Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File:                     Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier:          xfQagFBfEXxIdvpmH8A6929ZCOc9a5X1EnDd1VpFHtc=
Subject key identifier:   D1:2D:7F:0B:97:10:C8:C0:92:15:6B:12:54:DB:D0:10:D8:71:ED:DC
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer:       /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial:       01962F7459904762676866A816749150CEDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number:          D9
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: FznnH7+Pnz2Tl0V1B88DSdQD9HNGrGxn5tKC6ajKXsg=)
                          2: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
                          3: Sf6YtiSELg5KYX6GKXZVPuVhKnU.roa (hash: BH7jXuZ02ZUeGV4MVJ2zSBBLjlhhaCMQVVcEw4ii9ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:59:90:47:62:67:68:66:a8:16:74:91:50:ce:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=d12d7f0b9710c8c092156b1254dbd010d871eddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:af:ce:3a:68:30:92:ff:7b:14:3d:9d:86:
                    16:ab:04:f0:a3:5d:d8:9c:de:4f:9b:47:d3:ef:3a:
                    17:41:ee:d1:d0:d3:7a:87:c2:d2:f2:a2:b2:aa:26:
                    9c:06:53:fd:0a:9f:85:4d:74:9f:e9:50:63:e4:ff:
                    66:cb:4b:56:03:69:e7:cc:22:18:0b:42:0b:08:28:
                    66:b0:4d:f4:e9:3f:fd:43:b8:e7:a6:bf:98:64:6c:
                    84:65:98:7b:39:44:3b:32:1d:67:c6:5b:6c:51:55:
                    36:12:cd:37:01:ab:97:66:5c:bd:b6:77:6e:13:92:
                    fc:5b:39:93:36:bd:3e:e0:f9:d0:66:1e:d4:8d:1a:
                    ad:31:b4:86:64:89:68:ef:bd:81:86:6a:48:06:13:
                    a3:f5:dc:8f:a7:02:43:3b:7b:65:cf:32:09:cf:e8:
                    ee:55:02:ab:32:29:c4:12:c3:4f:64:08:2b:61:ab:
                    9b:44:e0:0a:1b:04:0c:2f:e8:72:71:06:0e:d6:c5:
                    76:7a:1d:5f:6f:a6:dc:06:cb:da:c2:94:1b:62:42:
                    19:8a:45:49:ca:22:c0:f4:26:22:97:6b:4c:9b:35:
                    33:8f:32:a3:f9:68:d5:f6:b4:59:86:bf:20:10:4e:
                    36:b2:b0:37:d5:17:b0:0e:b1:9d:ea:3d:08:ae:bc:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2D:7F:0B:97:10:C8:C0:92:15:6B:12:54:DB:D0:10:D8:71:ED:DC
            X509v3 Authority Key Identifier:
                keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:22:89:c0:ed:32:9d:ac:36:54:83:e9:20:37:4e:c2:e8:
         0a:62:ec:28:32:56:65:5d:da:06:fa:49:e1:3a:fc:7f:6a:f7:
         25:a4:ff:38:9b:7e:31:c5:f1:dd:6f:fb:21:ae:69:9b:08:f2:
         22:dc:fe:12:15:fd:5e:95:ef:15:e2:76:bd:22:87:a3:ee:96:
         d9:00:50:c4:91:1a:e0:7e:04:31:50:0d:ce:de:03:40:a7:4a:
         3b:44:1c:2d:3f:d5:4c:c1:b4:47:67:52:94:78:ce:31:2f:e0:
         f3:4c:2a:57:80:07:5b:28:59:89:95:74:41:ff:a4:7b:1a:53:
         fa:79:dc:99:75:2e:fc:12:38:42:b1:94:71:44:3d:f1:b5:9d:
         0a:20:5b:40:72:19:c3:45:92:be:55:38:af:73:cc:2b:5b:7c:
         41:1c:f1:52:6e:56:01:ee:ec:e9:9a:e2:37:97:b1:79:be:88:
         bd:34:1f:66:80:a2:14:26:71:29:66:4e:68:99:d2:84:19:77:
         5d:16:ac:dd:33:28:b4:b8:e2:64:21:03:c0:46:e8:ed:44:e6:
         5d:65:3f:bc:77:04:f4:78:e7:55:65:04:1a:91:04:73:71:46:
         a0:51:e4:4c:b4:4f:93:69:bd:17:b9:47:70:12:53:4f:c3:2f:
         19:0f:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----