Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File:                     H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier:          o1WuscgZKAXQ8iUf90AdcNAur5lxZV5SbQWzfqC9kh0=
Subject key identifier:   11:50:C4:9D:08:17:0C:16:28:69:7C:FB:4C:1A:E6:6A:F8:3F:19:80
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer:       /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial:       01962ECF59265C1B6FDFEC4C8C1FB501862F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number:          048C
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
                          2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: qgZTJFsTComWzjx/mhz9dwbSKZvsRD0b21en4GsT7Xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:59:26:5c:1b:6f:df:ec:4c:8c:1f:b5:01:86:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=1150c49d08170c1628697cfb4c1ae66af83f1980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:e3:b0:84:5e:f3:71:a6:40:7c:eb:42:aa:
                    63:09:b9:c9:f1:06:e8:5e:76:2c:59:23:4e:91:e8:
                    ee:ce:cb:ec:44:6f:f2:97:85:b2:32:b5:ba:0d:f1:
                    ec:33:eb:23:75:2d:b0:b5:82:73:9f:05:9d:6f:78:
                    bc:c8:e2:ac:73:21:69:3c:ad:4e:7a:54:34:dc:7b:
                    5f:94:a6:f3:aa:4b:b9:00:69:5e:d5:fd:0e:b2:83:
                    36:a9:f2:d6:9b:c9:da:2c:c9:2f:6f:37:18:6d:f9:
                    d5:32:ee:e5:29:35:75:89:8a:9c:22:22:aa:96:35:
                    64:23:9c:90:03:b9:27:02:2a:b8:3d:ad:63:ec:0c:
                    45:c7:e0:e3:31:dd:7c:70:4c:24:76:1d:cc:41:0f:
                    ed:d4:ca:01:95:d3:bb:31:e9:f4:95:02:82:d9:27:
                    d9:b0:18:ea:eb:28:be:cd:75:7e:7e:85:f5:78:a3:
                    ca:6a:34:83:71:a5:52:57:c7:96:b6:72:08:dc:9a:
                    da:ca:28:ee:56:60:67:55:75:20:2e:dc:e6:e1:6d:
                    f6:22:76:75:bc:ff:44:8c:64:01:fb:1d:e5:29:a1:
                    f4:49:c9:ed:0d:d7:4e:db:fb:c1:72:18:40:8f:e9:
                    90:52:0c:20:d4:2b:14:56:20:3f:ec:1f:38:57:34:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:C4:9D:08:17:0C:16:28:69:7C:FB:4C:1A:E6:6A:F8:3F:19:80
            X509v3 Authority Key Identifier:
                keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:83:86:46:f3:3c:bb:3e:5b:2d:11:e4:c5:2f:b9:22:f8:
         2f:1e:76:80:b9:80:ff:41:c6:ec:5e:49:4c:d5:77:d5:9c:6c:
         a2:d0:72:9b:aa:5b:f7:07:d7:4e:4d:57:46:85:b8:8b:de:7b:
         d7:82:7f:c8:fc:81:f6:d5:0a:21:2e:22:79:c1:40:91:27:0a:
         d9:be:43:5a:98:25:52:24:b1:48:22:27:26:f8:ae:5c:68:b9:
         26:3e:b2:90:6a:e2:9f:50:dd:aa:22:fa:db:03:c1:dd:2a:47:
         79:9a:a3:4f:50:5d:8d:bf:6c:80:45:d7:fe:b7:14:d2:2d:6d:
         57:5b:4c:d1:a6:59:2f:98:13:b7:e4:a2:66:b3:47:b8:c5:85:
         0b:7c:6a:bc:02:1e:19:5d:51:f4:55:5d:9e:30:75:fb:68:bf:
         a6:ad:1a:68:31:29:bb:c5:d4:83:83:26:a8:18:a7:68:24:09:
         dd:18:14:fa:58:df:62:9e:f7:87:e6:0b:9b:8f:93:7f:6a:6c:
         96:e5:cc:ee:79:b2:4e:c6:76:97:08:c2:5e:1b:3f:31:0d:e9:
         7c:77:7e:38:a4:e2:d5:a1:db:f0:45:e3:35:03:dd:80:e2:8f:
         61:d9:f2:ef:85:1d:27:da:cf:b8:b4:32:60:5d:c5:71:f7:8e:
         aa:47:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----