Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File:                     HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier:          Hxa2DdDylf30npFSn194lZn1+oqyzPud8XlqB+ngWDs=
Subject key identifier:   75:1C:4F:B8:CD:CE:33:68:A4:3C:92:2C:C3:44:F4:D1:F9:B0:1D:CA
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer:       /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial:       01962F06C4534E49C6509842BA9703360B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number:          0B7C
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa (hash: NJmABczjuAOTLl0h6DBnrPjIGOR8/qxj1OB7hIhj4j0=)
                          2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: 9HDx9cDFnIZN1Q4hkhB2AY35MX7XFubdS10YiNeeXdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:53:4e:49:c6:50:98:42:ba:97:03:36:0b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=751c4fb8cdce3368a43c922cc344f4d1f9b01dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:82:42:3f:13:d5:f6:27:94:ef:f0:60:30:
                    39:a8:ca:3c:4e:84:4c:5f:23:53:f0:10:7e:31:61:
                    8f:b1:18:ae:67:a8:bd:5d:5c:38:6d:67:60:d5:ed:
                    e9:07:e1:5a:2c:1d:aa:97:41:b3:bd:e3:c6:e4:43:
                    98:db:86:d9:ce:2b:06:56:1b:fc:fe:4c:3f:10:81:
                    2c:c2:0e:e3:5b:24:4a:a3:56:8d:83:25:de:5b:86:
                    3f:53:f0:bf:23:09:7d:95:11:20:81:bb:11:90:e2:
                    4d:f1:f4:cf:25:af:ba:55:84:26:5e:49:72:39:73:
                    07:c1:93:2f:af:f7:a1:58:36:00:e6:c8:4a:63:c1:
                    f6:38:ef:27:e7:1c:90:80:d8:5e:09:07:af:09:65:
                    47:8a:8d:fe:0f:10:48:5e:fd:60:fc:42:7b:a6:15:
                    8d:37:5c:15:29:af:dd:ff:ec:dc:4b:7d:a7:25:1a:
                    61:0b:9e:8e:7c:7f:8c:aa:f3:ad:2c:8c:c4:8f:e7:
                    b9:9d:89:a5:ec:e0:91:37:b6:e6:bb:43:4f:8a:40:
                    41:71:fc:5f:27:18:ea:03:dc:16:15:3e:9c:87:52:
                    79:84:9e:c0:ff:34:47:02:e6:ae:da:76:4e:97:bb:
                    cb:5f:a1:11:fd:f7:b5:e9:1e:e8:d8:40:6b:c1:f9:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:4F:B8:CD:CE:33:68:A4:3C:92:2C:C3:44:F4:D1:F9:B0:1D:CA
            X509v3 Authority Key Identifier:
                keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:82:6a:8d:ca:ae:0a:8f:91:3c:46:35:88:b0:d8:98:f3:df:
         4d:99:1f:6e:f4:99:92:d9:7c:e1:04:10:71:bd:b7:85:6b:59:
         24:ec:8e:a1:06:9e:ba:9f:76:aa:38:cb:c3:48:0d:ca:81:e5:
         96:b6:70:82:0e:3b:9e:da:0a:62:ce:7f:d2:ff:43:2d:79:f4:
         ab:94:91:96:65:4b:09:59:0c:cc:05:75:b8:3c:f9:ac:58:a9:
         8b:5f:60:b7:d1:24:89:d8:12:6f:97:db:45:d9:f9:05:b4:5d:
         a3:da:6a:e0:6e:ab:a8:6b:e2:b3:ea:3c:78:63:7c:7c:2a:5d:
         d9:ec:82:4f:a6:48:62:06:b4:6d:6f:8c:45:bd:45:81:41:f6:
         5f:25:c9:86:b8:45:60:f6:5c:a7:88:33:60:2c:cf:08:d1:14:
         1c:ac:82:e8:8c:3c:67:58:1d:80:49:49:79:bc:a0:01:06:1f:
         16:7d:17:6b:4b:6a:7a:1e:c5:13:99:08:44:06:65:33:72:2e:
         6e:4c:76:40:33:0a:53:e8:31:4e:b9:e3:59:b5:92:5e:7b:f0:
         09:a4:1b:b5:b0:ae:76:dc:14:9b:7e:30:a7:ed:53:7a:ff:48:
         18:25:ac:65:a4:37:bc:33:41:5b:4d:8f:ee:27:f1:eb:82:da:
         f4:4c:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----