Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File:                     HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier:          ttopknBsMy7RDRv7jtpDY/no3C9c6qXsYpKBq5S110M=
Subject key identifier:   3F:BB:54:12:7D:F5:C8:C6:75:B1:56:E7:6E:74:43:A7:C1:40:A7:23
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer:       /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial:       01962E2B09AAB485A719DD71CE9A29AA83F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number:          0E56
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: yFVwbBqxroXqPCAXtQJiYzAxDjaK6gvjIndieVFAuEI=)
                          2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:aa:b4:85:a7:19:dd:71:ce:9a:29:aa:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=3fbb54127df5c8c675b156e76e7443a7c140a723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:e1:ab:e3:49:d8:ae:56:9b:d5:f2:59:69:
                    9e:3d:7a:c6:52:6c:54:05:98:4d:df:e0:b7:17:2d:
                    3c:66:f0:fe:51:85:2f:b2:7e:5d:42:e8:c1:6b:cd:
                    12:e6:8b:69:71:fe:23:0e:1b:29:a2:b3:ec:6f:ac:
                    00:86:c1:07:e4:85:3e:84:75:4d:43:3c:c3:08:25:
                    f8:ea:04:0e:cf:e4:8b:6e:9b:05:0e:52:0e:e9:53:
                    a5:dc:e5:70:4d:5d:aa:e9:cd:84:c8:07:e0:1c:5e:
                    86:37:03:70:5e:d0:6b:d4:1b:3a:54:e7:2a:21:3d:
                    37:fc:16:0b:a6:55:79:95:9f:aa:52:7d:ca:6b:00:
                    0f:48:da:63:07:a0:a2:2e:06:a6:7d:41:f8:6a:ea:
                    64:22:76:34:0d:3e:3e:6f:86:0b:a2:23:df:fc:1c:
                    29:10:3c:58:cf:e3:e3:71:47:64:5a:ea:64:84:e3:
                    96:f8:ff:39:01:49:7c:f7:e6:af:95:f0:76:72:0d:
                    a2:89:71:7c:46:96:cc:84:dc:0a:44:d0:79:70:8e:
                    58:ae:56:13:85:b7:f4:d6:93:17:06:2e:17:08:d2:
                    56:5a:99:a5:11:30:75:7a:69:83:7c:88:9c:18:75:
                    9f:aa:35:c8:5d:d1:43:95:99:2b:6a:d8:79:9b:10:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:54:12:7D:F5:C8:C6:75:B1:56:E7:6E:74:43:A7:C1:40:A7:23
            X509v3 Authority Key Identifier:
                keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b1:60:9a:0e:6f:51:98:0a:a0:ce:b5:44:0f:ba:87:ee:d4:
         7d:b8:3b:38:80:cc:48:ee:61:0f:b1:6d:52:3d:2f:4c:18:83:
         38:2e:d6:1d:a7:b6:ed:43:96:e3:57:1e:86:dc:ad:65:33:48:
         fa:e3:cd:77:09:32:6a:4a:37:d1:a0:90:73:28:8f:51:5b:1a:
         b3:e3:66:4b:b0:0e:55:78:84:30:1a:5a:53:b2:21:a6:80:4c:
         d7:a0:0f:4e:af:4d:46:08:5a:b7:e5:13:a1:bd:9d:02:74:fb:
         c4:a7:7b:90:6b:37:87:05:ce:07:53:0b:72:72:a7:e2:25:e3:
         91:63:ca:e9:df:17:3c:30:85:50:56:a1:f8:f0:1d:2e:58:b7:
         89:6e:be:7e:b8:30:01:b9:27:00:32:7e:81:d6:ea:d9:cd:74:
         30:66:43:29:33:8d:5b:53:96:43:59:0b:3b:77:33:c7:ff:15:
         09:49:39:d0:e3:34:e2:d4:c5:2d:95:0f:41:4c:6e:80:f5:23:
         c0:65:36:f7:89:9f:32:fa:84:88:44:37:b6:d2:53:0c:07:79:
         cb:e4:84:69:81:a9:61:7f:85:d2:84:82:96:7d:d8:c9:c6:11:
         34:47:e7:b4:0f:9b:07:fc:8c:0b:fe:a2:a9:b4:84:67:fb:29:
         a0:ba:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----