Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File:                     H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier:          hPtVXlOxbhN7dqCJzlgNXGr1GhtzgqhJSVaM1wUPjoM=
Subject key identifier:   C7:68:75:8E:77:8B:5A:82:5C:F5:B8:5C:39:21:35:72:6C:05:F5:A2
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer:       /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial:       01962F742A840E1083AAA8BF70FCB98EF3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number:          04B7
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: DKCys4KRYdnrGXDLl1nVf9nVmRA.roa (hash: IaLK2xfRNIne0nZPaZ2/jfh45tolOprh7fcjo3irVI8=)
                          2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: +Ynh+HGKvXE0SeRiLbElfMZL6MPYHxKrG6B9blIWxmo=)
                          3: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:84:0e:10:83:aa:a8:bf:70:fc:b9:8e:f3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=c768758e778b5a825cf5b85c392135726c05f5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:af:55:bb:d5:f8:09:69:10:f9:ca:33:f4:
                    69:97:82:67:4a:d1:6c:83:a1:ce:03:ca:bd:19:be:
                    c4:41:78:28:5c:35:09:c4:b9:69:af:de:a5:64:84:
                    91:c0:a2:a4:6a:d9:a0:64:ef:be:a3:d3:4c:9c:21:
                    52:98:cd:cc:8f:26:a2:2e:21:22:3f:08:ce:9d:8f:
                    1c:fe:62:a8:88:1a:f3:23:1c:42:03:b6:32:78:40:
                    84:1e:d9:4f:d7:93:b0:21:20:0d:39:19:83:57:a3:
                    14:d4:20:64:21:87:6a:24:06:e4:cf:f3:a2:1b:e5:
                    3f:d3:ed:40:65:63:cb:59:b8:70:2f:e9:bc:cc:86:
                    c7:18:72:44:d1:6a:a0:22:a0:80:2b:7a:e7:3d:62:
                    f4:4a:14:ae:6e:cb:65:42:ba:d7:d5:59:82:a4:48:
                    31:71:ae:fb:1d:ab:ce:46:6c:5f:6c:f3:61:96:b7:
                    53:fe:e8:ea:4a:e7:f6:be:2a:cc:27:78:7a:b6:09:
                    8f:af:d0:8d:64:5f:32:21:9b:03:7f:ff:c7:68:8b:
                    e8:8e:45:0f:44:4a:c7:fd:8d:d7:10:f1:b6:c6:de:
                    f1:d2:6c:9d:27:4a:03:24:0e:6e:83:a3:c9:aa:cf:
                    2b:6a:94:79:aa:2e:f7:d9:99:2b:01:50:b3:8a:05:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:75:8E:77:8B:5A:82:5C:F5:B8:5C:39:21:35:72:6C:05:F5:A2
            X509v3 Authority Key Identifier:
                keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:1e:a5:b0:82:74:b1:71:df:ef:8d:be:31:40:ac:f1:26:
         31:22:b1:6a:d3:7c:e4:90:0f:dd:2c:c9:44:96:0d:3c:e3:a1:
         e4:48:94:6e:22:c2:46:64:71:c1:16:a7:dd:dd:a5:fe:4d:68:
         a5:6f:69:da:df:2e:22:e9:8a:1f:c8:f4:9f:8e:ea:17:b3:58:
         aa:a0:af:f4:a4:ec:e8:b5:8d:29:1f:70:d8:30:da:5b:65:cf:
         72:47:83:64:c5:1a:30:1f:49:cd:e3:4f:86:15:bc:bd:4b:23:
         ac:c3:75:05:71:17:c5:6f:0f:5c:cc:73:a8:f4:bf:d5:18:b5:
         83:c0:f5:6d:52:d6:88:7d:fb:6e:2d:48:4b:7e:bd:94:da:65:
         bc:4c:cf:25:99:b9:8a:6f:b2:98:fc:f4:7a:28:a2:46:19:bd:
         a1:54:12:21:f4:3a:6b:22:d1:dc:23:31:5d:2d:84:a2:21:d5:
         80:1e:c6:96:c2:e1:30:7c:bd:2e:2c:f7:f8:64:37:0e:66:06:
         a1:2d:ba:7a:d9:02:d5:73:07:96:46:ae:e8:10:22:f1:db:ff:
         88:0c:80:97:36:98:d8:ff:fe:be:32:20:d6:47:0e:2d:f9:7b:
         b5:3f:57:9a:90:76:8f:eb:c4:ed:e6:9f:e8:a7:cd:f0:be:24:
         d0:a1:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----