Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File:                     HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier:          D5J5Ud1vEp7PzWWABR/Iu3IR6FM0r5Jv7EWiy/CLa4I=
Subject key identifier:   37:D1:E8:2E:0C:DD:FD:14:AC:08:4C:36:03:5F:03:BB:88:B6:1E:73
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer:       /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial:       01962F06FD61158BED153EF4DC1A455059EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number:          0A21
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: JZYO4LHVHFig4kGCvyWxD5dLBaGP1V02HEIsM+Hipy8=)
                          2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:61:15:8b:ed:15:3e:f4:dc:1a:45:50:59:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=37d1e82e0cddfd14ac084c36035f03bb88b61e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:5c:88:71:d3:d9:2c:88:b1:d9:6f:ec:d1:
                    11:ae:72:12:7b:15:4c:8a:87:cc:7d:a6:e6:f1:c4:
                    73:67:c1:1c:bc:e0:f6:83:ec:42:f0:ed:da:58:07:
                    00:f3:1c:ff:0e:6a:90:1d:bc:13:e5:f0:55:82:7b:
                    9e:3b:4b:b5:f3:88:7e:eb:24:da:50:9d:a6:8e:2c:
                    22:71:44:d4:8a:32:f2:06:71:c0:dd:d1:2d:28:9c:
                    ae:0a:e3:49:a8:08:26:2f:df:54:f1:60:e6:b2:4d:
                    e7:a8:ec:23:f0:62:dd:ae:55:d4:0a:fb:da:d1:ef:
                    5b:db:70:e3:7c:6d:fc:4a:b0:8a:fc:ca:d3:ed:9d:
                    c3:d0:a9:cc:97:f1:b2:23:51:ef:0f:ce:54:dd:17:
                    cd:80:40:5b:ba:9d:09:a6:06:e3:7a:2d:26:e1:90:
                    bf:50:cf:de:7d:54:ff:db:5d:20:0e:00:98:d0:0a:
                    9b:9a:84:7f:50:b2:41:15:ed:71:d1:7b:5c:ab:c7:
                    42:f6:d3:a3:6a:72:b1:5d:49:2f:ef:c4:be:81:f3:
                    28:13:1a:91:58:8a:03:8b:24:35:51:9d:4a:4b:6f:
                    f5:d9:37:8f:13:ac:08:fa:b3:ac:bc:bb:8a:62:4b:
                    a4:59:f1:83:66:79:f2:de:ac:1a:89:d9:af:e0:37:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:E8:2E:0C:DD:FD:14:AC:08:4C:36:03:5F:03:BB:88:B6:1E:73
            X509v3 Authority Key Identifier:
                keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:df:a6:dc:70:5f:65:c2:a4:a6:7b:03:5c:6a:76:c9:6d:20:
         b9:00:8c:f7:cc:2d:43:fe:40:06:bd:88:8a:32:cd:01:2b:8d:
         e8:28:1d:c9:d9:f2:ab:fb:f9:6a:19:dc:55:fb:d0:21:25:7a:
         9a:25:bb:ae:75:46:2b:49:93:b8:49:56:ed:84:db:c5:53:44:
         4f:84:96:ab:28:2d:2a:92:91:ab:76:19:a0:c5:a6:c7:db:89:
         eb:b4:96:11:90:d3:59:0a:f8:9b:c0:a2:62:11:fc:fa:5f:64:
         80:c7:84:f5:22:b2:37:a3:70:41:ce:19:8e:59:7d:7e:d9:84:
         00:b5:cc:d6:44:f9:5d:42:9c:07:ee:43:d2:ea:d2:6e:b1:10:
         10:ea:b0:f2:a0:f4:ea:1c:49:b4:c1:0d:d2:0f:7c:2e:f4:d6:
         a3:17:5b:13:a9:0f:4e:c1:20:af:0e:ec:bc:28:a4:54:8f:a5:
         76:70:fb:53:fb:e2:16:35:6f:80:53:21:a4:88:4e:1e:b0:2d:
         21:91:63:6a:85:f1:ef:2e:33:af:0c:0b:86:61:53:8c:7a:98:
         04:1c:5b:26:37:a5:a6:dc:28:2c:3f:4f:7a:ac:4f:e2:4f:9e:
         1c:53:e1:41:c3:b2:53:d9:d6:55:47:6d:b4:46:64:5e:9a:01:
         b0:06:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----