Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File:                     Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier:          5ZdK5J0DJQtVw5YWvydz1ZYK0iIOw3DwesX18pnkpY0=
Subject key identifier:   84:6D:18:29:22:1B:7D:58:12:CD:5C:A5:20:4D:07:E6:E9:48:C6:0E
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer:       /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial:       01962FAB8A2A6542B2500BB5D260697EFAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
                          2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: JEE8uFee9YqrIavaoZ3H/LG7nUPOVohoXdUsBymPki0=)
                          3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:2a:65:42:b2:50:0b:b5:d2:60:69:7e:fa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=846d1829221b7d5812cd5ca5204d07e6e948c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:cc:21:cf:12:75:54:4d:5e:42:37:af:c4:
                    64:c8:cd:55:d7:27:e6:a3:14:96:10:15:09:ab:b1:
                    f1:ef:b1:20:2d:c6:91:82:35:a9:d4:32:c3:07:47:
                    50:4b:af:77:8d:27:97:22:59:f0:40:85:c1:09:24:
                    fd:97:82:4b:9c:77:f7:be:df:32:45:70:9a:2d:f2:
                    2b:f1:67:12:7a:5c:8c:41:c1:87:65:1d:c2:97:27:
                    db:05:d9:b5:2a:a1:46:3e:a6:1b:b6:b9:fa:25:f0:
                    00:d1:6e:24:65:22:a6:81:56:dd:2c:ce:76:ca:99:
                    0c:f0:ba:ad:bf:ee:23:c3:87:51:bb:f7:22:ef:48:
                    7b:a7:51:95:95:1e:4f:86:44:c2:6a:d8:23:73:8d:
                    f3:42:99:e3:1f:c4:7f:5a:73:e8:0b:df:e6:f1:35:
                    c8:95:a7:9c:87:02:35:90:d8:61:bb:2c:f8:34:da:
                    66:28:f7:bc:cb:17:f6:d1:f4:fb:33:dc:ab:4b:4c:
                    47:33:2d:86:06:f4:d2:81:90:a0:ad:6c:52:9b:8e:
                    ad:9c:99:8b:d1:a1:40:41:22:93:7a:5e:07:5c:27:
                    78:a7:b2:16:14:09:10:05:cf:94:aa:e6:5e:42:83:
                    39:dd:43:e9:75:8e:3b:5e:5e:3d:a0:54:64:9f:ca:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:18:29:22:1B:7D:58:12:CD:5C:A5:20:4D:07:E6:E9:48:C6:0E
            X509v3 Authority Key Identifier:
                keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:16:76:ea:7d:f8:97:a8:46:9b:16:1e:72:f3:8d:3d:6d:74:
         2e:17:c9:0d:92:35:7d:31:63:49:f4:2d:6f:83:28:cd:7d:9d:
         00:21:e0:e4:1d:60:e1:ea:92:b3:bb:48:4a:67:44:11:71:c4:
         59:0a:bf:33:56:e6:ac:af:05:58:be:f6:68:1f:74:f2:39:f4:
         41:1e:36:f7:8a:f3:5c:5d:ef:b2:92:f3:f2:3e:3f:c9:c2:cb:
         8b:6f:4d:36:9d:97:82:c1:a5:3b:85:5f:bf:d5:1d:9f:b2:1c:
         40:84:e2:57:6d:ac:6f:4b:3b:10:94:bc:32:05:d7:77:68:82:
         32:02:57:cc:89:a8:23:e6:ab:40:bb:ec:14:9c:a4:c5:99:1d:
         74:fb:e2:2e:03:42:26:69:fc:18:e2:8f:2d:c1:d7:72:1a:66:
         3f:70:3a:0e:b7:51:cb:01:0f:fa:d2:7e:ba:63:37:4a:f7:a2:
         38:ee:e6:d7:de:48:41:93:4a:63:30:c1:b7:8e:f9:07:8a:c9:
         3f:41:80:6a:34:b2:c1:16:bb:6e:82:c6:34:1d:cf:62:13:3c:
         19:92:b0:b3:80:e2:21:ee:fc:fb:66:83:d6:3f:53:7e:ad:1a:
         31:aa:e9:88:4d:4d:e0:21:3e:8c:ef:ac:09:8b:19:04:76:6e:
         2b:64:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----