Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File:                     H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier:          qVrMOMD/d5imwBEMmOtWqjimf4NQCV8KKOIi4IcbSKI=
Subject key identifier:   5C:4C:9A:10:B9:4F:1C:B2:78:80:CD:5F:3F:AB:D3:E9:B9:DD:DB:A8
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer:       /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial:       01962F0728BED6AD81DA9F42D3D0A4B90279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
                          2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: UOIGBVRA7X1768/Lw7Aq1UdJeX3kCc4QXKZ+OicoC3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:be:d6:ad:81:da:9f:42:d3:d0:a4:b9:02:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=5c4c9a10b94f1cb27880cd5f3fabd3e9b9dddba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:eb:b4:64:e1:bc:a1:a6:c5:bd:e5:fb:05:
                    d6:1f:ec:09:cf:9c:1a:15:25:14:72:eb:f8:8d:87:
                    13:3b:6f:66:5c:28:a0:82:ef:0a:50:70:d4:6a:65:
                    56:d1:8a:7a:3a:3b:10:d0:a7:a1:00:07:f3:f0:ab:
                    b8:35:9e:3e:4a:0c:4d:e8:af:ac:ee:d0:6c:c5:c8:
                    2d:9a:01:29:d0:1d:74:04:2f:f1:40:f6:95:1b:f0:
                    bb:71:3e:75:cb:a7:b4:a4:ff:47:04:68:9e:cd:e4:
                    70:8d:e6:3a:9a:62:32:bf:70:35:ca:76:ad:0e:d4:
                    09:97:9f:f4:6c:dc:65:46:71:bf:c1:27:0e:58:63:
                    23:b9:a9:9e:9f:0b:be:81:cb:fd:b2:e7:7b:87:ee:
                    3a:14:ba:45:10:5b:94:7c:85:92:77:de:29:58:c2:
                    ff:b1:16:e3:33:51:fb:14:9b:92:b6:a8:c0:de:db:
                    b1:59:a2:37:89:a4:70:a2:d2:44:cb:b5:fd:ee:29:
                    21:35:03:ad:d8:10:e6:9d:4f:75:40:a7:f7:c0:a9:
                    88:af:fb:d3:65:97:ed:ac:49:24:6b:66:f0:2a:41:
                    4b:3d:98:bf:fa:fa:3f:07:72:7f:55:04:9b:a5:3a:
                    b6:b2:e3:5b:99:4d:5b:30:7d:84:20:36:dc:da:ed:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4C:9A:10:B9:4F:1C:B2:78:80:CD:5F:3F:AB:D3:E9:B9:DD:DB:A8
            X509v3 Authority Key Identifier:
                keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:bb:89:2f:f3:29:2b:99:cb:5d:d8:61:e2:8b:fa:51:5a:
         85:6d:13:9a:1c:2d:16:d3:c7:af:ac:b0:93:2a:e5:78:05:5c:
         28:d9:00:ab:31:39:1d:a7:fa:43:3f:cd:bf:d3:7a:a5:9d:01:
         4a:c8:52:b8:8b:0f:88:fb:c0:79:b6:8c:53:95:e9:a4:1e:a6:
         84:3b:63:85:72:bf:b8:7d:f2:18:2f:33:5d:ca:2e:93:a7:16:
         ac:84:fe:d8:d8:9e:c9:82:26:70:10:52:42:c8:92:83:c4:44:
         33:97:8f:21:51:17:e5:df:10:13:c8:ad:e1:7a:dd:6c:84:89:
         4b:19:e9:23:6b:7e:4b:f6:5a:49:35:79:fd:4e:ff:c6:15:c4:
         61:7e:42:18:1a:d7:fd:a5:dc:fb:56:4b:a3:e0:b6:78:61:05:
         0c:4b:f8:a4:fb:77:ff:1d:44:54:b0:7c:52:c2:91:98:f0:f4:
         33:4b:16:69:82:c5:33:14:e5:77:5e:0f:bd:01:d2:cb:56:a9:
         7a:53:08:7f:f3:f5:40:4f:d2:86:d2:5a:54:b8:c0:fe:db:35:
         b9:fd:9e:2c:49:ef:d7:98:cf:90:af:14:7e:5f:6d:01:0f:8a:
         75:fa:81:71:27:b4:d6:64:f4:f2:b0:54:b9:a8:74:a6:cf:5c:
         63:be:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----