Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File:                     HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier:          dWOOHSEGPf/k3M5SvPy4FDDykJDWD7utd5YNcFoKNXM=
Subject key identifier:   9A:C0:79:EC:FD:6D:24:A3:A9:D5:AB:8E:47:99:4E:00:F0:BB:7C:2B
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer:       /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial:       01962F74CC6DB5E377C89B813222AF7209D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
                          2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: 4jjDAozWSE+6uHdzsb+AoLcEzf752XYE5b5f8RD6Gto=)
                          3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cc:6d:b5:e3:77:c8:9b:81:32:22:af:72:09:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=9ac079ecfd6d24a3a9d5ab8e47994e00f0bb7c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:6f:25:17:95:9e:63:ba:43:7d:28:c9:81:
                    71:40:02:64:e4:86:d4:ab:f9:c6:cc:31:54:64:81:
                    d2:f5:c5:80:92:1b:cb:5f:bc:72:0d:0b:5e:02:5b:
                    e8:f6:1c:66:a6:c6:89:f2:91:bc:ae:89:9f:d6:c8:
                    4a:e7:4c:76:73:85:44:2f:68:30:52:39:f4:d1:bf:
                    07:fc:4b:35:d2:64:df:f8:f7:1a:27:ce:98:d7:09:
                    35:98:7d:34:4a:10:4e:9e:65:32:59:f5:43:68:3c:
                    99:d3:56:4a:d0:20:6b:ff:e2:fa:48:7f:4c:d7:28:
                    ec:74:60:e9:39:11:5c:e5:99:44:e6:b9:0a:07:08:
                    ce:c1:f6:40:7d:33:d4:69:1a:f5:47:e2:f4:70:0a:
                    99:ce:2e:af:bb:64:f5:50:8b:ac:e0:1a:92:5c:e3:
                    7a:58:2c:11:ac:c7:30:df:48:1f:0a:01:f5:e6:cd:
                    67:38:2c:03:66:50:d6:7f:b2:bf:75:c8:33:26:94:
                    f6:c4:ce:0e:4c:2b:76:b0:c6:00:19:bc:9e:7b:06:
                    22:b2:ec:97:17:40:fa:d8:74:7c:bd:2a:b6:52:fe:
                    7f:69:1d:4d:46:97:87:d8:ad:27:0d:6b:d3:b9:ff:
                    d0:4f:28:49:e6:a7:43:b1:2a:9c:b6:05:64:c1:71:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:79:EC:FD:6D:24:A3:A9:D5:AB:8E:47:99:4E:00:F0:BB:7C:2B
            X509v3 Authority Key Identifier:
                keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:03:2e:d2:59:8f:8a:95:3d:ff:fc:50:00:09:6e:d6:73:
         b7:a5:51:8b:c5:d8:74:c5:75:9f:d0:96:65:2e:14:48:63:86:
         45:70:9d:73:f1:c3:6e:32:81:2b:9c:5e:db:ed:26:e5:81:2d:
         ab:ff:1f:49:d2:dd:4d:17:b1:44:27:81:c6:6d:0d:2c:55:a1:
         7a:05:4b:57:91:48:82:44:71:4e:db:91:e6:c8:31:1b:5b:c3:
         75:9e:db:c7:25:e0:44:77:37:8b:38:3d:5e:d2:44:82:d0:b4:
         3e:9e:52:61:09:66:dc:91:55:10:40:d6:ee:d5:78:8f:d4:cd:
         ca:24:8e:23:51:95:b0:00:7d:7b:5d:63:a7:78:21:f8:c8:bc:
         a3:ee:c3:84:a7:39:24:1a:51:c7:b7:00:17:63:e1:c8:22:2a:
         f6:d6:c7:e3:d8:ba:76:55:9c:24:62:b4:b5:80:fc:82:4d:e8:
         2b:ba:f2:07:f9:96:54:3b:af:93:d7:5c:d0:35:c4:8c:45:b9:
         6d:95:52:74:75:61:f1:fb:cc:9c:4c:1d:d7:29:15:6c:8c:3d:
         8a:44:d2:f5:6b:92:cf:89:8e:e2:20:8f:a4:a6:8f:65:82:5a:
         3e:a9:26:6c:b3:70:48:87:01:78:1a:56:10:81:f1:4b:15:3a:
         2a:e2:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----