Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          YqoGUScpsYfOJ4seeMcV6i/vGIUj+wcwRF/sDi7adc4=
Subject key identifier:   26:20:4F:93:F7:64:A1:A9:C0:03:61:50:24:91:77:E4:D8:A1:1A:AD
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       01962DF41CDE50E89A2E275ADC939CCD9693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: Ga1rpJf8WVNrZfjFqZD66032Yujr0QDm5alE2zwzl3M=)
                          2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1c:de:50:e8:9a:2e:27:5a:dc:93:9c:cd:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=26204f93f764a1a9c0036150249177e4d8a11aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:4f:23:0a:a9:89:8d:d1:2b:6e:e8:9a:6d:
                    92:52:cd:1a:5f:3d:e7:c4:a6:d0:65:d6:f6:36:a2:
                    90:61:df:0b:95:66:f3:d8:86:8a:74:59:c0:20:c8:
                    2d:ac:40:7f:d0:ee:7d:bf:8b:c6:8d:4b:37:0b:43:
                    b4:5d:89:84:84:08:8b:d3:a7:24:73:e0:6b:5f:e7:
                    5a:61:2e:98:bb:83:31:d7:5c:75:52:4d:df:36:ee:
                    f1:45:62:2b:da:91:df:58:9b:c8:fc:a3:09:62:6e:
                    0d:33:12:5c:0a:af:4d:fc:b4:8e:98:4f:dd:b7:6b:
                    f4:3f:72:85:1b:76:7d:5a:09:2e:4f:33:78:1f:92:
                    13:0a:26:f0:1b:f0:05:af:10:bd:ef:aa:ce:0b:69:
                    66:7a:95:bb:23:23:91:31:ed:b8:76:7b:37:df:b3:
                    76:a4:86:bd:33:00:19:67:30:42:7f:68:be:c0:35:
                    74:a1:eb:60:54:ca:1f:f7:fb:b3:5a:ed:31:d5:94:
                    ad:79:e7:53:b9:9d:26:88:06:5f:95:ce:b5:b3:5b:
                    34:6a:68:aa:74:dd:1d:81:ee:34:bd:e2:df:cb:54:
                    ee:99:8a:39:ca:48:44:79:8d:90:7f:59:c2:b3:4a:
                    4a:35:01:e5:ed:70:f3:e4:93:dc:d1:64:9f:c6:0d:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:4F:93:F7:64:A1:A9:C0:03:61:50:24:91:77:E4:D8:A1:1A:AD
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:6e:a8:95:0f:94:ed:2b:95:4c:bd:cb:43:5c:0c:9e:57:
         7c:ee:f9:2c:2d:3a:c5:0d:c3:22:2a:f4:bd:07:d9:d1:6d:aa:
         a3:be:be:cb:ce:9c:c3:83:ef:3c:4a:ff:c3:d9:29:da:a8:0f:
         e7:d8:34:9f:ec:aa:8d:6f:13:37:e3:10:81:84:ea:8f:9d:38:
         30:15:fa:8b:9c:65:82:34:ad:d9:9e:8b:69:3e:7c:10:0b:a2:
         5c:b2:4d:0f:7f:43:47:8f:c3:2e:83:2c:65:c7:19:b0:46:6b:
         83:7e:b4:b5:f7:a4:4d:e2:dd:83:eb:ff:b8:ed:fd:80:b7:45:
         d3:fa:0c:d5:cf:93:40:5e:49:9c:b1:9b:86:bc:95:3a:ef:27:
         84:41:f3:f8:13:8f:f1:3a:37:55:2f:93:91:75:28:e2:43:c4:
         38:f0:fb:e3:78:ed:16:9f:ee:82:e9:b5:2c:e5:75:65:e7:be:
         9c:b5:46:ea:6b:e6:c4:16:08:a5:83:16:6e:f5:73:8c:22:a4:
         4c:ec:51:62:90:1c:1d:14:5c:93:0c:d9:36:2b:e2:7c:bf:19:
         b2:b9:55:e4:95:63:5c:f9:74:18:13:f6:cf:fc:6b:01:36:cc:
         4c:dc:5e:f7:ac:03:b5:68:ca:40:29:68:61:0c:9a:a1:9b:d5:
         14:c3:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----