Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File:                     HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier:          bBiyemurrOdTIALNe8cnvM25cPmaSdXifcd0P+ZKEZc=
Subject key identifier:   D0:58:86:3B:AA:B1:C1:B2:0B:1B:11:0E:7D:0E:BC:CA:EC:30:81:9D
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer:       /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial:       01962F0661226EFD60D769A2664AA0998D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
                          2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: cJHzw25x0WrkkkhorjLMrCkIhO7oan0jnAeMXxEbAUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:61:22:6e:fd:60:d7:69:a2:66:4a:a0:99:8d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=d058863baab1c1b20b1b110e7d0ebccaec30819d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:e5:ac:c1:13:6e:6e:08:81:22:ea:1d:27:
                    ce:ef:89:fd:f5:ab:39:f3:ed:e4:34:8d:a6:ae:98:
                    f9:2a:89:12:8a:78:ec:19:80:9b:ac:c3:c8:cd:1e:
                    08:29:aa:c0:7c:c7:fd:ec:fc:e1:82:66:03:93:aa:
                    23:63:6e:4c:7f:e9:2d:b5:dd:ae:82:cd:3a:86:6b:
                    8a:65:57:4e:a7:c5:12:c9:26:7f:db:7c:eb:79:b7:
                    dc:32:7b:f4:8d:99:e3:af:71:6b:58:4d:af:07:9c:
                    c6:c4:0c:3b:d8:95:b7:48:a9:e8:e4:b8:53:b3:70:
                    16:69:4b:05:98:1e:2d:fe:7a:39:5e:b5:4e:b6:15:
                    5f:ba:12:77:5e:86:92:cd:9e:56:c8:bc:4e:c7:6d:
                    17:22:2c:05:72:5e:0e:a4:3a:e4:14:da:c4:cb:5d:
                    1f:be:76:df:19:6d:e9:6c:93:c8:b1:bb:eb:79:db:
                    77:20:57:b5:ec:a6:c4:a0:d0:8b:ae:37:60:27:13:
                    e0:1b:67:0e:9a:14:a4:ca:3b:3c:18:56:f8:c3:92:
                    e9:3b:80:0b:2a:50:76:4c:03:0f:32:0b:b2:8a:34:
                    3f:15:a2:70:01:5a:80:00:82:85:b9:48:aa:5c:93:
                    07:df:92:5c:72:3f:04:aa:61:4a:d5:b1:ab:a9:89:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:86:3B:AA:B1:C1:B2:0B:1B:11:0E:7D:0E:BC:CA:EC:30:81:9D
            X509v3 Authority Key Identifier:
                keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:ab:23:ee:f1:f5:61:4e:e1:f7:00:3d:6c:c3:1a:4a:2f:
         ac:3f:a1:62:aa:d3:4e:09:79:99:41:2a:99:46:c1:c9:24:0a:
         52:6a:2c:0c:d8:3f:b1:87:f0:18:de:c0:f2:6c:a3:4a:02:1c:
         4f:06:91:6d:df:1d:77:50:51:13:83:6d:88:18:00:34:20:3c:
         0d:d2:42:33:60:dc:14:c0:f7:e5:fd:56:d6:44:12:dd:4f:b1:
         00:59:ee:47:0e:bb:f5:48:93:ab:c3:43:a3:95:19:ff:bb:d0:
         a1:51:a5:19:d1:ac:47:99:0a:1f:d5:6d:73:90:56:74:25:16:
         93:5a:64:54:cf:b4:47:32:6a:81:5d:22:d9:42:15:f5:2c:d7:
         d0:cd:da:32:19:ab:0f:5b:56:4d:e5:00:1f:c0:36:40:8b:d2:
         55:6e:7b:1a:f3:ca:cf:87:32:33:1d:52:3c:a5:cc:8f:bc:1a:
         d0:41:01:e6:71:52:d8:45:15:0b:5f:7c:b2:b5:c9:b1:cd:04:
         51:55:e5:23:dd:97:d6:b5:87:25:fa:ee:14:9c:1e:a5:fc:3f:
         f6:20:1f:73:ec:a1:be:9e:72:fe:ac:7c:07:d1:a8:2b:6c:2b:
         80:88:5f:02:01:83:72:3b:69:a1:34:86:dc:27:11:14:a6:a7:
         06:43:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----