Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File:                     HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier:          Xn3rZVq3qbaiP1X0XUoekd5UKoFsrZKAqz/qMsNyITk=
Subject key identifier:   E3:89:1C:DF:BC:7A:58:B2:74:DF:D7:B5:C8:95:49:05:5D:CC:00:4A
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer:       /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial:       01962F06DD7C87D9DD7996B439099587C1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number:          10
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=)
                          2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: cNqCJNZGjCepqpw8I7FZsKLez+SWP7pXiE0a8Il+chg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:7c:87:d9:dd:79:96:b4:39:09:95:87:c1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=e3891cdfbc7a58b274dfd7b5c89549055dcc004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:fa:6a:5d:3e:77:7f:71:75:d0:c8:0d:27:
                    d3:80:fe:a9:fa:dc:58:e5:a3:52:17:86:6e:02:cd:
                    7c:6e:8d:ad:51:1e:cc:dd:a7:8b:cc:a6:4c:b5:b9:
                    fc:75:b9:12:23:3f:8a:4e:dd:7d:1e:3c:f5:fb:76:
                    94:51:21:df:b1:fa:c1:3e:86:8f:cf:d9:55:2b:b8:
                    35:2b:d6:78:3a:25:49:ef:4e:48:cf:1f:43:a7:c1:
                    57:95:04:e5:bd:7b:3b:4f:d3:79:a6:db:f0:1a:be:
                    8a:6f:af:69:05:9a:1f:e8:94:8f:d7:f7:ba:50:76:
                    7d:1e:1a:af:19:59:ac:f6:05:de:9e:96:a5:da:1a:
                    94:90:b2:eb:b1:82:11:d7:61:27:8d:fd:69:8f:69:
                    a0:86:44:17:cf:c3:94:43:56:9f:65:d7:0f:af:15:
                    9b:00:64:bd:59:76:0e:8e:54:18:88:1c:82:dd:2c:
                    e7:f4:81:5d:47:b7:a2:35:55:aa:17:f2:1e:c0:63:
                    da:ba:c0:53:fe:5a:07:ef:81:84:d4:8f:1b:71:5b:
                    2a:0d:1e:f5:da:22:85:d5:e8:eb:f9:14:77:5c:75:
                    a0:e0:f0:61:e0:37:3b:75:17:34:44:7e:72:93:4c:
                    7e:5f:74:54:f5:76:42:c5:fe:12:1b:2f:44:6a:ee:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:89:1C:DF:BC:7A:58:B2:74:DF:D7:B5:C8:95:49:05:5D:CC:00:4A
            X509v3 Authority Key Identifier:
                keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:15:70:1b:95:2d:88:2f:22:e4:5f:be:bb:b4:51:e2:79:
         6f:aa:a9:47:40:fd:2a:6d:64:94:47:2d:2c:7f:8f:b8:3a:76:
         69:3c:36:0c:64:53:78:88:9d:5d:37:eb:28:30:d7:65:96:de:
         22:8d:4b:03:06:7e:0c:be:22:07:45:fe:8f:7b:fc:3b:70:be:
         5f:0c:fa:0f:b5:5c:d4:2b:3c:7f:c7:7e:b0:be:bb:6a:95:5a:
         b9:19:fc:08:93:c8:0e:f1:6d:da:92:b2:18:95:eb:e6:b7:64:
         26:20:f7:ab:74:8b:d9:79:ce:7b:4d:23:b1:8f:64:f5:a1:ab:
         5d:23:20:08:79:85:43:13:24:af:0c:40:1d:45:2e:39:0b:1b:
         c4:19:73:e5:29:dd:69:51:64:c3:5c:9c:cb:34:0a:99:8d:65:
         5c:68:6e:1c:08:ab:51:f3:ab:5d:2e:1f:b2:ec:9e:6f:6a:5e:
         29:ad:09:59:b2:67:a5:f8:42:f2:8f:aa:e4:84:5c:69:f9:17:
         34:db:96:e5:9f:97:db:e3:c2:24:95:80:77:66:1e:a4:28:19:
         39:51:3e:c9:a5:fc:f9:4f:01:56:3a:a9:c1:66:74:7b:37:61:
         ab:f8:27:05:38:eb:b6:83:8c:eb:78:ec:45:73:c4:2b:2d:cb:
         74:27:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----