkWtPj/xaWfxyNnVs=
Subject key identifier:   2D:9F:7A:E9:0E:7C:E3:B8:27:5B:4F:24:D0:BD:7E:4F:6D:62:9D:F5
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer:       /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial:       01962E9962C2A8B634D4442EF6D50FDF8027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: 7dyCQwtEET6NGs3MHVgfH6BIuT9td9uBPVPrXhtVwnc=)
                          2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:c2:a8:b6:34:d4:44:2e:f6:d5:0f:df:80:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=2d9f7ae90e7ce3b8275b4f24d0bd7e4f6d629df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:2f:64:ee:01:09:53:d6:b7:2e:c2:ef:e7:
                    c7:3e:38:af:94:c0:cf:c5:18:29:c1:f5:4c:75:99:
                    cc:c1:0f:0c:b6:4c:ae:3a:b1:94:e2:ec:9c:a5:70:
                    4f:ac:b0:29:98:ff:6f:af:55:f9:d9:3b:01:2c:5d:
                    48:11:bf:9e:4c:1d:f6:0c:ee:67:a7:db:9e:b7:ea:
                    f1:70:2a:0e:1e:23:bc:b6:3f:ef:ca:1a:a1:b1:3e:
                    ec:a4:14:ff:29:bc:64:67:7f:f1:25:30:1f:4a:57:
                    e7:b4:b9:5a:a8:e3:33:cd:b5:d7:ff:35:76:95:7a:
                    a2:ce:d3:ca:1f:e6:7e:39:67:37:64:8c:57:67:a4:
                    04:11:5e:76:ca:d5:c6:97:26:f8:fd:27:65:ab:a9:
                    4f:63:75:72:f4:41:9f:16:93:0a:e1:0b:e3:56:03:
                    11:f8:2f:eb:a1:f7:15:dd:70:e7:67:e5:f8:1c:bc:
                    23:68:30:9e:2f:52:f4:c7:09:15:b9:01:b3:be:fb:
                    2c:ab:c8:0a:55:11:5d:a6:69:a9:04:c4:f8:10:5b:
                    9c:15:9f:3d:61:d9:e3:ff:84:69:a5:21:5e:97:27:
                    89:0b:64:92:84:53:ee:a7:33:14:e1:48:11:61:b7:
                    92:b7:6f:22:35:cb:d9:f2:57:e1:8b:c8:88:d5:c7:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9F:7A:E9:0E:7C:E3:B8:27:5B:4F:24:D0:BD:7E:4F:6D:62:9D:F5
            X509v3 Authority Key Identifier:
                keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:25:92:fa:ef:f1:d0:d8:49:b5:38:99:9f:05:96:b6:e6:
         04:f1:4b:34:cc:7a:33:6b:26:80:6e:54:f0:af:4c:38:b6:b0:
         17:2a:68:53:29:b7:0b:36:8d:9e:2e:19:a4:66:3d:4e:66:ec:
         6f:67:5a:cc:dc:20:5b:fe:08:d3:a0:6c:90:52:2d:0c:06:5d:
         a4:6d:e2:33:1d:4e:10:8b:01:f1:29:37:27:8a:6d:a2:81:de:
         71:dd:d3:22:11:39:df:1f:1a:99:64:e4:38:f7:e3:10:8b:44:
         88:f2:fd:4f:01:06:b3:70:31:ad:4f:89:9f:ad:06:40:ef:fa:
         f5:eb:df:05:6c:90:ed:d3:b9:47:e4:a7:ea:bf:aa:67:24:aa:
         ba:88:01:97:56:10:91:b4:44:94:51:51:af:2d:de:b6:b7:3f:
         36:e4:73:70:e2:44:2d:9b:04:b4:37:16:c8:0d:cc:dd:bb:05:
         8c:88:74:fc:d3:ad:87:15:d8:1c:d9:ea:b0:b9:09:ca:82:b5:
         30:cd:87:80:d3:39:c8:3f:53:b8:9a:10:17:39:5c:1d:bf:98:
         e4:ae:95:53:62:0c:17:4f:b1:50:5b:e1:1d:c9:a4:83:5c:7e:
         9b:1f:bc:97:cc:00:71:4e:8e:16:ff:be:59:08:5a:a2:00:14:
         05:e3:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----