Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File:                     1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier:          VX09r9cWCxwDf958cG/HWv2bMxO0qQMmW76wYBR1eVw=
Subject key identifier:   5B:8B:0A:BC:4A:75:39:BE:C4:F3:8D:FD:F0:D6:BD:A5:2D:3E:91:A9
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer:       /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial:       01962FAB5471E356BAA1AEC49B9186DCE258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number:          128B
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
                          2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: apTb/z0Ip1oXYag1X+EOlwiJjctFCiN9JWqK65+b+5c=)
                          3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:71:e3:56:ba:a1:ae:c4:9b:91:86:dc:e2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=5b8b0abc4a7539bec4f38dfdf0d6bda52d3e91a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:26:6e:68:66:6a:a6:9e:aa:7d:e8:23:3b:
                    85:be:38:6f:de:4e:19:b9:dc:ba:d6:ea:fc:32:65:
                    ff:4c:86:d5:55:d1:79:c6:d1:40:ab:c0:ea:2c:39:
                    40:fb:64:3c:88:b5:0f:53:e6:fa:c2:d2:35:a5:18:
                    6b:7d:4a:18:d4:60:e0:35:06:25:aa:ec:db:36:96:
                    99:11:b3:e8:a2:c4:87:94:48:b7:fc:24:e4:a3:48:
                    c0:9b:1b:ae:99:71:76:66:2e:57:58:c0:87:78:7a:
                    39:00:ae:39:bb:9f:f2:ac:0d:14:9b:3f:2e:64:c3:
                    55:9c:1d:01:1b:b0:a7:b0:0b:91:e2:47:1c:f1:8e:
                    cc:71:26:62:8a:c0:ef:21:a4:8b:00:21:48:84:e4:
                    1f:be:2e:b2:7f:f5:fa:db:14:3b:48:3e:03:c6:46:
                    14:56:71:d8:05:c6:2a:db:7d:c4:6b:b0:5f:24:66:
                    92:1e:9d:f1:90:5f:12:91:77:63:37:81:bd:c5:ad:
                    6b:5d:58:2d:99:56:fc:a3:a5:c5:5b:df:e0:86:a7:
                    03:d5:f2:05:d1:2a:a2:d4:0a:5b:f5:ef:96:5d:1b:
                    10:3e:27:21:a0:81:6c:30:c7:96:8e:0a:03:75:df:
                    da:3f:65:b9:d9:cd:94:59:10:2b:c9:9c:47:34:82:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:0A:BC:4A:75:39:BE:C4:F3:8D:FD:F0:D6:BD:A5:2D:3E:91:A9
            X509v3 Authority Key Identifier:
                keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:28:8f:ea:3f:5a:98:39:98:8d:cb:be:ee:36:13:cb:83:
         63:2e:e3:08:50:73:41:e5:8d:20:e6:ec:a0:78:44:cb:10:58:
         25:de:00:b6:ad:67:8c:f4:84:17:63:56:3c:ba:3f:f8:c0:bf:
         75:9d:4e:23:53:8e:64:02:49:c6:f1:5a:6a:96:50:2f:c7:a1:
         65:65:0e:bf:82:f6:9a:14:9d:ab:21:85:7e:0b:15:3d:16:c4:
         bc:7e:35:c6:a6:0f:c7:a9:6c:24:1d:9a:b2:32:20:ab:b0:ab:
         7b:cc:1a:95:79:be:94:74:6a:d5:0f:6a:90:5e:54:bb:0a:e0:
         81:7b:5c:77:fa:09:c3:c9:f1:98:37:84:17:21:0f:a0:7b:c8:
         65:67:fc:91:5a:46:72:fa:ca:c1:64:23:f2:73:03:38:56:d8:
         21:fc:a9:30:26:fc:a7:9f:16:81:89:10:0f:c7:55:5d:82:e3:
         56:a6:59:cd:00:0e:4e:ba:42:bc:4f:04:5a:dc:7a:21:44:6e:
         d7:3e:9f:8f:53:ce:3c:6c:74:63:78:23:c4:68:74:a1:54:83:
         6b:45:7b:2f:57:59:e5:1a:e1:05:b4:ca:07:b3:d5:b7:02:c1:
         de:0d:01:d6:b2:6b:55:3b:0e:9e:a7:bb:ca:5f:9c:31:3f:6b:
         45:81:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----