Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File:                     HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier:          zQDf/D3Fq5H4Cp5O6QlGvV6vYWUPgu8kn6VnM5kcnBk=
Subject key identifier:   01:6C:4B:6D:CB:B5:CB:B6:65:9C:23:19:E5:8C:74:29:A4:8A:2A:DA
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer:       /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial:       01962F3DC932709B9A99DA0B1AAC1C57C2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number:          0C5E
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: Gs6NUWY45jL4Eq2AeeJhXphoisU1ven775RM9r2PsqA=)
                          2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:32:70:9b:9a:99:da:0b:1a:ac:1c:57:c2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=016c4b6dcbb5cbb6659c2319e58c7429a48a2ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:a2:c8:a6:7e:64:08:57:bc:57:30:2e:f7:
                    5b:3e:15:4f:11:bf:17:0d:37:4b:d1:15:12:ac:7a:
                    38:14:9d:cb:da:9c:04:4d:d6:ec:3d:2a:40:d4:05:
                    6c:5e:32:24:91:90:aa:df:3e:9d:43:ea:8b:fc:16:
                    d9:8e:c1:5c:82:c6:e5:6e:61:b8:aa:c6:34:be:74:
                    6c:e2:fd:72:ce:0a:12:3a:dd:1c:ca:ac:03:24:f8:
                    34:20:f4:9e:d7:59:9d:97:3f:a1:8b:5a:88:6c:40:
                    1e:8b:f0:67:43:a7:6f:ab:69:6e:e9:37:d6:54:9b:
                    3a:14:eb:4d:b8:04:3a:27:c9:2a:44:24:7e:73:61:
                    a3:f3:db:a5:f1:fb:9e:0b:1a:16:87:ca:71:29:0b:
                    9e:d9:4f:05:33:9d:42:7f:38:07:8f:d1:4d:23:11:
                    5b:54:80:57:72:e0:3a:f2:91:d4:d2:0d:c4:55:9c:
                    d9:6f:3c:14:b1:e8:eb:3b:b7:06:73:4b:2a:f1:d6:
                    50:7b:bd:19:93:b7:41:29:5f:1d:23:dc:90:d9:fb:
                    4a:59:49:e5:26:b3:e8:52:0a:76:26:9b:c3:a7:26:
                    3f:ee:62:18:0d:8f:b7:e2:6b:aa:c0:ba:1b:f1:48:
                    6a:e6:99:35:a4:06:6c:2a:1f:56:27:c3:da:44:a6:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:4B:6D:CB:B5:CB:B6:65:9C:23:19:E5:8C:74:29:A4:8A:2A:DA
            X509v3 Authority Key Identifier:
                keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:8e:20:be:6b:8a:bc:2a:22:b7:19:c2:e0:2c:16:7a:28:
         b8:d2:6f:47:0a:b7:72:d2:d6:b1:b0:8e:23:ee:83:75:c6:0c:
         b7:e4:6d:ed:57:ee:65:5a:4b:73:4c:5e:0a:5c:10:06:c4:d5:
         5c:39:fb:b3:b5:f7:22:e3:b9:c0:e1:91:64:87:e0:d2:4f:70:
         96:12:d3:82:be:fd:13:a2:65:3f:b6:56:1a:ac:c2:e5:f9:cb:
         a0:74:9b:13:bc:fc:a0:bb:2d:67:e4:8c:d7:95:29:46:ae:ed:
         ec:32:3a:51:61:d4:a3:c2:b8:e6:2d:6a:a5:25:c7:a8:a0:ab:
         8b:da:e9:7c:2a:93:01:9b:c5:de:33:7f:6c:4f:28:9e:b5:4a:
         71:c0:80:a2:db:71:90:0e:ee:ee:69:af:db:d6:ea:6e:0f:62:
         c0:92:96:75:d8:f1:f7:7e:cf:52:3a:97:82:8f:ac:cd:91:7b:
         41:35:33:6b:bc:aa:99:24:6f:89:d9:c3:d0:90:3b:c4:66:de:
         bb:4a:59:79:f8:17:fe:5e:22:5b:73:06:ea:c4:1f:4d:cc:f7:
         0f:4c:46:ed:de:21:e2:5e:38:17:a2:b4:5e:52:e8:65:09:fd:
         c7:08:35:f4:8d:53:b2:66:bd:cf:3c:e2:80:a6:f2:92:6d:29:
         0d:89:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----