Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File:                     HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier:          Qp333FZHVpRrmj45le0KdKj6Yo/8BLTUpM1xRj9pKa4=
Subject key identifier:   AC:33:83:DB:5C:4C:1C:54:25:EF:C8:5C:00:12:73:B1:2F:5B:15:DA
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer:       /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial:       01962ECFA46D0F408ED339AB67BDA67EBA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number:          0E56
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: ict5pjfKGtg2yM34w887nArnBqTHP/PlLO3ykufAx3c=)
                          2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
                          3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a4:6d:0f:40:8e:d3:39:ab:67:bd:a6:7e:ba:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=ac3383db5c4c1c5425efc85c001273b12f5b15da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:e3:ae:9f:ac:2a:3e:90:9e:e6:21:49:38:
                    b8:ac:38:83:f3:45:f7:70:34:cb:21:e2:e5:32:2c:
                    12:db:80:1d:cc:fe:7f:4a:72:f0:15:2a:d1:30:54:
                    7b:ee:6d:6b:ac:ef:78:5d:e8:10:c4:2f:64:ec:3e:
                    d9:30:00:bb:97:9d:e6:86:6d:54:e7:58:f5:f8:22:
                    a7:ce:cb:f0:d7:c3:98:0a:a0:b6:f3:1e:29:c2:84:
                    00:6a:47:ca:d5:13:8f:66:2e:4a:7c:9d:69:a8:56:
                    03:09:8d:cf:f7:6d:3a:73:e3:36:18:d6:23:83:7d:
                    57:31:23:1e:cd:4a:9f:07:1e:97:25:0e:8e:83:9b:
                    ab:de:9c:e6:9a:31:0b:b0:31:2d:97:a1:9a:8a:3d:
                    a8:52:c2:2a:ea:f2:da:ae:c0:e0:a2:17:a1:57:28:
                    71:ba:d2:9a:66:0b:b1:b6:ae:04:2a:f8:a8:cc:36:
                    b3:fa:84:f6:a8:ee:f9:c9:48:ba:fd:77:55:b9:76:
                    7d:b4:6f:94:f1:8e:e8:ff:8c:a8:09:4e:fc:99:5d:
                    7b:65:d9:11:be:92:cc:36:32:55:64:09:2d:b3:83:
                    24:ae:89:0c:25:b7:04:a0:4a:b9:95:8b:36:fd:db:
                    f1:60:21:da:f6:df:be:69:fb:c5:92:65:91:c9:04:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:83:DB:5C:4C:1C:54:25:EF:C8:5C:00:12:73:B1:2F:5B:15:DA
            X509v3 Authority Key Identifier:
                keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:0b:72:c7:21:0f:a1:39:39:e2:5f:f0:fe:2e:14:5e:1b:
         c0:8a:18:bf:20:cf:2d:b8:f7:6d:80:3d:cd:09:f4:f8:9d:9c:
         92:20:ce:20:fb:9d:e4:d5:34:73:7c:b2:07:a9:52:74:a3:14:
         be:a2:fb:ef:5f:3e:69:ee:16:e2:87:8a:3c:15:88:4e:17:d2:
         54:15:e5:42:9b:f2:ff:ce:2d:64:ae:50:92:a5:f3:53:71:84:
         13:96:9f:ed:38:c8:2e:46:71:4a:c1:4a:22:7c:99:06:30:c7:
         4b:fe:f4:b2:dd:74:86:f9:48:f6:2d:ea:9e:39:67:30:3f:df:
         82:f9:84:cd:85:d6:c8:4f:59:32:80:a1:2a:f1:6a:67:95:f3:
         d3:d7:3f:dd:ce:42:8c:fe:03:1e:58:7a:31:1a:aa:84:67:3c:
         b9:16:ee:d0:52:12:16:63:66:2a:af:6b:1d:22:7c:93:8a:bf:
         77:dd:66:36:52:5f:56:ee:7d:24:5a:08:3a:78:34:77:c2:67:
         2f:bf:46:1d:21:32:46:a1:4f:50:da:36:f9:d4:df:5f:f5:f6:
         f5:59:a8:c9:43:64:8e:61:01:03:b6:00:66:f9:ca:0a:d6:67:
         13:ba:cf:d6:26:01:c2:d8:2b:99:62:4f:f7:43:5a:84:c8:f3:
         75:e0:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----