Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File:                     HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier:          zYowr2Dz/To9HwjuZvZWmbbWKE1xOw8TNyQ7pxm7N6Q=
Subject key identifier:   55:72:F4:D4:79:C8:39:A6:F8:7E:AB:AD:EE:F0:D0:C5:3E:ED:DA:F3
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer:       /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial:       01962F3DD16DF142D30A2A73F99EB68CA2D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number:          1451
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: 74Aq9fIX6SJBE6MZeLic01ioRQgUV0ql6wuOyVVSgp4=)
                          2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:6d:f1:42:d3:0a:2a:73:f9:9e:b6:8c:a2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=5572f4d479c839a6f87eabadeef0d0c53eeddaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:c9:62:b5:4e:d4:8c:02:fd:30:6c:ca:87:
                    f1:9c:e6:c9:f1:3b:65:96:8b:f7:8b:d8:98:6b:9e:
                    ac:83:17:e7:e3:b9:c3:03:05:11:d1:66:7e:da:63:
                    87:f8:7e:f8:be:06:48:a7:72:a6:9c:35:97:45:d4:
                    41:2b:fb:c2:79:a9:7d:c5:0b:46:62:61:5c:1b:8b:
                    19:9d:e9:ee:c7:fd:95:fe:ad:1f:c1:be:2e:a0:1e:
                    44:1d:33:b8:b1:87:03:f6:c2:fe:80:8c:b3:c3:43:
                    40:86:72:68:db:98:b8:42:07:ab:bf:49:e2:a2:ca:
                    12:1b:c1:59:bb:9d:f3:2e:bd:2b:45:f0:5f:92:af:
                    b8:9b:2b:67:42:9c:29:e2:63:78:ad:aa:c1:99:2c:
                    e9:eb:00:26:9e:af:64:d9:c7:25:0b:29:eb:db:d5:
                    8e:4b:11:4a:0f:6b:5a:8e:df:4a:f1:aa:9a:b4:34:
                    68:72:e7:06:aa:0a:99:e3:08:70:67:a6:d6:3e:59:
                    fd:5d:55:4d:64:6f:48:84:66:37:42:63:2b:ae:80:
                    5a:d5:7b:99:3f:92:6d:c1:f7:23:c3:a7:8b:b1:7e:
                    e3:bc:3b:fe:bb:57:2a:f1:14:10:67:9c:ce:58:8c:
                    50:df:ca:0d:71:54:44:1e:90:59:f8:02:ed:5a:65:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:72:F4:D4:79:C8:39:A6:F8:7E:AB:AD:EE:F0:D0:C5:3E:ED:DA:F3
            X509v3 Authority Key Identifier:
                keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b0:65:71:b2:3b:0f:d1:9d:ca:53:cb:68:71:62:24:35:34:
         cd:6c:eb:a7:0d:62:5f:3c:84:c9:9b:98:c5:b3:3c:53:7a:12:
         43:1a:00:1a:8b:7a:cd:9c:de:d0:2a:cf:4a:77:5d:72:82:aa:
         9e:0d:12:ac:30:6a:ed:81:8d:be:9a:55:49:a6:ed:a7:63:5e:
         dd:29:35:1a:c5:d0:47:48:35:cb:9e:1f:8c:eb:0a:c3:d6:17:
         ab:8f:a8:7e:9d:94:b5:12:ce:17:d5:44:58:c3:7a:28:2e:aa:
         84:63:16:f0:0c:f3:b4:b1:23:c9:db:cf:e7:de:e7:d2:b1:7f:
         53:94:49:e7:7a:12:68:fb:cf:99:b1:40:fb:8a:40:8b:0e:c2:
         91:84:84:18:1b:11:2b:1e:6e:e5:b7:d7:11:60:37:73:95:fd:
         3f:54:c2:47:2f:8c:1e:99:dc:b0:0d:b2:31:59:b3:ec:ec:32:
         cd:fd:23:17:51:29:5f:35:ef:f7:fe:c6:9d:bb:a2:4a:af:9c:
         56:05:2a:ed:08:08:1c:5a:15:8b:78:a1:d2:13:ce:e2:a2:b6:
         86:28:bd:48:0e:7c:42:d0:90:68:d3:04:fc:13:d8:a5:d9:1b:
         1b:a3:bc:44:d6:84:c9:19:e3:39:21:1e:90:60:40:45:23:03:
         75:0a:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----