Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File:                     Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier:          AiSl+i9El3ZGgEjA2iQL81E4gWNVwdcS0DjwD5CSPWI=
Subject key identifier:   B8:B7:DF:3E:0B:24:33:46:33:F3:1C:C8:2D:D3:A3:E5:BA:F0:B2:90
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer:       /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial:       01962E6201CC7B121934BD0B705E3B4164AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number:          144E
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: M0PXLT5F3vAdHkIh/GmKhDuO/BEM7DjhavrwRQ4QAMw=)
                          2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:01:cc:7b:12:19:34:bd:0b:70:5e:3b:41:64:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=b8b7df3e0b24334633f31cc82dd3a3e5baf0b290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:bb:2e:13:8d:f4:97:29:21:93:2b:d5:7a:
                    7d:f1:a4:00:78:83:95:12:47:a3:f8:8e:33:82:82:
                    69:b0:f5:d3:de:4e:fb:01:77:64:6e:9f:3a:30:6b:
                    f9:41:cc:e6:f6:a1:4b:9e:1d:82:46:53:03:e4:d2:
                    ac:a6:69:2d:9e:54:1b:73:02:3e:84:e8:4b:04:56:
                    13:df:57:90:3a:35:61:e6:9f:fa:9c:f0:15:a8:5b:
                    c5:ff:fd:60:48:14:7e:92:75:4d:f4:0f:d9:fd:29:
                    60:4a:15:5a:9d:dc:06:5a:99:98:c5:2f:75:c7:39:
                    c9:95:14:d8:d2:7a:45:a4:88:4c:d4:b2:77:2b:7e:
                    1b:45:c7:40:0c:ce:01:bf:0e:a2:c1:5e:72:94:08:
                    1f:95:1e:7a:b6:67:75:ad:94:d5:bb:a0:67:d2:60:
                    2c:60:29:01:b6:0c:57:ce:5d:6c:d2:77:70:a2:13:
                    55:3c:c0:88:be:bf:1f:d1:e8:1a:8b:94:42:d4:14:
                    c8:75:94:82:f3:76:6c:ae:a1:3e:02:7e:97:01:91:
                    5b:e2:5c:4e:60:5b:2a:40:fe:88:71:b2:53:7d:f2:
                    80:54:61:37:fd:26:70:4a:c2:ba:be:6b:06:59:2b:
                    1a:51:4e:32:a4:75:15:f4:ba:c9:c1:a9:98:01:00:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:DF:3E:0B:24:33:46:33:F3:1C:C8:2D:D3:A3:E5:BA:F0:B2:90
            X509v3 Authority Key Identifier:
                keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:7c:77:f9:d7:01:0e:9b:80:3a:ab:12:82:9d:45:1c:e5:
         aa:21:2c:ed:88:33:08:b9:1f:d1:72:69:5b:9f:6b:73:68:7a:
         cf:fd:b3:1d:9f:f4:ef:4c:44:63:c2:4f:28:d6:2f:cd:0b:8a:
         0c:15:0f:33:a2:1b:5c:3f:d3:1f:10:ed:a8:aa:bb:e4:8d:be:
         14:f5:cd:af:ea:35:98:7d:cf:87:14:38:90:d7:c2:80:3c:51:
         55:2a:82:a7:33:ee:ad:cc:89:55:cc:02:e7:8f:41:c5:69:04:
         fc:94:11:15:ae:14:5f:64:60:00:2e:bd:bb:43:29:76:16:8b:
         c1:8c:44:c4:3b:6f:9d:07:b1:26:15:12:31:08:8b:51:bd:ae:
         84:81:6f:85:c8:5d:45:6d:81:51:15:55:9d:b2:26:ed:d9:77:
         4d:68:31:12:5a:2c:62:be:93:ab:b9:cf:37:40:55:9e:2a:6e:
         cd:ad:ad:aa:d8:40:97:49:af:2b:bb:49:3d:b5:4d:92:24:4e:
         11:31:60:3b:de:1f:02:e0:ba:d4:1e:57:3d:e7:46:21:ab:8f:
         99:c2:00:f0:4c:b7:b3:d5:f5:22:55:9b:6e:16:8b:64:b1:ca:
         b4:a2:e4:41:d8:dd:4f:2c:65:c2:9a:19:4a:d9:c6:7b:b1:81:
         9d:44:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----