Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File:                     HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier:          5ndD2gOnJMzd0KGMAm4jBnWUOv8LqoRGihtyxaxGdjY=
Subject key identifier:   62:FB:A1:57:DA:9C:00:41:25:01:BE:86:88:CF:2F:C6:ED:79:39:77
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer:       /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial:       01962F3D5EB473431D3EA32F90799976FBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number:          03D5
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
                          2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: vkazIeSo4PY3f00MfZDe+PSb6YoUDQlGGk7ldLbz6zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5e:b4:73:43:1d:3e:a3:2f:90:79:99:76:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=62fba157da9c00412501be8688cf2fc6ed793977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:69:16:fb:73:fd:ff:34:27:31:58:b2:a8:
                    0b:4d:b9:c9:a0:33:4d:84:42:3e:6a:9b:47:46:42:
                    80:e3:00:27:03:31:56:26:55:89:a7:fb:be:b2:2e:
                    3b:41:49:00:98:ad:d3:3e:db:de:4e:72:f4:d2:e4:
                    4e:09:cc:e2:3f:6f:30:4f:7b:1d:37:64:c4:31:37:
                    55:6b:b5:d1:13:28:d4:24:94:cf:e2:33:e0:b7:b6:
                    a4:a7:92:eb:95:ea:1f:f8:a5:3c:e9:e9:d3:4b:50:
                    a4:c1:a8:39:30:57:80:a6:bd:73:7c:e4:30:b7:84:
                    88:ba:62:22:80:af:d7:b4:40:1c:7a:6b:ce:4a:05:
                    b2:64:64:01:5c:a3:6d:d9:c2:c9:1c:52:05:d7:7d:
                    3b:d3:03:81:09:d2:c5:d4:fe:c0:ee:5b:6b:f0:68:
                    04:07:4a:b1:38:79:78:48:1d:85:ca:25:5f:92:2d:
                    92:d6:5d:10:da:6b:ed:c7:d1:50:c1:e2:a4:5e:69:
                    0c:5a:05:81:13:e7:26:de:bd:2d:86:32:e6:02:66:
                    55:81:b1:cd:d7:96:07:9d:56:2d:ee:c5:79:48:2c:
                    9f:26:29:3c:a8:33:74:a3:b1:62:28:33:92:97:7b:
                    6c:5b:b7:b1:cf:eb:26:52:4f:dc:c7:79:be:a6:de:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FB:A1:57:DA:9C:00:41:25:01:BE:86:88:CF:2F:C6:ED:79:39:77
            X509v3 Authority Key Identifier:
                keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cf:71:55:5b:60:66:21:bf:b6:57:61:3b:aa:f9:50:97:95:
         e2:a2:70:11:d1:3f:d0:13:92:26:2c:27:58:44:7e:1a:f7:60:
         ed:62:b8:31:e5:4a:1d:b6:72:19:f9:49:33:a9:40:85:40:c6:
         16:f8:6d:e9:e0:ec:1f:72:6d:2f:8a:27:9a:ea:32:3f:67:de:
         ce:78:5d:0d:7a:40:01:d6:1e:f3:51:b9:ea:c7:b1:e8:ec:55:
         b9:83:67:d8:0b:5e:18:de:11:18:f6:8d:0b:f0:73:1b:dd:c8:
         60:67:8f:ec:28:ca:6e:57:87:89:d9:ad:bc:8d:7b:cb:fd:96:
         f0:d5:75:a9:d7:8d:f5:a3:dc:4a:79:97:41:08:6d:ef:d6:cc:
         3b:ec:6a:dd:62:bd:4f:04:52:a8:0d:77:d2:9c:77:14:74:1b:
         3e:a8:a9:f8:44:e1:7d:3a:42:a1:c2:1f:78:e8:dc:f6:39:93:
         ea:d9:42:ed:a0:3c:44:b9:b5:c8:0c:42:d8:26:7c:38:04:df:
         30:55:77:92:75:88:ec:3f:01:e6:52:3d:c7:40:90:df:51:77:
         44:94:cb:e6:83:b0:46:e3:21:53:1b:76:8d:2f:88:d3:4b:46:
         48:6a:2f:e0:37:87:90:31:1d:af:ee:58:b6:d2:35:9a:12:4e:
         ac:c8:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----