Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File:                     HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier:          7xdX9NPON50EXgCFpfsL196fq06u/ME5m5x7jr0PKZ0=
Subject key identifier:   88:B6:65:EB:AE:31:E6:05:1C:71:D2:65:77:52:DD:E3:01:5B:70:B7
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer:       /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial:       01962F066DDFDC2992DC230C3B55A1975C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: xAFwFJ80mXugwnA7r8HaqysgLqA/z6fiZZdpefkG/C8=)
                          2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
                          3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
                          4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:df:dc:29:92:dc:23:0c:3b:55:a1:97:5c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=88b665ebae31e6051c71d2657752dde3015b70b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:01:7c:c6:62:1f:38:5f:4e:99:8d:e7:a8:
                    53:91:3e:5a:6c:81:b2:fe:1b:24:2a:ae:54:e9:77:
                    fc:78:1b:2d:5e:5a:02:a7:01:50:55:6a:ee:fb:93:
                    91:ec:d4:2e:b4:21:41:8b:89:a4:6a:23:c4:9b:d5:
                    8d:fe:cb:fc:c6:84:06:4e:84:97:d5:b5:fe:84:57:
                    dc:97:6f:3a:22:2e:ef:a1:bd:25:d6:95:0e:ea:e0:
                    63:cc:c7:7a:65:6d:82:c8:86:39:f9:f2:3a:7d:1a:
                    91:d3:b4:2b:95:88:ae:ed:44:dc:d7:78:04:b8:02:
                    bd:2c:4d:98:fd:9f:e4:10:97:d2:c0:0d:13:62:df:
                    44:8f:79:ad:4c:21:7e:83:9c:7e:4b:a9:71:bd:c9:
                    e0:77:dc:61:ca:44:48:a4:3c:dc:3d:59:47:cf:2c:
                    dd:be:a0:67:63:03:15:50:d9:97:e4:26:d7:13:46:
                    c0:f7:aa:51:87:96:0d:08:ee:4b:1b:6c:c2:d8:ed:
                    cd:4d:c3:5f:32:97:22:47:cf:19:e2:f0:a5:4d:7e:
                    e4:f5:bc:1b:95:b4:96:2e:26:b0:7c:56:9c:a6:af:
                    71:af:66:b3:ea:bf:8e:10:99:a5:79:4a:27:ab:93:
                    8e:40:19:a8:71:2e:2a:d6:cc:91:32:fb:91:d7:21:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:65:EB:AE:31:E6:05:1C:71:D2:65:77:52:DD:E3:01:5B:70:B7
            X509v3 Authority Key Identifier:
                keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:aa:7c:d1:aa:df:16:52:b2:ba:ec:9c:26:4b:be:bd:d0:
         a6:57:66:f5:5a:8b:dd:39:f8:83:a7:da:30:9b:b1:fd:42:36:
         d2:ca:b5:68:c6:d6:eb:35:d7:bc:37:3c:f2:f5:26:c7:5c:55:
         50:35:0b:e4:f4:37:ab:22:0e:d9:09:c0:ea:45:5f:72:38:08:
         61:77:d9:4b:d0:7c:36:e6:84:6b:9e:96:80:96:ab:76:7d:ae:
         18:84:ef:e3:a4:04:2f:7b:34:b5:05:cf:fe:de:4e:41:69:93:
         3a:68:ef:f1:9d:18:3c:d9:30:29:2e:fe:89:f2:20:0f:2d:6c:
         f3:65:58:cf:8c:6e:a2:2c:76:1a:df:9a:64:7d:b8:2f:aa:78:
         d3:62:1f:eb:77:34:a0:d5:01:bd:77:29:18:6b:4b:98:2b:22:
         53:9d:c6:92:8a:99:9f:aa:f8:e3:8a:b3:21:c1:c0:2a:16:0c:
         98:0f:1f:c2:02:ff:a2:ee:30:7b:4c:80:69:80:db:1b:12:23:
         00:b8:30:5e:27:66:0b:47:73:27:7a:d4:64:68:17:b6:c6:dc:
         15:99:f8:dd:6e:64:f2:17:c1:75:d5:bf:87:81:19:7b:c0:75:
         6c:08:6f:a7:3c:67:ed:c9:d8:cc:f5:0a:06:2e:a4:de:81:ad:
         23:76:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----