Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File:                     HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier:          js6RYUhcOQO4OPrQH1r0Ru1AMZHp+FPrsmch56vJxC4=
Subject key identifier:   EF:60:D3:37:50:34:54:50:04:D6:08:70:99:EB:52:A7:8E:A8:07:81
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer:       /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial:       01962E61FAB550321834C4209C61023667EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number:          03A0
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
                          2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: jIajivxtBSHkHKopu5TIPWnskpqVnm6ltWaA2VvVxnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fa:b5:50:32:18:34:c4:20:9c:61:02:36:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=ef60d3375034545004d6087099eb52a78ea80781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:af:3a:31:d7:82:fb:fe:fb:c4:e5:6a:55:
                    26:71:70:f7:1b:12:d9:d3:52:26:de:4e:64:8b:bd:
                    1a:89:35:e2:5f:cb:bb:3b:69:85:92:66:45:d0:d5:
                    1f:eb:89:57:1b:be:4c:e6:46:86:3b:93:da:a1:97:
                    9b:a2:01:d8:d1:e4:cd:e8:d0:2b:8e:f4:c1:8d:60:
                    68:fb:84:ca:20:ce:23:89:89:ad:a8:2b:98:05:8e:
                    2e:a3:62:36:61:a4:09:35:3e:b1:f5:90:1e:ca:9c:
                    9f:0f:aa:5d:2a:85:cf:c1:b1:49:12:7f:14:91:83:
                    00:80:07:21:ff:72:de:e1:e1:57:b7:2b:1d:67:72:
                    0a:90:99:7c:fb:5c:0b:10:fc:31:e6:d5:c7:57:34:
                    37:3d:27:87:86:90:7b:92:a7:47:0d:30:d8:57:d2:
                    22:71:5d:65:14:d4:5c:8b:e0:12:46:76:26:cb:9b:
                    78:64:29:b5:13:4d:94:fe:76:be:dd:d6:13:fa:27:
                    f8:b6:26:7d:7d:8e:17:9a:2c:a7:3d:97:f2:42:32:
                    ba:35:09:6c:69:13:94:2d:bc:cc:41:28:27:b4:11:
                    38:9a:1f:9a:fe:fa:3d:aa:18:04:f9:c0:36:fa:76:
                    de:51:e2:71:6c:5d:c9:61:04:e4:02:60:ce:1a:5c:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:D3:37:50:34:54:50:04:D6:08:70:99:EB:52:A7:8E:A8:07:81
            X509v3 Authority Key Identifier:
                keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:40:00:f6:d0:fe:ae:1d:0a:b1:6f:9c:33:b8:75:fb:c4:
         bd:9d:33:3e:77:b3:c9:40:94:71:e3:8a:de:d0:ac:ea:53:02:
         4c:38:99:5e:2f:ec:b8:8f:13:23:28:6d:8a:34:95:dd:d6:fe:
         25:f1:54:17:6f:c5:9b:7d:87:65:30:c6:14:1c:93:84:79:ca:
         e4:c2:83:e6:4e:5c:0b:24:95:11:9c:da:5f:e2:6f:ed:d9:02:
         e7:a8:aa:23:9d:85:b8:e6:29:81:08:91:4e:76:0b:b0:a9:31:
         25:dc:64:f1:bf:c3:c1:92:cb:0f:52:bf:10:8b:6e:14:df:32:
         72:68:81:37:b0:0f:ad:9b:66:46:57:72:f6:dc:44:4c:96:86:
         69:0b:55:cb:67:8e:a7:cc:3a:35:1b:6f:d1:47:c0:94:4f:03:
         eb:c2:e4:eb:d2:21:7f:c9:a9:17:81:32:5b:e6:c5:b0:1f:46:
         b6:11:68:5d:ac:45:85:5d:0b:69:35:9e:37:12:2d:e2:42:71:
         0d:01:6b:48:f4:1b:e0:95:fa:63:7b:fc:ac:fc:b7:0a:a2:b4:
         26:a8:cb:a8:5b:f4:c6:36:cf:0e:ea:6b:44:cb:5a:8b:88:6d:
         19:af:c2:16:4d:f0:bf:d8:3a:38:13:99:3f:32:19:f1:8a:af:
         3c:54:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----