Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File:                     Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier:          aZBjPKZ4mid0ZjqC61zaU8+SHPt9ddrzi5wb1gw/ZUA=
Subject key identifier:   18:E9:98:5B:64:F8:BB:E0:ED:F0:C3:DB:92:28:D3:8C:62:56:4A:EA
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer:       /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial:       01962DF3DA4C9E9A783F67DBE156473572DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number:          0D33
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
                          2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: BhCPSZBKJydH7WAYAHA4zVycokyAP1t/iuK3NKsgcsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:da:4c:9e:9a:78:3f:67:db:e1:56:47:35:72:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=18e9985b64f8bbe0edf0c3db9228d38c62564aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:29:65:f3:14:26:23:88:23:db:1f:07:6f:
                    62:7c:68:b9:42:0d:ff:7c:1a:73:34:86:6f:ed:94:
                    6a:7a:ac:79:43:3f:d5:89:32:6d:4b:6b:82:35:f8:
                    3a:3a:48:fa:33:ef:19:6d:d7:01:50:a5:1b:45:15:
                    d4:7b:1e:7a:06:f8:b2:1b:42:2a:4e:f1:50:d2:fa:
                    bd:4a:0a:a1:1a:c9:43:b6:80:55:37:84:c2:ef:cb:
                    36:16:93:09:d8:bb:60:86:34:4d:5b:af:59:0e:1f:
                    88:a4:68:84:85:fb:6b:28:82:5d:f8:fe:99:f3:e9:
                    6f:86:c2:8f:44:7c:90:ba:7f:a5:28:ab:13:03:23:
                    29:c7:7a:eb:9d:3f:f2:1e:02:a9:47:27:11:2c:22:
                    a7:04:09:e9:f1:fb:f8:6a:bc:ad:1d:59:ec:dd:38:
                    90:32:6d:30:20:31:c2:7f:58:9a:55:9f:ad:39:ec:
                    fc:5d:37:71:9b:03:f1:a6:a2:7e:01:62:a7:7c:5a:
                    fc:44:a4:ab:14:c2:0a:dc:6d:95:88:9f:d1:10:22:
                    1e:5c:14:8b:de:5e:7f:bc:8a:9b:09:8b:29:59:c5:
                    29:5f:be:39:b0:4e:b4:8b:b4:2c:76:d0:f4:fe:49:
                    f5:9d:d9:97:1d:a7:c7:dc:10:4e:34:99:96:31:93:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:98:5B:64:F8:BB:E0:ED:F0:C3:DB:92:28:D3:8C:62:56:4A:EA
            X509v3 Authority Key Identifier:
                keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:de:af:1a:6f:76:5b:89:08:b1:89:91:71:c6:75:d8:84:
         3a:77:7c:53:ab:ca:cf:55:bc:55:7b:f1:18:7e:a6:03:9d:0e:
         87:cf:ad:47:a2:c6:ed:f3:ba:47:d6:cc:06:29:b9:23:69:ed:
         a8:6d:01:0a:6b:cf:a9:53:54:31:86:b1:d4:99:a8:be:40:e6:
         2b:a8:33:5a:38:8f:4e:96:d9:a4:29:87:6a:d8:f6:17:0f:16:
         ec:c9:9d:d9:5d:4e:7f:35:87:d4:df:7d:2e:0c:37:2b:61:02:
         76:2b:0e:5a:fe:ac:87:f7:0a:f1:85:b2:1a:bb:89:a2:45:31:
         15:22:b1:62:8f:a5:19:92:45:91:3b:57:62:64:ad:95:19:ed:
         83:0d:42:6a:cf:ef:8e:3c:c8:68:67:d9:b1:7b:82:a0:28:49:
         7f:22:2b:d2:15:33:c0:71:7a:c4:28:1c:d8:f4:6a:4e:f4:c5:
         ab:f9:df:9c:c3:e5:ea:b2:ab:05:a2:5e:6c:04:3d:81:95:39:
         48:c7:bd:64:94:91:af:f6:85:26:3a:e9:43:aa:36:fa:07:e2:
         50:dc:92:ef:fe:d6:00:48:fe:58:a6:b7:c9:5a:60:a1:0a:96:
         d5:e0:01:72:29:a4:71:3a:61:59:b2:7f:21:80:8d:87:3d:b5:
         f5:e5:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----