Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File:                     HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier:          yQZ1NB4OAwgclbaN0nA4I/jzsHtPFhu5Se1POnBA5C0=
Subject key identifier:   BF:8B:1D:76:59:B6:65:30:BE:DC:63:D3:A3:76:E8:6E:05:B0:84:77
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer:       /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial:       01962ECF777C64FE44FF4BDD8B9D7A40BFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: J/IqytbWLLZPcXdhtWH7EfhSigCC9iGXFhkfErCiRI4=)
                          2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:7c:64:fe:44:ff:4b:dd:8b:9d:7a:40:bf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=bf8b1d7659b66530bedc63d3a376e86e05b08477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:d9:df:a0:8c:92:c9:f1:6f:09:0f:fa:5c:
                    b6:4a:8d:94:5a:3d:2e:20:f4:9d:0e:52:7a:cc:8e:
                    78:4b:04:b8:67:67:24:de:92:6b:17:60:c3:41:d1:
                    67:94:9d:ae:bf:ad:fa:ec:51:9e:da:67:19:f3:fa:
                    d7:23:69:3c:43:31:f2:19:df:61:58:f2:13:06:92:
                    8c:0a:bb:50:34:ec:a7:5b:5b:9e:9b:9a:08:26:6f:
                    b7:b4:94:4b:e9:31:3a:d4:22:63:77:7a:32:0f:2a:
                    57:26:6e:39:e2:5d:79:85:cd:89:ab:a5:06:f0:6f:
                    99:0b:72:a0:41:e8:7f:46:07:81:11:06:84:79:84:
                    4b:31:53:b4:cb:b4:5f:ec:a6:de:2a:71:c2:9a:61:
                    29:90:c2:f5:3a:c0:6d:71:16:11:67:98:38:78:f6:
                    09:7e:9d:71:53:0b:c4:eb:9c:45:d6:34:00:e4:04:
                    0f:2e:3f:ec:0d:a3:d4:b7:9e:3e:7e:a1:82:93:a5:
                    1e:3d:35:1a:80:0a:09:90:88:32:4f:ef:0c:b5:78:
                    47:fe:47:e9:0c:eb:cc:09:35:f6:2b:f3:96:2d:7b:
                    a6:dd:f8:f2:ce:61:b9:2f:9e:0c:34:09:98:22:0d:
                    f6:1e:ae:b2:1f:ea:4a:31:87:65:c7:28:57:7c:f3:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:1D:76:59:B6:65:30:BE:DC:63:D3:A3:76:E8:6E:05:B0:84:77
            X509v3 Authority Key Identifier:
                keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:70:f8:2d:2e:ff:80:23:d9:cc:2a:22:f7:a6:c0:34:5a:e8:
         ee:1a:1c:ea:6e:93:f2:38:04:fb:2f:d3:df:73:1d:32:0b:34:
         39:03:a2:b9:b0:f7:6a:29:a3:40:cc:7c:4e:ca:ea:bb:db:71:
         18:41:78:7f:16:f0:83:97:b5:93:a1:15:82:df:50:32:39:ac:
         4a:18:98:1b:31:78:53:2c:a0:7d:f7:44:58:bc:3d:83:7d:90:
         f1:18:43:94:c1:81:8c:52:61:e7:fc:13:63:72:13:a5:63:6e:
         7a:1a:73:69:9f:fe:60:12:05:1b:b4:3c:12:74:2f:c3:bb:8c:
         96:a5:fc:59:9b:1a:6f:5d:04:27:88:43:24:80:89:1b:3d:4e:
         93:f9:63:d2:13:21:1e:64:47:1c:65:e8:b0:9a:ec:a1:a2:eb:
         f5:36:4f:19:70:5b:f6:63:70:4e:1f:3c:68:b9:3f:44:f8:58:
         cf:8f:19:e0:b7:71:09:a8:e7:78:a3:05:74:e5:b3:0d:d5:ea:
         1e:4a:03:7a:66:e5:79:f0:d3:11:e1:34:5a:4e:1c:df:39:37:
         d0:64:6c:5f:a2:88:c3:9a:e0:40:63:e2:2f:52:59:79:1e:5d:
         e3:00:75:52:d2:b9:3d:c0:aa:6b:9c:46:74:53:5c:fb:34:1b:
         53:50:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----