Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File:                     HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier:          YdVw0LWjLEnY94Ws3FkaPN8WCb3Kf54IZvtL7aH5ydQ=
Subject key identifier:   8B:C0:A3:17:2D:A2:3A:3F:09:E0:D3:97:68:F7:38:14:C8:0C:1B:20
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer:       /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial:       01962E2AE0A29E639079F37565F270B15BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number:          0162
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: N86icCzBa8r36a9D484r0K9+2ai/daF6Cw7RfW214cs=)
                          2: XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa (hash: sSmVA8YWQ3N6iHQCrnx4d6eQ8ZnwuumMJH4aLXBAS+Y=)
                          3: zg1Lpd5dXDDrXWEs29Dqtm1PLWo.roa (hash: c0hWZybUPDWWpEetuD+QWOEePUUQ5c0jYzDlZOTBQ5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:a2:9e:63:90:79:f3:75:65:f2:70:b1:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=8bc0a3172da23a3f09e0d39768f73814c80c1b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:87:d7:c2:40:66:0a:a6:e8:b3:1a:5d:42:
                    eb:9d:90:51:69:11:fb:6f:45:3f:77:9c:11:93:60:
                    75:3a:77:37:06:72:55:81:af:6a:dc:45:92:03:ac:
                    8f:67:0e:71:21:c5:04:b5:75:c1:f0:bd:0d:21:20:
                    a0:d7:0b:e6:a0:6f:0a:d2:64:e5:ee:58:85:55:1b:
                    08:1e:63:e2:87:d3:c3:b6:1c:8b:28:cc:4e:fa:67:
                    ba:e5:f2:31:31:32:a7:1c:e7:35:43:8e:c0:f1:2b:
                    c6:e9:27:2c:20:94:e5:68:8b:9f:28:26:9d:66:63:
                    34:22:35:92:91:98:6c:85:70:60:d3:31:88:b4:e4:
                    92:7d:e4:b0:c3:ce:13:92:08:1e:cf:40:df:0c:ad:
                    f2:8c:6f:e2:46:12:64:e8:36:d1:2b:06:e0:a0:37:
                    99:d7:a4:85:54:fe:d3:84:6c:cd:a9:6d:df:39:41:
                    ef:21:d9:2f:ee:91:9a:d2:7c:f3:d5:db:b9:97:e5:
                    8d:04:bd:68:41:8d:e7:a7:1b:e0:e3:1c:8c:31:96:
                    78:e9:a7:a1:5b:be:3d:ec:8c:79:49:9d:19:3e:cd:
                    5b:b7:68:18:81:2d:2d:9e:47:0e:2c:70:64:f4:51:
                    51:04:20:26:2d:04:f5:24:a0:2a:71:73:50:cb:47:
                    26:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C0:A3:17:2D:A2:3A:3F:09:E0:D3:97:68:F7:38:14:C8:0C:1B:20
            X509v3 Authority Key Identifier:
                keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:cb:24:7c:12:f6:33:91:bc:37:cb:97:ed:0a:d8:f4:15:
         92:21:21:88:d1:ff:a1:81:72:4d:fb:ae:d5:0f:2d:d3:d4:b8:
         ba:59:ff:9b:d7:41:52:38:9b:21:0c:3a:3b:c5:b4:e5:f3:7f:
         d4:fe:c0:f2:c3:17:cf:f3:b7:c6:bb:e6:cd:cd:54:ba:d7:31:
         f7:b9:f5:1d:c0:d0:cf:58:b3:f6:74:e5:12:62:6c:e8:fe:22:
         70:7c:98:78:b3:97:03:ca:49:16:ff:f5:51:a7:31:3a:31:9a:
         3b:e3:8a:d6:04:75:fa:48:e0:07:55:41:83:7c:50:5d:36:ce:
         16:e2:cb:09:c2:7a:16:75:87:88:8c:c3:89:ef:55:5b:00:3f:
         2e:ee:7e:2f:ee:4d:9a:4d:38:30:f0:0d:27:07:23:d0:50:03:
         7e:27:01:06:27:bb:cf:c8:3c:2e:19:05:e6:13:c7:fe:cd:30:
         f4:84:ef:29:3d:c2:31:f8:7e:c1:8a:f0:8d:1d:e5:a0:af:2a:
         9d:f8:8e:75:8d:78:de:8a:f4:ed:0f:4a:f5:db:c5:28:f2:ab:
         fc:98:21:fd:2a:87:1c:5f:b1:35:3b:29:e9:c4:a5:56:a2:cc:
         81:7f:6b:5c:08:cc:3e:31:80:6b:98:c3:49:16:f1:73:ee:e9:
         7c:ee:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----