Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File:                     HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier:          onCBoExG4vsIDXhEe8uf0pSRwGgl2M5EXgZxMaNjGEQ=
Subject key identifier:   87:4F:26:45:55:C9:3F:9D:DF:D8:00:F4:43:87:5C:07:95:F6:D7:3B
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer:       /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial:       01962E2AB96E2147E095B8C74DB077704C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 2Sogz2f-Y-Q89kALOaFwXGpENls.roa (hash: xWX/sBmx7Cmqhctcmi5B9YqU1V0kQKRLbrhmA5MXJ0s=)
                          2: AAZYcUjhuGAJA3sXjywaEslf598.roa (hash: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=)
                          3: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: ZuQ1eQ5D8gyyyp/23yVJKVF4FwlutNMaIXpyYyunBC8=)
                          4: KX2FVoJMwagFqXSqm7WmM6GiAdc.roa (hash: kL6N1Ap9alUNCwv0399F2Foe8bxiyXhyi55mwtllJAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:6e:21:47:e0:95:b8:c7:4d:b0:77:70:4c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=874f264555c93f9ddfd800f443875c0795f6d73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:50:0e:2a:17:97:7e:92:d4:83:f7:68:a4:
                    57:8f:12:e9:f0:07:5f:ba:33:2e:cc:ad:9b:60:f6:
                    e4:36:b6:d3:d8:69:42:05:dc:39:16:1c:de:93:d9:
                    29:7e:f7:ad:5f:47:fe:63:72:41:9f:55:34:9c:b2:
                    b9:41:2a:76:9c:58:5d:df:6b:4b:36:e2:72:0e:05:
                    15:35:33:9a:02:d8:8d:d6:7a:6a:a0:da:83:3b:6e:
                    ba:e9:2f:ad:f9:fe:76:d2:c5:ac:0d:d0:65:c5:6e:
                    f4:aa:6d:23:09:78:b0:45:4b:36:18:df:92:ba:dc:
                    38:53:b9:01:b7:14:f6:1b:bd:b5:d1:8e:b8:8a:4c:
                    23:a8:87:04:18:94:7d:21:be:74:ea:ae:34:8c:4d:
                    fd:c1:c5:99:df:23:f5:fc:a1:ed:d4:b5:68:37:93:
                    9a:1c:2c:75:1b:ad:10:15:0f:68:41:80:d2:c8:74:
                    10:dd:30:3b:c0:cc:2a:17:43:cd:cb:86:28:f3:b6:
                    ae:aa:24:04:13:ec:14:d2:6b:6a:01:e6:8b:61:69:
                    1c:65:c3:56:05:2a:fb:1a:76:7c:b9:fc:77:21:e1:
                    10:f8:19:d1:55:ee:12:85:22:97:91:cc:2d:7e:76:
                    f2:e8:02:9d:bb:ad:bd:ad:22:39:32:21:fe:e9:19:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4F:26:45:55:C9:3F:9D:DF:D8:00:F4:43:87:5C:07:95:F6:D7:3B
            X509v3 Authority Key Identifier:
                keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:96:e1:0f:b6:31:3b:ea:18:a7:fc:75:8e:d2:6d:27:c5:ff:
         78:d1:ab:e3:da:36:43:e6:ea:64:5c:c1:bd:2e:e3:cf:5d:86:
         2f:80:68:57:4a:b3:2d:b2:0a:02:1e:f9:8d:7f:6d:88:18:63:
         8b:52:dd:e7:e1:3e:cc:f7:25:17:fb:d6:ff:2f:93:da:72:ee:
         04:8f:61:2b:2d:51:05:93:19:46:76:0b:43:8a:3d:e0:f2:ed:
         9d:43:fe:c7:7e:4d:8e:94:8a:84:6c:2e:70:b4:b0:80:15:c7:
         9b:50:82:51:63:66:0f:ad:64:3c:9d:1a:24:99:f6:8d:61:6f:
         9a:54:a1:40:33:5a:93:ab:c0:12:cb:65:64:2c:d4:a6:db:03:
         b2:aa:fc:da:da:f4:6b:9d:21:3d:54:7e:1f:a7:3a:d0:1c:de:
         b5:48:16:af:d5:57:0e:52:0d:51:95:dc:2e:b4:66:a9:8b:9e:
         af:d2:ab:6d:9d:b2:09:3f:20:b7:14:80:f3:45:24:e6:1b:16:
         2c:2d:9f:b5:00:4d:74:e9:bc:8d:19:5f:f1:39:85:1c:7d:6d:
         84:d9:1e:c8:17:50:44:88:5d:50:e4:ca:8e:3d:d5:8e:62:8b:
         7a:0b:69:02:49:a0:c6:d5:df:70:8e:cb:20:11:c1:de:b2:93:
         f9:18:87:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----