Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File:                     HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier:          1reXdomWJRLvkuR1oxyzncsNYW9F+fDBzTVYkb0Bwoo=
Subject key identifier:   AB:43:D7:DF:A0:D1:A8:07:C9:96:ED:BF:B4:F8:83:23:D3:EC:E0:F2
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer:       /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial:       01962E61D9D49C5582B3C3F1FA700016153C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number:          1297
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: z4s4EqfYoblRU6A2WFbA+RrzTl0eGpVrWaJnqqJgWes=)
                          2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d9:d4:9c:55:82:b3:c3:f1:fa:70:00:16:15:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=ab43d7dfa0d1a807c996edbfb4f88323d3ece0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:28:72:39:90:8e:e4:16:f9:5e:6b:9f:ee:
                    e3:33:38:62:30:bd:dc:72:bc:72:77:2a:81:02:d1:
                    b8:5c:9c:bc:ad:f4:c9:b8:3d:85:a7:c5:88:c7:79:
                    79:d9:5f:19:d4:50:e9:06:1a:24:be:b6:d7:4b:31:
                    94:1c:1e:55:d1:ce:26:95:63:a1:34:da:53:5a:de:
                    28:31:e6:4f:01:37:87:bc:4e:35:9e:a6:25:85:c1:
                    1c:68:92:b3:43:6c:cc:f1:fa:5d:f3:0b:06:32:f4:
                    c3:4e:ee:df:92:af:6d:c4:90:42:dd:08:a8:b1:6a:
                    6e:fa:ae:10:a4:9c:db:af:06:09:b5:35:e0:0e:99:
                    6f:c6:40:69:b8:e7:59:46:26:a4:aa:8e:9f:00:da:
                    66:2e:98:ae:72:5f:6a:1a:c5:f0:4d:88:4a:39:35:
                    ef:45:56:0c:34:af:0b:d8:6c:a3:22:76:7e:31:cb:
                    d4:00:e7:49:f2:24:f2:a7:4a:f7:42:e8:dc:ab:95:
                    d3:b1:78:a7:14:3f:cf:8e:11:31:ee:e3:ed:a5:3c:
                    c8:4a:3b:43:ca:2e:b2:03:fd:e9:5e:61:88:0b:f7:
                    d2:83:3c:51:da:80:40:f0:49:ef:d9:e3:24:87:e2:
                    f0:b5:29:e2:24:93:a8:c9:94:9d:5f:3d:68:0c:d6:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:D7:DF:A0:D1:A8:07:C9:96:ED:BF:B4:F8:83:23:D3:EC:E0:F2
            X509v3 Authority Key Identifier:
                keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0a:ac:eb:f4:33:36:2d:10:c5:76:c8:2d:37:0f:52:01:b3:
         5a:ca:e0:74:8c:31:ca:af:ab:27:48:85:f8:db:9a:48:b2:4c:
         b3:67:3a:31:e1:b1:5f:4e:31:07:ea:fc:88:39:2a:0c:24:ac:
         7b:49:e7:f1:11:37:50:a9:ee:7b:b4:6d:cb:c0:8a:2b:c7:bf:
         71:af:9e:3b:a6:5d:a3:83:26:92:82:b2:cd:59:4c:6c:e8:94:
         76:19:06:d7:35:71:5d:fb:1d:eb:ae:d7:5c:da:ab:e6:e4:d5:
         b3:db:af:09:2c:8b:4d:f3:d3:b2:b8:a7:49:3f:38:66:79:a8:
         ad:88:49:a1:e9:90:53:af:9b:84:05:7c:cc:92:6e:07:61:98:
         e1:36:53:8f:42:c1:55:4c:f2:4b:20:13:e8:45:c2:8b:ce:d5:
         04:55:89:79:81:60:70:cd:40:f1:dc:32:3b:17:26:6c:af:37:
         5e:b6:10:f7:70:69:a7:50:29:71:2c:f7:c6:b1:07:68:c6:30:
         34:1d:e2:21:81:fb:f4:65:18:04:66:94:2c:45:6c:13:38:dd:
         ec:01:db:e2:bd:30:7c:b1:ad:f5:2f:ac:7b:5a:33:2b:10:35:
         ff:3f:7e:e6:c7:db:24:fc:94:9e:a5:d6:89:7d:f4:30:66:e9:
         70:b0:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----