Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
File:                     HqtOAMDZLLUBu7IjrPA54nCR204.mft (raw, json)
Hash identifier:          551adBV5QsSgsXWM0YRXIohRLtsUoBwr4op9McEODOQ=
Subject key identifier:   3E:B4:05:4C:EE:07:63:05:89:8D:D0:BD:67:FF:A2:0E:2C:50:B1:2C
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Certificate issuer:       /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial:       01962E98CEAC1D608EE4813A4F763EE8EF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
Manifest number:          13B5
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: HqtOAMDZLLUBu7IjrPA54nCR204.crl (hash: o9IBJlDx4RBL/vjhc9XLLRaQuqcFN4qWuJxy7C+Q6mQ=)
                          2: TRIkg-QwPxodaMNyhJudZJsULfg.roa (hash: ufMh2ZHdT1rvdo6TTuMqjAAVY8O4a0cCsUjxcMvHh8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ce:ac:1d:60:8e:e4:81:3a:4f:76:3e:e8:ef:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=3eb4054cee076305898dd0bd67ffa20e2c50b12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:a8:1d:e7:aa:d7:b7:5a:11:11:68:9d:7f:
                    7a:a9:7b:7a:33:69:8d:38:7c:5f:bd:95:2e:29:6c:
                    0e:4f:d7:2e:0f:f8:20:0c:f8:5e:45:38:fe:43:82:
                    51:a6:5f:f1:a2:bf:85:81:12:ee:b7:5e:db:03:fb:
                    13:3d:40:77:a4:a8:ce:4b:33:8c:1c:ad:df:2a:77:
                    e4:55:32:07:46:3f:b8:dc:33:f1:5c:6c:e7:a5:b9:
                    fc:24:02:cf:d6:06:82:e0:d3:0b:6c:0c:69:91:14:
                    02:46:5f:1f:a9:13:85:ca:70:b6:70:57:d0:e3:b0:
                    e9:a4:ca:2a:c7:fc:b3:2a:9a:77:27:9b:b0:9b:86:
                    9b:d4:2f:8e:0b:f5:9c:ad:4f:bd:89:e1:c9:e1:21:
                    85:1e:45:65:5b:91:1e:88:95:14:7b:04:e7:76:45:
                    1f:f7:2b:52:a2:21:3f:3a:de:4d:ad:a0:49:91:e6:
                    95:82:3f:c8:62:e8:ce:fd:17:8b:c0:08:59:86:2e:
                    1a:b0:3a:33:fe:3a:35:2f:22:88:0a:7d:bf:96:07:
                    68:41:62:75:1a:6f:d7:2d:e3:35:d9:e3:1d:35:58:
                    5a:a8:47:c0:e9:90:a8:42:52:fa:95:22:77:2e:61:
                    d4:2b:ab:54:a0:e2:d7:47:65:7a:50:c0:25:30:6d:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:05:4C:EE:07:63:05:89:8D:D0:BD:67:FF:A2:0E:2C:50:B1:2C
            X509v3 Authority Key Identifier:
                keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:a9:ab:cd:1c:10:5f:50:96:57:61:f3:65:07:cd:8c:b4:
         7f:2d:22:0b:25:b7:b2:69:2e:3c:99:bd:99:eb:41:38:48:a1:
         6d:f0:9d:58:26:b4:22:e6:23:51:dd:ec:a0:50:34:1e:5d:8b:
         8a:1b:6e:18:fd:4a:f0:6a:77:ea:6a:6b:97:9d:ee:3d:b4:1b:
         a1:4e:04:21:12:c3:ab:03:ed:03:a6:40:7a:a5:5c:9c:66:f8:
         57:f8:27:e3:68:5d:47:76:92:b1:e1:29:52:bc:f1:9a:ae:d7:
         91:e3:e6:22:81:5b:fe:b7:9f:35:c4:06:6c:a8:bb:83:e9:e2:
         de:35:46:90:04:4c:d5:8a:e7:9c:23:32:58:b5:e5:33:37:57:
         79:3d:64:57:18:8c:a6:a1:86:66:c3:c3:70:2a:24:9f:1d:cc:
         62:87:ee:af:62:d4:ca:91:32:0d:a4:aa:39:54:67:30:dd:e1:
         5b:06:e5:d6:42:be:68:f9:9d:ca:be:57:6e:cf:dd:bb:b9:fd:
         17:60:8e:26:42:29:91:30:1b:60:31:51:f6:bd:28:5c:f6:69:
         2e:db:24:11:a2:4f:fb:45:f2:45:04:cb:9d:1d:ce:bb:72:3d:
         81:ce:3d:0c:a4:63:34:89:2b:ba:4c:d2:14:b4:14:52:87:6e:
         37:e8:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----