Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File:                     Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier:          XJ1VWH0dFwdegUvWw/17gcC9tYyACVip97ORA+cNk+U=
Subject key identifier:   BE:1D:48:12:D5:D4:30:13:AB:AF:8D:AC:9D:FA:A5:B0:BE:4C:A8:0B
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer:       /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial:       01962F7477E62BBD1E7E607106601A18A8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: FjIahcKt09OuzmKTy1-sTrhxfJE.roa (hash: vdC0TpdFOFzZCc1CfiRmwTujlsmnztXNdvUzRtn8G+A=)
                          2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: 1qczgvMLe/5C9KdxOS5LkZOCJI3/Tu1M+8kUQdxw738=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:77:e6:2b:bd:1e:7e:60:71:06:60:1a:18:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=be1d4812d5d43013abaf8dac9dfaa5b0be4ca80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:cd:c9:62:70:61:a6:07:0e:2c:92:d6:72:
                    fd:bb:70:83:f1:59:cd:9c:41:d5:2a:1c:ed:80:7c:
                    c7:b0:cc:c9:df:9e:25:f0:fd:34:20:eb:34:a8:47:
                    36:1a:2c:70:4b:61:5e:35:9f:65:6e:4a:99:79:2f:
                    02:c2:a2:8f:f4:45:78:c5:9f:80:48:83:e1:31:c9:
                    a5:15:c3:3b:04:a0:02:25:a7:2a:cd:ed:6f:63:07:
                    e2:49:82:a8:b6:8a:4c:25:f5:b0:4e:08:ee:59:d9:
                    1b:17:83:b6:6c:f1:8b:b1:55:c7:85:c0:ff:77:ea:
                    b9:25:9a:bc:55:03:ac:10:f8:b6:78:97:53:3a:bd:
                    ad:84:e6:56:4c:39:a8:ef:a9:40:01:86:ac:35:06:
                    03:2c:5e:2b:b8:2c:5f:d1:96:e8:22:83:04:71:0c:
                    94:7f:6d:dd:19:ad:7e:c9:f7:07:43:53:20:29:1b:
                    61:57:1a:43:1c:a6:1b:8c:01:92:8d:46:d1:3c:27:
                    71:d6:a2:6e:e3:17:df:44:29:03:59:76:cf:5b:e7:
                    3a:f8:2d:41:84:71:57:61:fe:60:f5:29:da:85:80:
                    03:d4:33:65:cf:79:20:42:37:48:38:8c:4d:bc:ef:
                    a3:80:86:de:00:18:10:09:83:f0:31:3f:24:2e:07:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:48:12:D5:D4:30:13:AB:AF:8D:AC:9D:FA:A5:B0:BE:4C:A8:0B
            X509v3 Authority Key Identifier:
                keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:e4:24:02:36:d1:40:20:61:c2:54:6a:47:a0:fb:58:fb:
         65:cf:8d:49:d6:b0:53:57:5a:41:91:58:07:53:f7:3e:0c:26:
         d8:95:bb:8a:e3:a0:cd:75:8d:9d:b1:d6:ec:ff:c7:91:f9:fe:
         44:f9:35:a3:10:b3:71:d3:c5:01:3e:89:fb:47:3d:ce:07:30:
         24:d7:ff:1d:83:74:90:41:a1:15:5e:6b:7a:a3:46:8b:3b:d0:
         6e:99:d8:51:6e:03:9f:8e:9f:95:ef:71:28:dd:d4:5b:8d:fc:
         8c:60:26:a9:1d:8b:25:07:a1:d4:ee:da:d2:7a:74:39:2e:b0:
         0b:11:0a:cf:b5:6c:d7:9b:54:52:7d:b2:2d:32:c6:3e:e7:3f:
         cc:3c:9f:60:1c:2c:0b:72:25:80:f2:c5:78:3f:99:67:c4:06:
         f7:b8:af:71:de:12:68:af:0f:52:55:0c:8c:38:6b:7e:08:c4:
         c4:65:56:7c:61:48:38:86:18:f9:61:44:32:96:d7:00:2b:4d:
         88:71:ec:9f:f2:42:03:50:d4:2d:9c:35:26:72:79:ed:ec:10:
         30:36:59:ae:92:11:1f:c7:98:27:d8:1f:05:79:0c:e8:8e:76:
         25:0a:75:5e:85:f4:89:c7:42:6b:da:66:c3:88:c3:03:b9:55:
         4b:ef:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----