Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File:                     HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier:          vKJ56N+kfsoQeMQwVOMrw9G06plM5RvNTz7YuwroWr8=
Subject key identifier:   C1:34:C8:43:E8:79:D5:19:31:AB:B0:AC:02:53:65:23:96:B4:AE:F2
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer:       /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial:       01962E2B390FBB40388AC69C3CEDFA7F94AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number:          130B
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: 168u3uZL4eLhd277kyjDwG9J80ZKlYEjd+yyoZK/6lM=)
                          2: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (hash: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:0f:bb:40:38:8a:c6:9c:3c:ed:fa:7f:94:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=c134c843e879d51931abb0ac0253652396b4aef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:99:d3:bb:5c:2f:76:76:7e:28:9f:9e:a6:
                    34:d8:99:58:d2:6e:72:1f:f4:06:f5:f4:c5:ec:89:
                    ce:fd:54:97:25:1c:d2:f1:d3:a5:84:ce:bf:07:1c:
                    24:4b:da:80:fb:ec:f6:50:3b:6b:29:8e:f4:e7:47:
                    af:bd:18:c0:1a:cf:b6:65:ba:91:e9:52:b0:82:a0:
                    94:3e:15:ad:f1:dc:1e:53:65:e4:5b:6c:d4:46:45:
                    37:37:29:bd:0b:98:29:5e:06:74:f5:10:0b:6c:be:
                    b0:e6:5b:e0:a0:ec:c4:09:65:b3:55:9a:8e:82:7f:
                    6b:3b:e3:50:a4:9c:5a:67:1f:c7:6a:27:5a:6d:02:
                    54:9d:c1:91:eb:7e:0d:b1:eb:bc:77:14:14:2d:d0:
                    8c:e3:ed:39:0b:e0:78:33:50:6f:70:e0:b5:84:d1:
                    e1:38:67:82:b4:0f:d9:4e:a2:3d:60:a5:6d:d5:9c:
                    d0:bf:f0:c4:a8:8e:bb:58:cd:08:de:bf:94:5f:49:
                    a9:a7:10:6a:d7:55:14:8c:ea:61:bc:e7:02:c9:a5:
                    36:4a:2e:9a:2d:0c:71:f3:6b:b0:67:ad:d9:25:9f:
                    4b:6d:4f:40:b9:be:bc:52:cb:65:df:0b:ab:46:45:
                    1b:53:f4:d6:78:b1:32:9e:82:ae:f3:7a:c8:3f:63:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:34:C8:43:E8:79:D5:19:31:AB:B0:AC:02:53:65:23:96:B4:AE:F2
            X509v3 Authority Key Identifier:
                keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:26:90:1a:e0:e3:85:47:df:84:a1:6a:78:48:96:6d:b4:7a:
         d8:ca:9b:45:dd:80:dc:5a:98:4b:ef:36:4a:bc:c1:93:4f:f3:
         3d:03:2b:1a:e4:72:02:99:b9:de:cc:a4:1b:57:cd:61:7a:de:
         0e:e4:37:47:5f:af:b7:c1:56:ab:ac:52:9e:52:5c:d4:6f:fb:
         6f:41:02:b3:bd:d2:3f:04:3b:bc:cd:2f:2a:22:46:6e:fb:a0:
         31:cd:ea:26:99:f6:7c:7c:6c:a3:25:99:43:2e:5a:10:00:47:
         d8:87:c7:bf:14:c3:ad:e0:40:00:c9:69:f8:06:e1:20:2c:b4:
         76:fd:ce:0d:8d:73:7e:59:a7:fd:93:cb:38:1e:b5:cd:b3:2d:
         a1:17:10:b5:47:5b:b3:02:cc:c3:d3:ce:78:d1:62:4b:8b:6c:
         0b:0f:86:6c:8b:c3:ba:be:cf:82:01:b2:4e:c8:5f:31:45:30:
         93:94:26:98:33:3b:93:98:91:9a:4e:91:e1:da:01:fa:48:44:
         9e:68:ea:5e:ea:e3:90:d3:72:30:70:ed:6d:15:ba:9f:56:42:
         03:06:1d:28:85:e3:0a:67:d4:af:b1:f2:37:5d:59:64:0f:f1:
         02:f2:5a:78:c9:b1:6c:cb:75:bc:23:85:c3:a6:13:90:08:de:
         53:f7:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----