Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File:                     HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier:          OI+nMBvu2vDPsLSGWIcoBkPJA7tN5aXdWjhmzn1PBN0=
Subject key identifier:   71:93:AD:7B:0D:DB:8B:BB:7C:EE:4D:FC:70:84:8C:13:B6:53:63:CE
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer:       /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial:       01962F067295C605B0DABAB1D1766B4E16EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: eouyoVCTULyIbZUFOH/RO7d0cMUsx3M4pVVae7g9BhI=)
                          2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:72:95:c6:05:b0:da:ba:b1:d1:76:6b:4e:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=7193ad7b0ddb8bbb7cee4dfc70848c13b65363ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:0c:f2:b7:82:68:6b:ea:84:bc:da:a6:83:
                    99:6c:f1:60:33:2a:3d:5f:09:a1:64:83:5e:76:ea:
                    3a:55:ec:47:56:8a:6e:80:b9:99:ab:93:af:b1:2a:
                    9e:e2:92:e2:85:0e:b2:1e:d2:60:dc:e4:da:73:f0:
                    41:38:a4:21:31:35:e6:42:e6:e7:54:79:e2:1b:5f:
                    d9:5b:82:a2:51:99:87:39:d5:c9:47:ac:f5:66:1e:
                    f8:64:e2:d6:9b:2a:61:03:a6:6c:f5:01:fb:3a:1b:
                    f3:ff:d1:60:59:4d:cf:1f:db:0f:77:97:02:52:2a:
                    9a:96:25:a9:f9:43:bf:76:1f:52:30:15:82:4b:a8:
                    72:49:6a:39:b4:45:af:29:2a:fb:73:27:23:a5:c7:
                    a7:1d:25:58:c0:c5:1b:12:2e:42:f1:df:be:e8:51:
                    7a:73:19:74:a5:b7:f4:69:36:59:8f:b6:3d:0b:e8:
                    5f:bd:ec:2d:71:f8:92:76:56:57:3b:24:5c:f3:71:
                    c2:3a:3a:a8:b3:1f:15:2f:94:24:20:95:cb:03:21:
                    70:92:b6:48:14:25:b6:21:c1:a6:1a:10:24:de:d5:
                    16:b3:f5:da:35:54:5e:e7:de:81:4b:b6:c6:27:56:
                    8f:3c:4a:5e:ad:bd:b0:3c:a1:d6:42:c6:60:37:a1:
                    ee:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:93:AD:7B:0D:DB:8B:BB:7C:EE:4D:FC:70:84:8C:13:B6:53:63:CE
            X509v3 Authority Key Identifier:
                keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:67:a3:09:69:1c:7e:2a:bb:56:1a:d8:8b:60:13:ff:3b:4d:
         1c:21:26:9e:aa:7f:90:c4:fc:39:2b:c8:7b:00:d0:89:4b:dc:
         15:25:bd:55:9b:3a:20:28:c1:7b:3c:2f:30:5b:26:e8:02:0b:
         10:f8:b0:4c:ee:6b:61:e4:78:05:5c:c8:52:91:c8:7e:ad:06:
         67:56:ab:b1:ef:3d:cf:b3:79:80:fc:7f:71:69:cb:1a:69:39:
         31:23:a1:da:b0:6f:db:17:53:df:89:20:d9:06:64:85:bc:9b:
         1e:ea:e9:3f:80:8e:33:7d:f6:63:15:9a:a3:5e:62:53:74:6f:
         a9:eb:35:f3:34:fd:86:b2:98:d6:f0:72:21:f5:cf:31:a5:93:
         fa:c3:41:73:c6:ac:29:7b:9b:ab:2b:4f:3e:50:83:8e:00:e7:
         fd:4a:79:6e:ae:5d:c8:93:7c:cd:27:68:a9:01:c1:39:47:a4:
         90:79:4f:38:e8:57:31:a1:21:ce:fb:30:19:36:0e:19:68:53:
         3e:f0:50:ba:57:e2:b1:a7:90:b5:f2:20:85:ef:77:b6:24:81:
         c2:8e:43:ab:73:e3:84:87:77:f7:f9:94:a6:cb:fd:f1:84:4d:
         19:d7:2d:16:4a:c0:7f:f4:0d:d0:63:26:a4:75:66:38:d8:94:
         47:38:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----