Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File:                     Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier:          mpZ9AJ3jGEx7d6/ny876xEqYFEm+QrIFkXImZTQOiKY=
Subject key identifier:   97:7A:59:4B:AC:3E:C9:D6:F7:10:EA:AA:2A:92:97:C6:D3:F9:3B:2A
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       01962ECF98E28A187B2828F3A9A17833F6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number:          152E
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 6lZmng0xHa3v1kTd1z_jq-ERGOM.roa (hash: UTqY+wA/uciwVEvUAPtFraoFsMSyPYX4ydyMxQUmWbE=)
                          2: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
                          3: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
                          4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
                          5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: Siu9lubpF5rrtmw/3rePWgptmPT+KTtPqqul0ZD78xY=)
                          6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
                          7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
                          8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:e2:8a:18:7b:28:28:f3:a9:a1:78:33:f6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=977a594bac3ec9d6f710eaaa2a9297c6d3f93b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:3f:a5:dc:be:e1:04:8e:e6:3d:5a:70:f9:
                    b1:b7:40:6e:6b:be:f4:b6:2e:5b:8c:c2:ed:e0:78:
                    60:bf:71:e0:e1:2e:8c:35:e3:07:a5:d1:7e:93:4b:
                    bb:47:cd:73:b8:50:1c:2c:b9:67:50:c2:d2:c7:fe:
                    4e:d4:1b:19:52:e4:ae:ab:b6:23:98:9e:2c:a9:4e:
                    d2:c4:a4:77:4c:f9:a5:9e:8f:34:50:05:5f:a8:53:
                    ff:42:ee:4d:e8:37:f9:a5:12:17:00:dd:c9:5a:a4:
                    8b:57:ba:20:bf:2c:ed:1e:f1:cd:77:7c:0e:44:74:
                    9b:81:c2:dc:b4:06:c8:ef:6f:14:7c:5c:3a:36:86:
                    36:fc:9a:bb:07:9a:e2:39:53:e3:41:1f:da:24:62:
                    bc:0f:12:2c:1d:1f:d2:d4:ab:c3:79:32:f6:63:b5:
                    7e:3c:bf:7f:f0:f5:ec:f8:8c:7d:d2:85:9a:a5:81:
                    c5:25:ae:5b:ff:f8:a5:66:7d:04:c8:b6:f9:d3:04:
                    51:90:26:78:30:f3:21:83:7c:37:ef:3a:d0:87:34:
                    2a:f8:86:95:1e:79:3a:c2:f0:34:e5:e8:ec:47:13:
                    20:96:59:fc:af:7d:cf:0b:c7:12:72:a9:3b:e7:ad:
                    65:1b:e8:be:0a:63:73:a4:b2:28:2c:5b:17:5e:87:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7A:59:4B:AC:3E:C9:D6:F7:10:EA:AA:2A:92:97:C6:D3:F9:3B:2A
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:82:18:84:46:b2:3f:ae:90:8c:7e:56:23:d6:87:c8:e7:f8:
         4b:15:fd:57:2e:d3:e1:30:9a:eb:10:9e:78:e9:d5:e7:77:5f:
         a2:44:b1:d5:fa:78:7d:f3:33:de:75:9a:86:a9:50:d0:1d:9c:
         8f:fc:8d:1e:f4:e1:22:66:88:54:a3:85:8e:ae:20:96:e9:f6:
         c0:a8:aa:da:3e:c8:25:89:5a:fb:dd:f5:9a:d0:c1:8d:b2:0f:
         30:7f:0e:a9:fa:e4:2b:8a:7c:cd:30:d8:9e:15:20:c4:31:3b:
         6f:f9:c7:cc:13:30:bb:e6:f2:db:32:3c:cf:30:ca:a5:e1:7a:
         b2:b5:a5:0c:14:38:8c:f7:22:bd:93:fb:9b:2d:63:57:a0:9e:
         f1:cf:51:4f:7c:c5:31:86:18:7a:0d:fa:39:00:14:eb:ab:87:
         83:d0:47:64:17:7c:99:3c:1d:bb:21:b5:c7:38:ba:1b:92:7e:
         c2:d9:bf:00:ce:e1:20:d8:7a:e4:9e:19:b6:d9:39:75:8b:27:
         27:b9:c8:3d:2d:7f:f0:84:16:a1:bb:5f:18:e8:3e:6a:36:20:
         a0:74:03:80:e7:c9:be:44:2d:e3:0d:3a:b1:1d:67:84:72:43:
         37:c1:60:4a:a6:6f:d3:3f:fb:31:2f:c4:f9:29:18:91:a7:10:
         a1:52:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----