Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File:                     HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier:          ToieM9m6ZVskjAS9aIu02JlRINMIHqsjEl0oXcjULH0=
Subject key identifier:   DF:6E:36:8E:E8:DB:EC:82:80:79:9B:09:15:C1:CC:6A:0E:68:6D:C2
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer:       /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial:       01962F06719D59FF4BE4EC1533C0B528FC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number:          04AA
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: CI9nXOkmk7IaEI/depZKwSprr+pU4Z17YGXe0m97nio=)
                          2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:71:9d:59:ff:4b:e4:ec:15:33:c0:b5:28:fc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=df6e368ee8dbec8280799b0915c1cc6a0e686dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:a4:1a:6e:9f:5f:60:79:90:cb:0a:89:c1:
                    15:a2:90:b9:a9:f1:25:1a:f9:01:3d:3f:2d:21:fd:
                    09:28:26:77:48:60:76:3c:dc:b5:01:e8:a4:6b:cf:
                    0f:99:c1:24:3b:5f:a5:e2:89:45:b3:88:c5:77:5b:
                    87:14:69:97:4e:7c:87:bc:96:38:11:88:ab:ab:63:
                    44:08:b0:87:2b:de:70:14:19:76:4f:fa:7d:cd:53:
                    1a:74:ad:4d:74:2b:2f:3b:cd:5b:52:aa:04:91:fb:
                    57:7d:79:d6:04:2d:51:25:54:84:c4:62:11:8d:ba:
                    99:f6:af:36:ff:52:13:5d:ee:45:8d:01:a6:8a:14:
                    e1:2c:ad:80:89:f0:bc:58:3a:c5:20:a7:b4:d2:46:
                    dd:6f:7a:84:9c:b4:4b:58:d0:92:f1:67:21:a9:f3:
                    2e:61:c4:cb:3e:21:d6:9f:2a:1e:84:c1:f1:90:ac:
                    14:24:35:f9:4f:49:85:46:f7:28:41:29:c1:d1:44:
                    2e:5e:3f:be:11:6b:cc:b6:1b:31:c8:0b:a1:c8:a2:
                    fb:37:e7:fc:e0:f2:45:f1:cc:4d:9b:6e:38:63:c3:
                    54:b5:a0:7b:9d:ea:1a:20:d1:8d:10:ad:ac:92:d1:
                    7f:fd:bd:19:6d:93:91:c4:5a:8b:78:5f:98:13:78:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6E:36:8E:E8:DB:EC:82:80:79:9B:09:15:C1:CC:6A:0E:68:6D:C2
            X509v3 Authority Key Identifier:
                keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:02:3f:a6:1c:db:ba:ae:27:61:1a:0e:c6:e2:7f:7d:a8:75:
         42:a6:02:ca:27:18:dd:fa:05:50:f2:72:77:52:35:fa:d1:5e:
         4a:1e:20:02:80:0b:22:94:da:0f:2d:4e:01:70:52:d0:a9:c1:
         b8:5e:cc:37:2c:90:08:a8:4c:e9:26:d2:08:ff:97:34:df:86:
         c4:a4:3d:97:0c:34:f2:76:c1:aa:1e:2d:13:d0:3b:0b:e4:9e:
         38:26:a3:bd:ea:57:4c:f1:54:a6:7a:32:1b:45:05:93:24:96:
         18:9b:4c:c4:81:19:e5:a8:d8:89:8f:eb:ac:c2:fb:85:ca:bf:
         38:16:fe:37:a3:46:a3:c4:6f:87:81:a9:f3:40:b4:53:7d:78:
         2a:4e:c7:32:5f:7d:1e:b1:cf:44:6c:78:0d:85:d1:3a:6c:35:
         0f:ff:71:28:a3:a1:3e:04:b5:85:64:14:4b:c8:a6:01:8a:24:
         1b:56:66:c5:be:34:2d:ce:dc:52:6b:22:a8:11:fb:ba:28:4a:
         15:65:f5:63:34:f4:19:5d:df:a1:ef:17:89:4a:0c:54:3f:33:
         b6:26:be:1d:6a:10:51:74:f9:64:6f:ef:50:b8:e0:20:16:0f:
         19:da:f0:10:c1:ac:43:a0:1a:0a:56:59:e6:10:16:2a:0b:cf:
         3c:19:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----