Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File:                     HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier:          8RvYr4G63vQzs6sfNLFQHECn007V8TG97ITjvtZGSGc=
Subject key identifier:   EC:67:B6:8A:73:CB:77:1B:2F:56:E3:F6:8D:98:2D:10:F0:53:00:E3
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer:       /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial:       01962F74A0ECF933B557A3A90FB3105C65C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number:          0D00
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: PxRkwdHZeHctiqI6Z+uznai+xvfUIev8Jbsccrr/pn8=)
                          2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:ec:f9:33:b5:57:a3:a9:0f:b3:10:5c:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=ec67b68a73cb771b2f56e3f68d982d10f05300e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:de:37:3e:0f:43:94:d8:7b:51:89:60:d3:
                    0c:7a:a9:6a:00:f5:57:8c:b3:81:6b:c1:89:4a:9b:
                    5f:b9:ab:85:20:f5:35:c7:51:5c:81:8b:f3:b2:4a:
                    d9:f9:97:4f:bc:9c:b6:50:33:03:d0:3f:4c:d8:71:
                    06:46:54:73:52:e2:d0:4e:9e:b2:11:1f:7e:3a:4b:
                    b4:27:71:75:b3:9f:62:6b:2c:b8:0a:33:d5:05:f8:
                    b5:27:2c:fa:51:c9:1d:ca:0f:6b:c4:d5:b6:b6:bc:
                    71:75:ae:98:33:96:2e:75:e6:93:88:cf:1d:cf:0c:
                    f6:c9:a0:d6:a4:ae:4a:7b:cb:15:e9:2c:83:92:4c:
                    d4:e1:f3:ba:ac:43:f2:99:4a:5c:29:6b:da:56:6c:
                    ca:7b:9b:c0:48:71:fd:9c:36:7c:c8:dd:34:4f:62:
                    9e:c4:7a:cb:a7:db:a0:ca:d3:96:0a:08:a3:63:e5:
                    4b:c2:54:67:45:80:b3:1d:0d:f1:02:8f:86:f9:ab:
                    1c:eb:70:ae:0b:ac:da:d1:2a:37:d1:86:91:0b:34:
                    c9:39:86:ce:56:54:83:24:bb:b3:4b:46:c4:fa:2b:
                    f1:a3:f1:ca:97:f9:d4:62:47:70:53:3c:b5:ed:12:
                    76:60:18:0a:e5:5c:97:64:ef:ff:2a:c4:46:1c:d3:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:67:B6:8A:73:CB:77:1B:2F:56:E3:F6:8D:98:2D:10:F0:53:00:E3
            X509v3 Authority Key Identifier:
                keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:97:e6:1b:75:1e:a4:b2:4d:2b:d5:be:07:d4:70:6f:7d:51:
         04:96:de:04:35:4a:be:9f:55:01:9a:9e:f6:7e:8d:56:bc:1f:
         f2:ac:8c:10:ba:6b:00:dc:7a:05:47:af:b6:e7:eb:bc:70:fe:
         00:43:7b:6a:f2:aa:2b:4c:0d:26:83:68:61:7e:7c:1d:0a:46:
         6e:ae:f6:a9:d0:06:c3:e8:86:5f:f0:fe:20:09:f5:43:27:5f:
         03:01:d3:ff:f7:45:f3:50:29:9c:91:b8:84:b1:4e:7e:79:6c:
         d4:cd:43:9f:f8:5e:e2:43:8d:9e:69:6c:6b:56:04:0b:0f:2a:
         65:3e:0f:c2:e8:cd:bf:c4:c2:d2:ac:ff:c7:b1:ce:36:47:a3:
         8f:d9:76:96:7a:f5:a7:05:5d:eb:85:64:58:57:be:d5:9d:68:
         b2:ad:18:35:26:64:03:06:be:e9:15:5e:9d:3b:cc:8d:ea:00:
         1f:6c:ed:68:29:cb:8f:6d:52:0c:31:6d:2f:aa:af:74:cc:9b:
         31:ad:36:f6:c8:5e:36:f8:94:eb:37:31:45:9a:ef:ce:89:70:
         17:60:7f:60:d5:c8:c6:5a:91:69:89:19:cd:37:f5:1e:d7:d2:
         e9:e5:5a:5f:0f:e0:48:90:91:bf:59:19:e8:75:30:4a:37:8e:
         4a:6b:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----