Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File:                     HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier:          pumS/eqdeNKRQO5WaZNRKFXGH2xm68gzHdmIY10rQ74=
Subject key identifier:   5C:DA:53:B8:94:AE:1D:9E:FC:95:B8:A0:81:76:24:07:18:8C:AB:2D
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer:       /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial:       01962F066A7A532F32E56B4DEEED9FB53232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number:          0C7C
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: 4jxB008wSfF/kkrvFP3aX0pvRGDRlOx7twUjI1GfPLY=)
                          2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
                          3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6a:7a:53:2f:32:e5:6b:4d:ee:ed:9f:b5:32:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=5cda53b894ae1d9efc95b8a081762407188cab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:88:f9:c8:17:90:48:4f:d5:a6:e4:2b:64:
                    07:ba:73:d2:b0:d9:62:46:72:13:c4:a4:40:27:e2:
                    b7:54:59:74:50:3c:be:f4:67:14:78:f1:07:c3:03:
                    34:87:e3:95:0d:ed:fc:ec:8d:18:a2:8a:69:2d:0b:
                    bc:83:b4:61:19:a1:58:86:52:ae:c1:d4:36:3d:44:
                    73:12:09:51:2a:74:ff:84:47:9c:a1:52:c3:d4:1c:
                    a3:fe:8f:c6:fc:fa:e9:64:1b:27:42:c9:f4:69:8b:
                    ee:bf:5a:95:99:51:c3:6f:eb:cb:96:12:ee:ed:f1:
                    eb:71:2f:c5:17:03:b9:cf:b9:24:da:04:6c:64:ef:
                    5c:c4:f5:bd:e2:a0:0c:e1:d8:c7:8a:77:04:5d:08:
                    2b:ac:df:43:20:4a:c4:e3:83:09:ef:1b:c0:11:da:
                    9d:28:c4:e6:73:05:38:f9:aa:43:f6:b2:08:91:d5:
                    9c:b7:a8:96:81:43:55:4b:02:02:cf:56:d7:3e:2a:
                    a6:28:17:4d:2a:8e:78:63:a7:eb:b5:9a:02:5a:74:
                    39:20:d6:14:d2:0b:f6:40:be:98:d6:af:23:57:c1:
                    b0:c9:a0:00:ca:e6:9a:27:dc:20:cf:8f:f6:6a:ca:
                    2b:c0:c1:a2:90:4d:3b:59:61:a8:46:92:88:ee:17:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:53:B8:94:AE:1D:9E:FC:95:B8:A0:81:76:24:07:18:8C:AB:2D
            X509v3 Authority Key Identifier:
                keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f3:67:f2:5c:28:d7:34:89:b6:42:ab:08:51:95:8a:c6:16:
         1b:08:2e:b0:fb:32:8c:2f:50:d0:fe:74:59:c0:8e:df:92:fd:
         37:cf:28:ae:ab:c0:99:bf:36:28:d1:fd:4f:b5:a3:14:01:e3:
         06:da:f1:cb:43:04:83:ab:de:0f:3d:74:73:9b:44:93:17:3d:
         b1:00:d2:81:fe:7d:97:d9:3c:b6:34:e5:5b:34:81:dc:c8:6c:
         78:8a:17:c3:8e:9d:0d:21:b6:e2:d5:6d:86:f8:2a:77:bf:eb:
         98:bd:f6:07:bc:16:30:ec:f1:4d:9e:36:73:8a:0c:ca:5e:9c:
         5f:b0:d2:4c:fb:b3:bb:97:05:0b:3f:c6:97:6b:48:8a:dd:78:
         13:8b:a8:63:df:70:e3:52:05:6f:2c:e4:aa:a5:78:58:6c:cc:
         ee:42:ad:90:00:ec:43:03:04:c5:03:4b:46:de:99:1b:00:0b:
         e7:5a:fa:7c:b9:f6:bc:34:e6:f8:a1:85:e8:03:7e:5b:fb:bc:
         b9:e4:56:f7:0d:10:12:93:c0:c5:a1:54:cf:61:3f:a3:39:fa:
         6d:fe:1c:4d:04:ba:b9:bc:9e:b8:58:47:14:fd:a4:c2:15:35:
         8d:d0:90:ea:0d:82:8f:eb:cb:e2:14:aa:e6:5f:96:f8:97:c9:
         9a:b9:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----