Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File:                     HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier:          A/8bRsQtKEK6TGLq4c7+Lww0h9+bEriNy32Pe5MyQ5s=
Subject key identifier:   42:78:8C:37:31:EB:95:9E:87:5F:37:C0:11:05:31:41:26:73:45:3C
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer:       /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial:       01962F06B5FA5E4662C5547FAAB7263F48C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number:          0823
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: Q9dVv/1EehNxE28e6ud3f7uebm2m8OS2+A0FR1MO29Q=)
                          2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b5:fa:5e:46:62:c5:54:7f:aa:b7:26:3f:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=42788c3731eb959e875f37c0110531412673453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:dd:67:85:02:30:c0:ad:70:bc:ee:56:a7:
                    97:12:c4:ad:a8:78:67:1d:63:3e:7a:eb:92:a1:3e:
                    50:36:d8:8e:69:23:6f:34:68:80:67:dc:ee:6b:c3:
                    f7:0c:10:62:11:26:b1:80:36:18:32:72:a1:fd:64:
                    59:52:fb:8b:a5:bf:3b:da:9e:01:9f:d1:3b:c0:f5:
                    ad:ef:6c:16:5f:2a:f7:39:7e:6e:b9:5d:da:cd:ad:
                    91:37:05:47:48:07:a9:d2:58:2a:47:e1:62:67:dc:
                    aa:47:d4:35:b4:e1:77:b4:83:03:07:cc:11:92:b0:
                    c5:40:0a:ee:45:09:42:b1:5f:5f:eb:19:cf:28:ce:
                    a3:e0:c9:16:81:51:04:41:85:c0:a2:7a:8f:cc:31:
                    bb:2e:b6:14:10:bf:7b:b7:dd:eb:06:c9:7b:72:7a:
                    6b:6d:fa:6b:0f:65:c7:3b:6d:d8:a0:c9:39:d8:f5:
                    4f:14:00:74:19:90:b0:c5:68:dc:20:ce:8d:af:f8:
                    e7:e3:25:d5:9c:21:b7:23:06:4f:21:26:0f:fa:f4:
                    0a:6e:39:f7:8a:31:b5:7b:17:4d:09:f5:43:03:4c:
                    0e:1e:84:90:ba:6f:1f:7c:01:b4:dc:30:95:b7:31:
                    dd:81:29:d6:72:af:8d:ab:71:08:e7:fa:7f:c6:dd:
                    51:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:78:8C:37:31:EB:95:9E:87:5F:37:C0:11:05:31:41:26:73:45:3C
            X509v3 Authority Key Identifier:
                keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ee:45:66:3d:9e:ca:af:c2:77:7c:28:d1:c3:d7:e0:21:1e:
         85:36:e4:74:4e:b4:f5:d0:00:ee:68:ca:30:a9:dc:70:5e:7a:
         13:28:6a:a9:10:1d:24:f6:20:99:04:6f:74:2e:3a:cb:6e:24:
         21:72:6d:d6:30:d3:11:ce:37:36:15:54:06:5d:af:35:d2:e7:
         e9:86:19:b2:63:fd:30:fe:ed:f6:62:a0:70:fd:a2:3f:95:61:
         7f:a0:8c:68:2b:39:e2:48:82:8c:12:c9:cf:75:07:36:00:7a:
         25:6d:11:6f:7a:9c:34:12:99:5b:4a:8b:71:73:5f:20:d5:98:
         48:2f:23:d0:c6:66:01:0f:12:39:15:80:a1:35:3c:5d:8d:39:
         5b:32:53:bf:60:ea:4a:01:df:c4:43:03:9d:43:21:f5:7e:4b:
         f6:a5:fe:8b:9e:61:27:2d:1a:5c:13:b0:c8:03:6f:2e:a3:fd:
         c6:65:66:90:c0:3b:f7:d8:23:8f:1e:78:e9:c0:c9:90:d1:43:
         0b:3d:07:ff:59:d9:8e:df:61:4e:27:40:75:db:f1:62:76:f8:
         3c:b0:23:5a:ab:b3:23:89:47:3f:24:d1:32:9f:1c:f9:ee:2c:
         dc:d9:e2:b3:4b:09:89:8f:ec:e6:08:47:a3:16:6e:b1:35:4f:
         16:be:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----