Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File:                     HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier:          BpjBMm0aRPQqwHcCntVzwf14Jq3bVMO2bN1FVyP5vCE=
Subject key identifier:   2A:82:FE:55:74:A4:29:6C:3B:3C:46:C3:BC:DA:F4:4C:9A:0D:4D:A1
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer:       /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial:       01962F74C6462F205A1A79BC75C127634086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
                          2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: 4RHMBp6Qh3TsE0lg6Tq5BSXrUeOCBNXYiW6YWxLE3BU=)
                          3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c6:46:2f:20:5a:1a:79:bc:75:c1:27:63:40:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=2a82fe5574a4296c3b3c46c3bcdaf44c9a0d4da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:50:e6:c2:11:2f:55:c3:04:ea:ff:1b:28:
                    3e:a9:03:28:f5:32:c7:e4:5b:65:b7:0f:45:6a:dc:
                    24:fc:ad:34:06:b7:fc:46:e6:de:42:d7:0b:a8:3f:
                    59:e3:4b:30:8e:b5:fb:b2:2b:de:88:8c:22:8e:66:
                    f3:b7:55:46:78:9a:7b:25:0f:fa:05:3a:c1:19:d9:
                    66:c6:9b:4a:20:5a:88:45:f4:6a:13:04:3a:39:f1:
                    ee:5e:49:82:8f:f3:97:78:0c:c8:3b:fa:64:f7:90:
                    9f:ce:cc:30:c3:06:c4:01:40:3a:64:c5:45:6d:37:
                    ec:82:bf:29:2b:64:fe:e7:3e:93:dc:b6:42:fd:45:
                    d2:8e:67:51:95:2b:3f:49:0e:2f:b0:c2:fd:13:62:
                    3c:12:ad:1f:ba:cb:61:4f:12:56:70:1a:7f:e8:a7:
                    ff:c8:2e:76:d4:b6:cb:e2:24:4f:f1:cb:bb:1c:30:
                    ff:a5:31:f2:82:bf:c4:f4:c9:72:01:3e:26:7c:40:
                    93:6c:44:b7:6e:c7:88:93:78:73:ae:72:58:7f:5a:
                    a0:85:55:cc:58:e5:56:63:83:e4:45:42:29:23:ac:
                    e8:ec:3c:d4:16:ea:9a:f1:92:fe:35:8d:01:12:f5:
                    36:7e:0c:3e:c2:33:a7:02:6e:82:9f:5b:22:e0:c3:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:FE:55:74:A4:29:6C:3B:3C:46:C3:BC:DA:F4:4C:9A:0D:4D:A1
            X509v3 Authority Key Identifier:
                keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:cf:c5:dc:d3:82:44:4b:f5:1c:4b:10:0a:e3:48:5d:3b:
         b6:44:2e:02:2f:c9:8d:bf:63:c8:be:74:ee:b9:08:34:ed:75:
         e0:31:38:94:22:52:1b:89:72:9f:fd:14:d5:af:31:07:ed:3f:
         0d:22:65:33:47:73:38:e4:f6:5a:7c:80:6c:b1:fa:6a:e0:5d:
         a5:2d:ef:d4:89:af:ff:bc:bf:d6:a8:22:7b:88:06:15:91:19:
         59:fc:29:90:b8:8f:fb:22:4f:4c:86:a0:fb:22:9b:37:88:de:
         15:1c:8a:db:1a:18:9e:66:83:8f:e7:3a:19:ba:91:d1:f2:e2:
         76:70:5b:6d:4f:98:92:de:a0:c2:5a:6f:f8:6c:fc:16:a3:51:
         3e:5a:44:5d:b2:37:9a:79:42:4e:d4:a3:7b:96:1f:8c:ec:46:
         5c:88:2c:93:78:36:66:2a:6e:11:35:a5:2a:fb:22:d0:27:ef:
         07:09:f4:9c:8b:bd:87:be:25:34:4e:cc:7b:26:39:38:57:fb:
         41:d4:5a:c7:6f:d0:65:4c:17:e3:7f:53:8d:55:fc:77:01:44:
         14:5a:08:4e:dc:f9:61:f6:8e:74:67:be:84:f4:f1:19:cd:df:
         5a:83:55:3b:33:e4:4f:3f:46:ea:bf:07:d1:ce:25:9d:d7:13:
         79:35:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----