Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File:                     HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier:          nBdWj28ibljNRUNRZt3Ugtd7VQKvODrjMFlphXCYqm0=
Subject key identifier:   78:EF:10:2F:66:BA:04:57:3E:36:95:E6:C6:C6:12:31:79:D1:88:B4
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer:       /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial:       01962ECF9B27D2C96A0BA666407445C1EEAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number:          08B2
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
                          2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: eN0whjQa+BtgBt5QFhmsi+gf3MuzBVQWP3qnKuIk5iQ=)
                          3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9b:27:d2:c9:6a:0b:a6:66:40:74:45:c1:ee:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=78ef102f66ba04573e3695e6c6c6123179d188b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:07:42:88:2a:1c:8d:f8:66:b9:6d:6a:a2:
                    64:55:cf:88:d3:a4:40:06:80:7f:65:a9:12:f3:23:
                    30:10:26:04:a5:3e:0d:86:57:87:ed:92:53:4d:d9:
                    a2:3b:91:b6:72:e6:d5:87:6c:58:fb:a9:56:f1:eb:
                    ca:cb:96:b2:c5:ef:80:1a:47:55:19:7f:a0:df:95:
                    0a:99:cb:64:8d:2d:28:4c:59:ad:b7:87:14:22:46:
                    26:83:10:e8:0c:bb:c3:ce:2a:8b:e4:df:38:69:9d:
                    d5:8c:e5:65:dd:fa:56:53:61:a2:40:c3:17:75:74:
                    39:fe:0d:51:0f:b8:d5:72:88:76:bc:0b:e1:9f:f0:
                    83:c6:b1:55:a8:c7:44:6e:ee:4c:3f:e7:62:6c:40:
                    73:57:63:2d:28:14:e6:ae:de:66:ba:90:e4:32:6e:
                    5d:44:68:ff:20:1c:a7:11:70:9a:94:d7:1c:89:10:
                    bc:4c:59:7b:fa:57:64:92:0f:c0:90:02:e3:81:92:
                    9d:fd:52:b4:8d:b5:f2:f0:75:2f:93:e5:f8:01:5f:
                    3d:ef:6a:a8:a0:a2:56:6c:58:bc:85:73:a3:d7:59:
                    b3:d3:f6:16:29:97:6a:a7:86:25:0e:62:7e:1e:ad:
                    fa:a1:50:6a:26:9a:d8:6b:61:a4:b0:0c:13:fe:83:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EF:10:2F:66:BA:04:57:3E:36:95:E6:C6:C6:12:31:79:D1:88:B4
            X509v3 Authority Key Identifier:
                keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ef:dc:0e:1b:1c:56:92:1f:8a:2e:59:87:69:95:19:74:05:
         02:d1:34:74:28:92:76:39:24:bd:b9:dd:71:54:c4:8c:49:07:
         6c:a0:45:94:14:68:1a:28:80:1d:84:4a:07:39:db:52:38:ed:
         83:41:e1:81:2c:3f:a9:30:fa:59:60:98:28:b5:2c:66:ea:15:
         05:5a:5a:46:15:9f:da:e4:f8:a9:9d:34:3b:31:fb:8f:12:74:
         e7:f8:29:ae:74:41:5a:b3:69:e8:bc:06:96:0c:3e:82:e3:dc:
         5d:89:af:ec:bb:0a:f1:8d:11:69:49:a7:69:97:18:73:21:94:
         c5:30:c8:2d:2d:cc:77:9d:e0:59:b1:c6:5d:ed:07:6d:bb:36:
         e2:87:20:f0:47:7d:4a:9e:4a:1c:4a:75:77:e2:96:41:96:c4:
         94:7f:86:b0:7e:6f:67:51:66:71:4a:36:ba:7b:34:f0:5f:4e:
         5f:24:32:ad:d4:91:86:b5:c5:17:70:fb:2a:b8:e3:e6:cd:12:
         b3:2a:dc:91:8f:c3:f5:2c:48:c0:df:9e:35:ee:14:c4:b1:a2:
         25:8c:3a:3f:eb:42:74:0f:d5:d1:be:73:15:ae:b1:39:44:a2:
         ab:7d:5d:ae:82:8d:25:14:6a:cc:da:a1:cd:93:50:27:e1:41:
         06:24:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----