Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
File:                     HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft (raw, json)
Hash identifier:          pvh7LZJVylNEyPBvmvD9itF8TPWCKK5DpvPxij0rjrQ=
Subject key identifier:   0B:35:53:52:BA:11:1B:0C:4F:04:C7:6A:26:C2:CB:A8:01:3E:58:BF
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Certificate issuer:       /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial:       01962F74D762C75D3E54BBE9D4A1D1CCF154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
Manifest number:          0B6F
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: 0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa (hash: qKX9mbONM6/Xx6gF2emn3N/lO2VKopekGuKmwl2j208=)
                          2: HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl (hash: vTEw4r75LfuAc4c4R7YcIvbrJN/zzVG1MRYZoFzH84Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d7:62:c7:5d:3e:54:bb:e9:d4:a1:d1:cc:f1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=0b355352ba111b0c4f04c76a26c2cba8013e58bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:24:95:20:21:f9:ad:6c:89:c7:4f:34:68:
                    86:32:ce:e2:37:fe:9b:31:73:d3:fc:36:16:4b:bb:
                    99:00:fa:f3:28:40:23:89:db:a6:05:ea:2a:7b:18:
                    38:8d:97:49:36:bc:d1:aa:51:8d:d1:6f:ea:2a:64:
                    0b:93:76:4a:2c:ea:ae:24:96:c0:9d:1b:fe:e8:52:
                    ec:da:6b:58:5e:13:0b:07:f6:b0:6b:e0:6b:2d:77:
                    c6:ab:02:b6:f6:f5:75:5b:52:4b:d9:c6:26:54:4d:
                    de:3c:db:56:88:0e:33:4e:00:c0:ab:cc:ff:35:ae:
                    ba:43:ea:76:99:3a:65:31:6d:7a:98:fa:60:2f:5a:
                    23:5d:3f:79:56:fc:3f:47:b0:36:a6:ba:5e:d4:50:
                    7c:9f:a7:07:33:86:a4:4c:31:0e:68:0f:1d:c0:c3:
                    12:88:4e:cb:fc:9c:88:74:89:2d:4c:5e:bc:d2:e5:
                    c8:f4:88:3b:34:47:e0:63:6d:f0:32:28:2d:d4:22:
                    39:ac:df:74:97:3c:f1:ca:d9:33:c0:f7:38:ad:78:
                    ab:43:8f:ed:f8:57:4f:90:ae:cb:56:b8:08:39:e9:
                    2e:e4:20:eb:e5:ac:59:b9:f2:0a:69:bd:f6:d7:27:
                    0a:88:cf:59:24:24:37:11:e8:81:02:bb:28:60:28:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:53:52:BA:11:1B:0C:4F:04:C7:6A:26:C2:CB:A8:01:3E:58:BF
            X509v3 Authority Key Identifier:
                keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:8b:cf:fd:8f:73:34:50:ae:ac:df:b2:15:c7:b1:0a:6f:
         5c:3a:41:da:09:bd:e6:9c:83:d3:2c:0a:5d:04:af:63:65:45:
         fb:30:80:37:0a:aa:a5:80:76:b9:95:ce:fe:fc:ab:14:29:ae:
         d6:3b:dd:4e:11:cf:6f:30:47:93:01:80:9d:19:d1:9c:91:e3:
         50:c9:30:d0:48:c2:e9:8f:f2:f9:e7:51:5e:32:00:53:0f:86:
         46:da:51:24:57:93:68:c3:82:22:55:42:01:f9:78:78:81:df:
         12:f3:74:91:a6:91:cb:4a:ec:ca:4f:bc:57:77:bb:fc:de:a6:
         ad:4a:98:df:67:d1:d0:05:5d:05:28:9e:bd:f1:1c:90:c6:b0:
         2c:78:79:9c:5b:9c:65:d8:eb:0b:b3:5a:25:a1:78:1f:5d:3e:
         94:59:55:aa:4f:c6:dc:66:de:b0:fd:4f:26:be:83:39:85:d8:
         2e:d4:f0:3a:5a:2d:72:dd:fa:60:58:df:6c:06:35:6c:fb:1c:
         d6:0d:cf:d5:24:87:15:98:18:11:21:b0:56:5d:7f:d1:79:7f:
         61:ad:a0:55:7f:ed:6e:97:41:f5:02:1a:81:f4:0a:02:ed:fe:
         c0:0b:1b:b8:fb:15:a9:d3:13:99:82:86:d6:78:40:2a:e7:8b:
         72:56:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----