Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File:                     HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier:          n5rYODcJ/i894kA58swc5cEkwXPkR5BGscbNxbUJE4w=
Subject key identifier:   9F:C3:C1:74:10:09:8C:BB:99:D4:D5:65:57:6E:6D:92:F9:25:04:D0
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer:       /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial:       01962F3D955A59ABD42DD5FA54A20347307F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number:          1033
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: mgaq2YaWpkQKk+XasXR0oT2SCYbW671JQNWfoT/ZlAQ=)
                          2: I2Um-BptLNwnopUXCKyaHVD-kHY.roa (hash: oaTE3K1HG85ox8sjIAMWSASmDZ12fR3RjImb2V3uqGk=)
                          3: V64dlNuRxsB4pj8KUNyI80O85tg.roa (hash: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=)
                          4: ix1qxgL2TzzMLmdaUd3VQtSj-II.roa (hash: 4xQMMqWbgUGGtddTWP7CtZIT8IknDRDr3HPboptp2+U=)
                          5: rardublDZeUv0hlPIjK9MqgHsg4.roa (hash: btib6COENGJ7/XnX5VKYkD1R1KApIIXPG5heSZL4IwY=)
                          6: yCRbHo_vgtvhBnONk9PIjVNkpK8.roa (hash: FITUxbAsnldqLGUftyDR4kBxN/gcDMvjb5JKmbT20Tk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:95:5a:59:ab:d4:2d:d5:fa:54:a2:03:47:30:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=9fc3c17410098cbb99d4d565576e6d92f92504d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:85:a3:7e:95:61:3e:e1:89:6f:a4:33:61:
                    46:5b:85:aa:50:1d:4c:71:49:bf:e6:f3:cc:a4:cd:
                    04:46:28:99:06:3f:52:3b:5d:81:5d:9a:38:b9:91:
                    2e:43:73:0e:5a:e1:9e:a4:27:e7:42:da:7a:30:b9:
                    af:ea:73:67:31:6a:f4:33:a2:07:be:45:04:84:a7:
                    be:a2:1f:3c:f2:29:c4:34:0f:8f:6d:44:46:21:0e:
                    67:61:05:b4:0a:06:62:2c:ff:0f:b3:a8:3a:f8:55:
                    bc:f6:31:0c:bf:fc:4f:38:69:87:c5:90:d0:2d:7b:
                    13:ac:bc:60:14:eb:a6:eb:65:14:29:e1:f5:08:9e:
                    d5:20:c5:3c:ca:25:97:e5:d8:0e:c7:05:96:a3:71:
                    fa:59:05:ed:d2:39:bc:0d:7a:a5:c0:ff:6e:81:c6:
                    bd:3d:60:17:bc:c3:4e:f8:a1:9d:5a:4d:15:b5:f7:
                    51:9a:2b:3f:ee:83:d4:84:a4:e3:d8:92:b1:5b:1e:
                    8d:d6:61:f1:5a:aa:d5:1d:45:82:ac:2c:f8:ea:f0:
                    e9:c3:ee:47:a7:8c:8f:e5:1c:5b:96:8b:d4:75:b0:
                    38:46:fc:b9:d1:91:41:e1:83:07:06:ec:d1:66:46:
                    40:69:c9:8f:ed:40:e7:f6:59:80:3c:dd:51:8f:6a:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:C1:74:10:09:8C:BB:99:D4:D5:65:57:6E:6D:92:F9:25:04:D0
            X509v3 Authority Key Identifier:
                keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:2a:09:1b:9a:4c:51:5c:75:19:d8:fb:10:28:23:2f:f8:
         8a:75:b9:bf:1b:b7:c2:ef:9c:9a:ca:c1:cb:7c:c1:0f:7e:11:
         0d:66:14:c6:68:d8:0b:39:12:af:ca:45:f9:ef:59:a1:42:33:
         68:17:9a:d2:ad:13:ba:05:a6:0b:76:43:f0:dc:cb:ee:da:ba:
         30:7a:a9:00:3f:ba:4c:66:e2:9b:74:dc:14:6a:17:0f:43:a3:
         d4:b1:23:19:6d:8d:99:b1:16:01:e9:c3:9a:ed:09:6f:99:3a:
         e6:7e:69:22:a8:07:ef:2f:29:54:f6:a4:71:96:13:d4:11:ec:
         f2:34:02:2e:3a:b4:0c:60:6c:ac:9e:75:33:87:03:36:8b:da:
         38:79:e5:bd:03:cb:09:45:cd:6a:e9:04:bf:c8:b6:d5:09:2d:
         5f:95:50:70:1c:80:cd:9c:cc:a3:2f:2c:30:62:a9:fc:3a:af:
         8f:93:7a:66:ff:95:76:64:1d:04:f9:79:95:c5:b1:9d:41:8a:
         d5:a1:60:17:47:7a:a0:b0:b3:40:44:56:ca:e1:79:21:e1:44:
         e8:a8:d7:25:c8:02:1c:a1:89:7b:e4:4c:ac:ad:d8:3f:27:5b:
         e5:cc:0a:da:69:15:9d:58:53:30:71:e6:41:34:fa:52:d4:ae:
         29:e7:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----