Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File:                     HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier:          TGMMVuUjbDA7l4gZOnvby1Zni8YZ4IM53fhrgnU2PFY=
Subject key identifier:   F1:08:06:41:DB:5A:78:F8:68:E1:91:7D:FF:29:77:37:2A:93:95:B2
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer:       /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial:       01962E2B08C06209D078925DAB4F06B76874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: K4XZT063fTkBvDmVjFFYuA+mjcHQuJa5Fx1okcHxqnE=)
                          2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
                          3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:08:c0:62:09:d0:78:92:5d:ab:4f:06:b7:68:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=f1080641db5a78f868e1917dff2977372a9395b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:9c:31:46:7a:80:bd:44:e5:ef:0f:4f:c3:
                    e8:a3:03:fe:57:d1:ff:f2:e0:2b:eb:19:5d:fa:07:
                    7f:45:98:55:8a:f8:51:cb:85:3d:e2:3a:aa:a0:33:
                    41:ee:3e:d6:1d:73:ab:93:a2:b5:f4:a3:b5:ff:6b:
                    e9:a6:97:cf:95:ae:92:27:99:11:13:6b:14:53:21:
                    7f:ef:47:5e:8b:15:08:83:30:98:ed:47:41:d4:fa:
                    d5:7f:fc:1b:48:02:83:af:72:f2:b3:48:ff:d1:b1:
                    cf:22:c4:ef:80:48:ac:0e:7b:3d:51:fb:88:6c:6e:
                    e7:bf:34:1c:26:a9:79:c2:07:a8:34:4f:fa:f5:7b:
                    2b:d2:6a:a8:99:66:f5:d4:ff:d9:7c:26:23:2d:af:
                    e9:f0:c6:25:01:33:56:dd:6a:4b:01:82:ad:f1:a3:
                    0c:1c:0f:77:76:dd:77:b4:bd:8b:0d:ed:3d:da:6e:
                    b4:64:33:b0:79:8e:ea:62:5d:21:93:98:11:a6:20:
                    ba:8e:98:e0:65:0a:24:92:0f:01:59:3a:45:f4:dd:
                    fe:98:f9:1b:cc:f1:4b:6e:fc:1e:23:fb:6c:7b:8e:
                    47:b0:16:ca:11:71:b2:e4:8a:b9:be:50:a9:d9:6e:
                    9a:2b:af:c1:7e:5b:0f:9d:64:6b:99:94:19:b4:b1:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:06:41:DB:5A:78:F8:68:E1:91:7D:FF:29:77:37:2A:93:95:B2
            X509v3 Authority Key Identifier:
                keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:89:06:04:64:8d:31:72:ec:74:a4:c4:9e:17:33:59:af:
         12:9c:b4:b8:46:51:d5:67:66:8c:70:31:6c:67:78:08:40:19:
         9d:35:83:40:2b:e8:3f:37:ff:d2:19:be:dd:6f:18:88:98:fb:
         56:ab:ce:42:7c:7c:18:95:ff:a9:af:1d:87:d7:6e:54:f1:36:
         c3:de:42:20:2c:59:98:4a:d6:9f:9e:79:f8:a2:2b:ca:5f:1e:
         f3:6c:42:75:0f:c4:3c:64:6d:70:05:97:d2:14:c6:b0:b9:ea:
         a1:c5:a3:9a:eb:0b:3a:80:e9:11:d2:6a:29:0a:97:4c:e9:af:
         2a:9a:fe:43:77:b2:e8:c9:6e:53:1a:66:50:2d:c9:18:c0:eb:
         b8:0c:2f:28:ed:9f:dc:f2:78:2a:64:1e:7e:08:cb:d1:32:75:
         47:bb:9d:bf:9a:d7:44:60:d9:0c:50:75:04:8c:bd:80:52:73:
         fb:ef:4c:ae:22:13:0e:32:c1:e2:f7:a0:be:76:1c:27:0e:ee:
         8f:87:ac:60:f9:1f:fa:04:50:7a:e2:d5:fe:55:07:02:ad:24:
         2a:32:44:9a:a5:b4:54:90:03:21:2a:a0:42:a6:98:b0:67:4a:
         6f:7e:32:58:3f:e4:06:64:89:93:b1:58:4b:b3:f5:3e:e3:2d:
         9e:40:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----