Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          9nsYqpcLf08qkwjWTG+z8xv9BX5l4IgY+Pfn4onqmsk=
Subject key identifier:   7B:DB:BC:06:22:F8:83:15:62:17:F2:50:88:83:FA:36:EA:CA:10:2F
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       01962F069355646D69B0AF96E312F3836476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0A2F
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: XkzvZDQb52irm2xmaj0EHCdJStfTelKSLGt3yP58NuU=)
                          2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:55:64:6d:69:b0:af:96:e3:12:f3:83:64:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=7bdbbc0622f883156217f2508883fa36eaca102f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:a9:fb:7f:ab:15:3a:cf:cd:0b:0a:e8:8a:
                    94:ab:35:be:19:38:0a:39:3f:dc:05:2a:1a:29:b7:
                    3a:0a:7c:6e:6f:b1:25:20:19:75:df:f9:c9:ae:df:
                    ec:ca:48:1f:34:20:26:90:3d:6c:dc:8d:4d:17:e0:
                    0d:b0:c8:b7:2a:df:f7:1e:d5:8e:1b:46:b7:5e:0e:
                    fe:fa:f5:a1:d4:71:c9:37:d6:ea:91:e3:40:3a:f0:
                    cf:90:84:2b:f5:56:3b:82:e4:65:9f:8c:03:36:31:
                    e0:a1:21:91:7a:d2:5f:69:da:40:51:db:aa:41:05:
                    b2:ac:7f:84:0b:96:c0:23:67:44:d3:bc:6f:21:56:
                    2b:0e:3c:ce:8e:14:e3:3d:6d:e3:0e:a5:8d:4e:58:
                    80:ad:2c:2e:5f:10:5a:bb:39:f7:99:b8:93:cb:54:
                    ca:17:af:f6:90:6c:16:38:c9:e3:8e:71:48:14:78:
                    34:e3:37:82:0c:5e:fa:9c:44:42:5c:7b:e7:9a:13:
                    94:7d:8f:f2:80:60:b0:24:6e:5a:35:97:84:79:10:
                    c4:b1:fb:c6:ca:1f:65:38:41:9e:d8:78:be:1c:88:
                    0c:32:fd:32:b5:d2:a5:f7:1c:a2:35:87:91:05:63:
                    9a:53:0e:6f:f2:8e:89:17:be:39:aa:ef:8e:e5:0a:
                    0c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:BC:06:22:F8:83:15:62:17:F2:50:88:83:FA:36:EA:CA:10:2F
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:75:09:c7:cb:7e:bd:70:6a:0d:0d:c6:f1:35:59:72:bb:5c:
         00:e5:c1:3c:3d:15:4d:51:2d:2d:d9:c7:8a:bf:1a:f8:b8:59:
         7f:8e:4c:1d:3f:83:74:9f:9d:e2:e8:81:43:ac:6e:1d:10:16:
         77:bb:a4:e9:fb:f5:80:50:12:4f:fb:9b:9b:17:93:e7:e5:be:
         7e:c9:47:83:52:00:39:74:6b:c5:c6:26:4d:e4:8b:77:9c:c7:
         37:c2:0c:25:49:e3:20:a9:ed:5d:35:b6:22:2f:d7:bc:5f:2e:
         f9:cf:c9:f1:e3:4a:28:fe:f4:87:f4:65:78:57:f1:37:8c:64:
         86:a6:86:54:b4:39:0f:78:27:4f:ce:1f:eb:3d:7c:c8:76:fa:
         ae:05:9f:57:8c:4e:00:bd:cb:f7:61:1a:0c:b0:33:12:c3:fa:
         0d:d5:77:f9:1b:9b:b8:36:d6:d4:5c:af:30:6c:20:af:de:7b:
         44:69:39:ba:f1:c8:0b:d9:2b:29:ad:5b:82:7e:13:62:ed:20:
         b9:d9:ff:36:d5:4f:56:30:cf:f6:00:f3:eb:18:49:1a:f3:04:
         e8:2d:68:37:7c:ea:b7:79:fe:d5:a4:f8:0b:9c:9d:9e:cb:72:
         a3:78:e6:0f:8d:4a:7c:f3:a4:21:14:fa:52:93:e2:5f:f2:f3:
         0f:10:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----