Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File:                     HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier:          XQONgOYGY+GdEtlFR46EZS8xrBa6EqoLgNM/uSgCCXw=
Subject key identifier:   6B:39:C7:00:74:6D:36:DE:42:EF:B3:E1:CD:1A:DF:71:75:8C:07:F7
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer:       /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial:       01962E61BEF94A64A5BF4C4532BB2966B30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number:          143B
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=)
                          2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: Bpzrh+iED8KTetUqn/N55fEvvC0wWwCQFNpViIB2/tA=)
                          3: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:be:f9:4a:64:a5:bf:4c:45:32:bb:29:66:b3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=6b39c700746d36de42efb3e1cd1adf71758c07f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:9f:5b:df:5c:29:5e:b3:bd:b3:af:b2:89:
                    93:a3:ab:00:ca:d8:b5:3c:ce:e7:2d:ca:33:9b:6c:
                    df:6b:15:4d:92:7d:cb:ac:2c:60:b4:22:19:de:1f:
                    d3:ad:a7:a9:81:56:6c:17:5e:fd:f7:dd:15:43:c1:
                    32:d5:fb:f7:ca:48:47:59:ce:1d:7e:48:19:f9:fe:
                    3e:66:c2:6a:18:07:66:9a:ec:6a:47:64:71:2f:ad:
                    3c:ee:03:35:68:f1:62:62:c4:ea:29:9a:db:e3:6b:
                    79:c7:04:f8:d2:6d:e8:a4:af:30:69:95:b1:e8:6a:
                    cb:f6:ca:c5:99:75:6f:af:91:46:f7:38:08:77:8a:
                    8a:c1:d2:74:83:16:8c:d5:c9:ae:99:51:e4:09:87:
                    85:02:07:e3:0d:b4:cc:70:38:4b:09:6f:ad:6f:c3:
                    30:71:1c:06:a8:f6:d1:fa:7b:01:31:dc:cf:12:f2:
                    92:2f:22:62:6d:41:a2:f8:09:f3:ee:14:8a:50:8a:
                    dc:8a:3d:66:b4:90:83:a6:71:0f:03:4d:9e:54:ee:
                    d0:c9:ae:54:53:8b:1b:21:b1:2a:a2:8b:93:07:20:
                    ae:83:4b:f9:0d:06:4a:a0:e3:5f:28:e6:62:f4:41:
                    9a:25:14:66:2c:ec:ce:2f:5c:ed:78:74:e9:15:99:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:39:C7:00:74:6D:36:DE:42:EF:B3:E1:CD:1A:DF:71:75:8C:07:F7
            X509v3 Authority Key Identifier:
                keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:f5:e5:36:43:b2:d0:0b:c3:c6:91:28:5b:00:d4:67:1a:
         f1:f0:9c:e8:2f:4d:25:53:12:0f:96:da:08:14:86:af:77:6d:
         74:bf:ac:21:9b:9b:f5:b3:fd:dc:20:fa:24:9a:cb:77:a8:12:
         bd:1e:42:1a:63:0e:40:62:3e:43:07:1b:dd:44:3b:49:67:37:
         e0:18:c2:f6:dc:a7:04:7e:41:93:9c:0e:ac:1e:04:07:e5:a1:
         fe:11:7c:49:bd:1e:9f:a6:10:d1:2e:f6:13:6c:9f:8e:ce:47:
         cd:bf:b7:87:9f:84:7f:b8:49:45:d2:0a:78:dc:84:b9:27:95:
         1a:0d:ea:5a:ce:dd:ea:0a:3e:e9:a2:de:2d:7c:b8:65:0d:b5:
         61:7a:0c:a9:30:ed:3b:6a:69:a8:57:f2:d6:fd:e2:31:08:75:
         f3:ca:e9:6e:ad:55:f4:d7:1e:ca:80:4b:0b:b2:cd:87:3d:5a:
         7e:e5:26:ac:df:ba:ac:dd:8d:e6:68:1d:ed:a0:8b:52:1f:17:
         c1:41:4c:4c:5e:54:3a:6a:9e:d2:32:1c:12:2c:c3:1f:75:b3:
         c1:7a:dd:70:23:92:c0:41:00:9f:ad:f2:11:1f:6a:4b:58:26:
         93:89:89:55:fe:c7:b3:af:f3:3a:03:c8:e2:55:8f:05:6c:81:
         b8:26:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----