Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File:                     HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier:          b1l5CK4MKdRpEg8iqdWlVxiiZE9s5FEhosEaphzvXLs=
Subject key identifier:   30:86:75:F8:17:78:E1:1C:14:04:47:76:BE:92:49:67:FE:70:3A:8D
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer:       /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial:       01962F3DE4274D1D8F5F16D9318078967014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number:          145C
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: 1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa (hash: OZx3u6xzIMjyl5Um2kz+G+WpnO01yNqGdt7/mp9FJDI=)
                          2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: 2YfD6Up+tsCaYserM4ekpn0xwAob1iiAqq4K1nX7/B0=)
                          3: I7yYY6oN8nbmOzWKLfxUY08F4VM.roa (hash: OpjuP5bzSExVmZzxUJkOBU+S1bIyOKqFxjUEQGmtVXk=)
                          4: Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa (hash: P/0Xq7jm9FfNGJ2i4ahCVuaX5VvDxfSb57nEi8i1Tlk=)
                          5: o33kvNGiVE5QwGbXRcS1WVlFPa4.roa (hash: tbXNsaKqMuIQJAxtvQCEh1A+tSp7ogPpQ+0PODtQq48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e4:27:4d:1d:8f:5f:16:d9:31:80:78:96:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=308675f81778e11c14044776be924967fe703a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:89:16:4c:75:e8:a0:6c:36:b4:87:3b:3a:
                    ef:5f:d6:46:b6:3c:f0:bd:53:64:f5:93:27:25:ae:
                    47:38:c6:7e:0c:ee:fb:1d:f6:46:e7:60:c3:2c:79:
                    40:f1:dc:e4:d3:1d:e6:92:50:0a:41:1f:d1:af:b6:
                    47:a9:13:f8:df:52:41:51:82:d1:45:cb:8c:e9:c8:
                    ee:ad:f1:7c:da:46:67:3e:3a:02:19:9a:77:cd:f1:
                    d3:a8:59:05:9b:da:59:e1:ca:c2:f5:f3:9e:d4:2c:
                    cf:ee:39:a3:b6:3a:ed:59:6a:1a:25:a6:f3:ab:8b:
                    1a:82:3f:06:05:4c:e1:19:33:39:6d:12:29:0d:2e:
                    0d:d9:43:6d:3b:43:e5:5a:c8:5a:05:4b:ab:40:69:
                    d5:a7:f4:8c:a6:f2:b7:99:6d:d7:3b:54:b1:47:23:
                    dc:c0:ca:f7:f0:cc:1c:76:d9:d0:10:d8:67:ca:bd:
                    28:af:0d:00:35:3c:01:34:e6:99:3b:22:9f:e4:e1:
                    43:72:12:26:a7:e1:96:68:02:58:21:28:e3:ac:ba:
                    e2:d8:19:3a:a3:8e:8f:a5:bc:d4:e3:be:9c:49:b7:
                    75:fb:03:65:7f:4b:88:61:d9:32:ca:82:e5:ad:f6:
                    8a:fc:5c:27:74:8c:ab:47:31:d2:e4:e5:8c:6a:fd:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:75:F8:17:78:E1:1C:14:04:47:76:BE:92:49:67:FE:70:3A:8D
            X509v3 Authority Key Identifier:
                keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:77:22:c7:36:db:77:78:16:6b:5a:16:7d:aa:de:e9:18:ef:
         6f:8b:30:13:7f:ac:3c:4c:cb:25:ce:5d:49:7c:5d:dd:ae:db:
         c6:af:4a:4c:3c:63:7a:ea:d4:44:35:f6:2f:20:30:88:30:8b:
         84:7d:26:22:df:12:96:ba:11:0f:5f:01:b6:15:c8:7d:56:be:
         82:90:89:3f:01:a9:98:f3:20:0e:d2:d6:60:88:1b:0d:fd:02:
         ed:d4:9f:f6:4c:9e:e0:7d:17:05:61:9a:c0:ad:a3:50:83:12:
         a0:dc:44:be:7e:65:ad:4c:9e:2a:79:49:8e:e1:b2:d4:b8:a5:
         b1:46:db:51:c3:1f:b2:6e:6e:1b:b8:ce:f9:2e:11:b7:d2:af:
         f6:f6:63:b3:9f:78:84:1a:70:e5:ba:ea:42:88:08:83:1e:f0:
         fd:2e:69:20:b6:0d:01:a7:3c:59:66:28:69:47:80:e2:a3:40:
         2f:94:58:78:b7:16:b3:16:ff:91:8a:90:f7:81:fb:67:c3:cd:
         a7:86:c1:dd:fa:84:2e:bd:f8:c8:fd:fb:da:0e:f8:f7:72:a7:
         3b:c4:cb:b5:a3:f8:0d:4a:14:02:2a:00:d5:9a:5c:57:b2:31:
         99:67:e4:65:07:d2:cf:b1:95:14:70:1c:4f:88:b6:29:76:41:
         ce:78:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----