Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File:                     H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier:          +ReRYEJZ7UgkSkPcKD0Wc11pmlxb9NNC5RBCYBY0rys=
Subject key identifier:   09:93:48:5A:57:1C:6A:3B:DB:80:39:78:C0:79:34:56:C7:34:E9:6C
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer:       /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial:       01962F06AB3EDF67F9F3505ED4F34DD2E76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number:          0DA4
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: scQL1TeMrhpg5SYKDN4ffE7Eq3rjmD2QowdxbtOUlz8=)
                          2: vNstzceOXGplN-vBnPrAujnN1Ks.roa (hash: A1jnUd+2zoPrt/m5wPvY6xxOOy1gAscK2t40BFmGG10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ab:3e:df:67:f9:f3:50:5e:d4:f3:4d:d2:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=0993485a571c6a3bdb803978c0793456c734e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:23:8e:3c:b1:13:e0:e0:2c:ef:d7:af:c2:
                    dd:69:9c:26:23:33:b0:f1:b8:5f:ac:85:52:46:24:
                    db:e0:6c:5a:9a:22:3e:90:ff:2c:fd:cf:8d:86:bd:
                    9b:b4:37:75:e8:fa:5a:81:45:a5:7a:d0:90:b6:2c:
                    69:8e:4f:1f:91:f6:8e:b6:0b:2f:b5:ee:a5:62:16:
                    09:cc:f8:08:b5:0f:5f:63:eb:9a:e0:f6:49:4b:58:
                    79:6c:d5:57:ab:04:dc:24:43:51:ba:54:41:25:23:
                    a8:72:2a:9d:f4:67:ef:26:46:d5:4c:cc:96:cf:09:
                    86:63:64:6d:f0:d4:58:93:0c:ce:f8:1b:58:87:d4:
                    ec:66:90:18:b2:d0:3e:df:5f:3d:57:bb:ed:79:38:
                    42:a9:74:e6:fc:10:5f:b9:9c:6d:bb:e1:80:86:2c:
                    6e:a1:d0:9a:07:d2:75:b9:15:17:49:ba:b8:e1:ac:
                    0a:8e:d3:eb:e0:af:5b:2a:35:8f:eb:b2:ec:3e:a1:
                    3e:fb:bf:6e:10:44:93:ce:c1:b6:41:ae:b5:77:f0:
                    30:1a:2b:c9:46:f5:a5:c6:73:7c:4f:52:2c:1b:da:
                    8a:18:79:83:2d:9e:86:09:bd:be:62:9c:7e:51:66:
                    42:b3:c8:0a:86:1e:7c:6d:bc:ee:50:3b:1e:59:3c:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:48:5A:57:1C:6A:3B:DB:80:39:78:C0:79:34:56:C7:34:E9:6C
            X509v3 Authority Key Identifier:
                keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:7c:22:91:07:b5:a5:f7:dc:15:a2:70:c4:66:ff:87:44:
         9e:46:59:69:33:6d:c7:34:45:ce:12:71:18:44:3e:a9:5b:de:
         f4:91:c7:c1:36:51:62:23:03:9d:40:56:e6:e6:f0:f9:36:6d:
         aa:92:a4:75:a2:c4:9f:3d:f1:ae:4b:26:87:5b:f4:b5:84:4b:
         a2:81:b7:1a:5f:a2:44:62:57:e0:c3:25:f8:9f:be:ea:90:40:
         da:bb:f4:13:d1:4d:ad:c9:7d:59:3a:cb:67:dd:a9:bd:2e:f2:
         62:e9:2e:54:d3:fd:a8:04:18:a0:e5:75:7d:54:6f:7b:35:49:
         aa:e2:62:d2:1b:12:41:97:76:4d:66:82:1a:f2:35:e9:34:ed:
         ce:04:cf:49:39:60:6b:62:1a:84:6e:6a:1c:cc:df:08:b4:55:
         e2:a2:5d:3e:1f:96:2b:13:af:e2:50:36:20:29:0e:20:6d:2c:
         64:c0:ac:65:81:55:6a:98:f7:05:af:52:03:21:be:10:a8:a8:
         44:3c:a7:c2:a3:95:af:3e:52:5a:7c:95:46:48:23:a6:b5:1e:
         07:05:0a:14:7e:79:b0:24:08:81:b6:3a:b5:82:b4:f3:18:ce:
         d4:d6:b4:9d:b2:6d:a8:80:1c:59:6f:a5:ad:02:24:8a:83:e8:
         7a:ea:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----