Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          SHMtCFW8223in0iCWDx9fSu53QbyTsTUuGC9X9C0Ppk=
Subject key identifier:   54:F5:EA:0D:03:A6:60:75:D5:E7:6B:DD:B0:EC:19:80:08:99:18:17
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       01962DF3E04169BBA80FA9B1CE3007D610C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          150B
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 0JAW72MZKRqNPvvLJj-mrzsc6bA.roa (hash: NEJr2j8Q5/yoZT3ZjHtn7D79sLVX3rHSkvuJZKnCCDU=)
                          2: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
                          3: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
                          4: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
                          5: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
                          6: 5KpVCQ3CyEztQ9cIEvVYbZRbiYQ.roa (hash: wEh76twlgMaB5r7NetVkn53k9vIu3IdtKnUUcrVB2Dg=)
                          7: CwwBxU06yQHOSN9FW346av3eJSg.roa (hash: sN559HrGwcrwAx9RFEK1aPRGFezwF0x6CyfsT0lApC0=)
                          8: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: I66SEvAZXTx3UIbP4klGQrZKItKtX3D1j//IQpApHF0=)
                          9: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
                          10: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
                          11: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
                          12: QzQU3ZGZ8hKGnEpd1FBDBLaC54I.roa (hash: hwGGHotb5LYjRlv6CVYdkeylIRe1Cifyeb3uVRZFRw8=)
                          13: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
                          14: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
                          15: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
                          16: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=)
                          17: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e0:41:69:bb:a8:0f:a9:b1:ce:30:07:d6:10:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=54f5ea0d03a66075d5e76bddb0ec198008991817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:6e:4c:e7:62:85:9b:df:07:c0:a8:a5:43:
                    f2:f4:49:d0:23:d1:9d:9f:82:ae:94:d0:e3:a1:a5:
                    3c:fa:c6:a0:d2:b1:50:63:5d:9a:f6:2e:fe:f1:fb:
                    b7:46:ca:7d:84:db:7d:b0:d8:7a:ff:a9:94:4e:54:
                    f5:69:47:de:9d:37:12:ff:54:29:a8:ee:41:66:ad:
                    d7:ed:b0:cc:08:d9:fe:c9:c4:79:ba:e6:ef:cf:15:
                    39:32:e7:fc:39:74:31:5c:bb:f3:d8:4a:0e:42:ad:
                    82:20:a4:f5:78:93:c8:6d:3f:cf:80:77:b9:7b:12:
                    25:88:93:be:3e:03:56:d2:ed:9c:4b:bb:03:16:4c:
                    ab:83:e0:ca:ab:c2:b1:df:53:e1:6b:0b:07:6a:c0:
                    ed:9e:0b:b6:c8:80:21:3e:5d:78:22:b8:9d:88:9a:
                    91:9f:6c:e5:fa:2f:a4:a6:d0:43:3e:3a:9f:2d:bc:
                    fd:e2:8d:0c:3c:6a:ed:f1:c2:21:14:bb:97:0e:3f:
                    f3:a3:74:3d:c8:50:f8:bc:4c:e4:46:0c:ed:04:00:
                    ef:51:c8:88:c2:81:8d:cd:7a:a2:15:bc:23:7c:46:
                    fb:ea:ad:e1:5a:8e:ca:90:7f:40:90:95:d5:cd:66:
                    57:fb:1b:6d:b4:fb:ab:83:a5:6a:a8:91:be:5f:4a:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:EA:0D:03:A6:60:75:D5:E7:6B:DD:B0:EC:19:80:08:99:18:17
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:58:41:0c:aa:5e:28:d7:44:51:46:3f:2b:06:f8:31:26:
         39:11:5b:ce:e6:43:53:a9:b4:aa:f8:48:2a:ba:a4:c5:6a:e7:
         40:85:b4:cc:40:3d:6c:dd:44:db:ec:9f:f4:58:f0:52:7f:1c:
         92:c9:48:d6:fa:4d:fe:df:11:37:cf:95:9b:ee:ab:a5:03:33:
         8c:10:97:41:22:a9:6f:19:41:1e:9d:d5:d7:6c:cd:cb:05:8e:
         9a:df:c9:24:16:be:58:83:3d:60:f4:81:df:29:69:6a:51:3a:
         67:45:15:66:d6:3b:f1:ea:2f:6a:fa:b7:91:0b:06:a1:b2:9a:
         ed:b0:3f:62:7d:e2:ed:04:98:4b:ff:8e:eb:f6:23:82:c1:76:
         db:17:e5:77:bf:d9:29:65:7d:7e:3b:15:ab:43:b2:a6:02:b0:
         dc:89:03:41:c2:a8:c2:8e:ac:52:79:57:68:41:9a:00:2a:5b:
         92:51:e5:08:4e:d3:89:1a:ee:1f:43:17:5d:0d:e5:03:00:76:
         1f:9f:b2:c4:09:14:02:30:9b:4e:50:dc:76:1f:f9:1f:a2:56:
         8c:12:2c:80:aa:21:81:e1:8d:7b:14:a4:17:b4:31:b7:e2:9c:
         98:79:74:53:d5:7d:8a:fc:49:d9:ab:75:87:de:1e:dd:bd:aa:
         a4:9c:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----