Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File:                     H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier:          hGtYE4gLniYiE4YVwUVq/4KrGtP92ytAYnJ1ojU9k+4=
Subject key identifier:   C7:15:1F:AB:BE:46:03:AE:16:0C:5E:01:5D:AD:B6:0B:A4:76:7D:BD
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer:       /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial:       01962F3DCDED144E9FA8A0D921F955E26917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number:          1441
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: CvusXalig1mWo/aevxJWkaOmaH3R5VqucgSsTlqnZQ0=)
                          2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cd:ed:14:4e:9f:a8:a0:d9:21:f9:55:e2:69:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=c7151fabbe4603ae160c5e015dadb60ba4767dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:28:72:c2:4a:56:e7:2a:63:b0:5f:49:05:
                    4e:31:db:b7:b4:74:1c:9c:e9:41:cf:f6:22:b1:17:
                    f5:18:18:24:b6:d7:78:78:49:d9:02:2e:c7:b6:29:
                    3a:9f:84:24:ce:1c:5e:b5:03:53:d0:62:4b:38:d2:
                    5f:b1:73:d7:fa:2b:65:3f:aa:79:50:8b:c7:28:22:
                    68:99:56:39:5e:66:99:ea:18:b9:72:7e:6e:80:02:
                    91:60:05:09:e2:78:4f:db:cf:b6:37:4a:53:04:d4:
                    b3:c3:24:79:b5:3b:48:2f:68:47:43:16:19:6f:8a:
                    db:02:39:83:eb:27:1c:95:ad:8e:76:f6:74:28:ff:
                    fd:3c:79:bf:0e:ef:4a:87:d0:62:2b:5c:cc:a4:08:
                    96:02:dd:24:ae:f4:06:da:70:7d:c2:25:20:24:05:
                    c6:70:03:1b:13:e2:2b:9d:95:a1:f2:3b:f8:a1:35:
                    c7:06:27:34:f9:d6:0b:e7:92:1e:f1:0f:66:0c:d8:
                    61:a0:bd:4c:f4:0b:2e:22:3f:14:d5:15:71:fd:16:
                    cf:10:45:e0:e8:5d:23:34:8a:9c:ae:bf:de:1a:83:
                    fc:cb:95:3f:28:55:2f:41:1c:dc:b0:d7:b6:d6:81:
                    ad:ab:b3:10:d5:e8:2b:c3:d1:e0:13:96:5c:7c:2d:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:15:1F:AB:BE:46:03:AE:16:0C:5E:01:5D:AD:B6:0B:A4:76:7D:BD
            X509v3 Authority Key Identifier:
                keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:fa:e2:0b:f9:25:b2:93:cd:25:ca:91:5b:f1:86:3f:83:
         ae:56:ab:2e:a3:4e:a8:75:ba:8c:d8:de:54:da:bd:c4:4c:ba:
         d8:cd:54:27:d9:38:e7:6f:51:9c:5a:f2:c2:94:30:56:a3:bf:
         96:1c:d0:a1:c3:c4:07:1d:8b:8c:70:6c:a9:84:c2:db:2d:c0:
         35:37:d4:71:58:2c:f9:7a:e0:ae:32:27:9e:83:7f:a2:af:c1:
         c2:0d:41:a6:fd:9f:8b:78:58:43:8e:83:95:09:2a:9a:a3:d7:
         41:18:e3:db:07:1a:be:69:ea:0a:c8:ff:7b:2b:8b:66:0c:34:
         8e:57:1d:0f:71:62:0d:1e:4e:dc:81:01:42:1f:78:36:18:fa:
         fd:26:16:4f:af:8c:27:9a:01:37:41:e2:ce:70:5b:47:a0:85:
         a2:b0:9d:4b:9b:8f:28:8a:54:95:a9:24:dc:2a:6b:65:a6:0a:
         db:30:d1:6b:c6:bf:cd:76:b8:06:d1:91:6d:15:34:e2:b8:8b:
         8d:6f:86:97:9e:a3:d5:27:eb:36:98:f3:72:06:57:a2:8a:1d:
         6b:b7:3a:bd:e6:fe:6f:46:77:92:11:47:b9:be:60:01:d4:cb:
         43:a5:fa:d7:fd:a0:7d:1c:65:c0:6c:da:75:a5:43:2e:74:20:
         c4:a2:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----