Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File:                     HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier:          b7AsyfTqoTLM7JGzcNWDZB77R22+hcykE5J5cu44CMk=
Subject key identifier:   5B:96:93:91:0D:EF:C2:85:EB:03:39:AC:47:E1:34:C5:43:AA:3C:9D
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer:       /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial:       01962F06E26D5B7B6D631C06A6E4A87813CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number:          057F
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: 9IlUFNkacIKPNGhP+2ZI/ZI45cz3JnQ/K3NkdRtxqvY=)
                          2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e2:6d:5b:7b:6d:63:1c:06:a6:e4:a8:78:13:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=5b9693910defc285eb0339ac47e134c543aa3c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:3c:c4:41:3b:81:d6:49:e9:c4:a1:6b:ea:
                    80:b2:b6:69:c2:35:f2:f7:48:23:3c:06:3d:db:7f:
                    cc:e7:80:7b:ad:0c:0d:d0:1f:a8:a2:94:91:06:8a:
                    b1:5c:07:3b:41:af:b1:03:92:33:c3:26:35:54:8c:
                    d6:6b:4a:e1:c5:f7:91:f4:d1:10:99:57:34:db:9f:
                    3b:94:74:1b:f7:40:69:2a:46:0e:ed:86:2e:ad:62:
                    d0:31:72:a3:be:6d:0f:58:0c:29:9e:55:de:a9:40:
                    e9:d1:9d:c2:f5:ab:31:2d:8f:89:80:fa:b4:3d:b5:
                    58:ab:cf:74:38:48:1f:e0:18:56:63:17:2a:69:33:
                    3d:a7:7c:d6:f2:ab:9f:74:db:62:70:8b:8c:28:3d:
                    a8:0a:8d:ce:9a:57:42:24:9a:ee:44:58:49:e9:89:
                    1e:32:40:3c:3f:a0:14:44:14:7c:a8:0e:ba:43:56:
                    ba:e1:84:a8:1b:b4:9d:9d:35:3d:f1:59:77:85:e8:
                    7a:02:86:fe:59:2c:f0:6f:86:45:9c:8e:b1:ee:ce:
                    59:17:e3:94:23:b1:ba:d5:06:63:b1:96:46:bc:ba:
                    da:6f:58:8e:51:76:67:38:a3:29:e8:79:75:35:5d:
                    b2:4f:cc:9a:3b:98:17:78:05:fd:02:4b:21:cc:81:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:96:93:91:0D:EF:C2:85:EB:03:39:AC:47:E1:34:C5:43:AA:3C:9D
            X509v3 Authority Key Identifier:
                keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:29:be:c8:90:0e:a0:2a:e7:52:7d:5d:52:26:ad:37:15:
         ea:10:9e:cf:ac:42:51:4a:39:d5:85:45:00:bc:ec:7c:cf:6d:
         10:58:29:57:90:88:c2:4f:de:2e:59:ef:0d:21:8b:da:cd:50:
         d6:76:a3:f5:00:9f:97:23:f6:29:83:de:a8:8c:41:a4:29:f5:
         2c:7f:1d:fc:48:64:0c:be:ce:cc:fe:b0:74:71:cb:f4:a6:d1:
         67:d9:3c:a9:96:79:e3:a2:03:e2:68:6e:91:e6:a5:9f:9d:bf:
         6d:8e:fe:38:aa:56:b2:bd:b7:77:bf:31:41:ff:3e:1b:09:3d:
         eb:23:97:aa:d8:f9:4d:50:6a:71:3c:63:49:95:8c:51:61:50:
         b1:81:0c:da:2d:cc:3c:5a:a8:9b:6f:48:4d:61:89:9a:76:0d:
         55:3e:84:33:e5:bf:f3:07:da:62:46:9e:e1:95:ae:ed:cd:4b:
         f4:87:43:70:1e:91:f8:27:53:4e:70:42:90:3a:1c:65:b3:1c:
         61:79:57:9d:71:d7:85:cb:49:a8:4f:0f:2e:c0:aa:3d:8c:2e:
         91:9b:19:ff:50:9b:08:de:37:d3:72:6f:75:a3:93:78:54:9b:
         7c:36:ac:b4:e0:09:be:0c:6e:0c:10:1a:84:eb:b1:33:bb:10:
         36:75:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----