Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          hRC9bOssbaLqojIL6e7mWYYhqTqnhOCdIksPo6bxI40=
Subject key identifier:   B6:AF:DE:A4:4A:AC:4F:81:39:75:B5:37:D6:AD:A9:3A:83:F9:12:4E
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       0195E1599625CD93CD07FA41649B7AE2B84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 10:01:39 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:39 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:39 +0000
Files and hashes:         1: G0-RDDt_Q2lP0Ew3poyGeMZve3U.roa (hash: LkKmmsoeH2tMjWHQsJIhgAzVX6WvQGsEQCrntj06Zuc=)
                          2: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: EYbu6u6tt4xhh1Vw85zJEC0kOw97cnCjJLsMRSsyRKo=)
                          3: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
                          4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:96:25:cd:93:cd:07:fa:41:64:9b:7a:e2:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Mar 29 10:01:39 2025 GMT
            Not After : Mar 30 10:01:39 2025 GMT
        Subject: CN=b6afdea44aac4f813975b537d6ada93a83f9124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:61:cf:dc:4c:d9:a4:f4:63:70:0b:3a:45:
                    ff:50:db:a7:c6:c7:96:27:41:0f:53:85:95:25:59:
                    72:55:60:33:6d:5c:c4:00:ba:d4:7c:88:46:9d:d1:
                    ae:5d:ce:8a:e9:dd:7f:81:9a:ee:ff:bb:de:7f:f8:
                    fd:3a:a1:f1:e8:46:0f:8b:be:42:08:da:bc:a5:7b:
                    d4:e1:5a:ab:10:87:dd:2c:78:08:04:79:2f:12:ba:
                    df:2a:7d:7d:fb:59:44:2a:72:f6:07:34:20:39:38:
                    0f:bf:2f:b7:ef:cd:58:14:82:66:41:1e:d0:e0:b4:
                    50:c7:80:e1:e1:30:45:f3:2f:42:59:e2:8d:a3:d8:
                    2a:14:5c:c9:3f:93:e7:0b:15:14:db:e0:39:7a:e4:
                    a6:9e:7d:35:1f:07:dc:b4:06:78:3e:b5:dc:f2:68:
                    69:a2:02:78:76:87:9c:c7:d1:bb:a1:30:32:d4:81:
                    44:6c:2c:35:f2:75:a0:43:8a:1d:29:4f:3b:54:9a:
                    37:6d:ad:53:40:8c:88:10:39:48:06:26:11:d8:0c:
                    42:6e:9b:51:97:08:70:1e:6d:42:d4:3c:d8:47:a8:
                    da:c0:53:2b:c1:56:47:bd:b2:b7:f9:e5:70:06:ff:
                    27:89:b4:4a:c1:ba:62:4c:f5:dd:e0:ca:54:16:d0:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AF:DE:A4:4A:AC:4F:81:39:75:B5:37:D6:AD:A9:3A:83:F9:12:4E
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:70:70:56:6a:57:e7:05:ee:ec:9b:38:2d:99:db:a1:1f:
         e4:54:5c:d7:f3:b1:b6:a0:fb:9f:64:9c:fd:8d:8a:03:9e:99:
         b0:31:00:1d:1a:f9:52:b7:34:9b:8d:59:d0:c3:a8:2e:16:25:
         d5:c2:f7:49:ff:6d:22:49:44:c0:f8:f8:04:97:2c:fc:e3:26:
         11:38:bd:c9:36:3f:b9:8f:88:dd:63:b8:48:79:73:8a:40:fd:
         98:6b:db:1f:80:ef:a5:64:65:04:d2:bb:d7:c6:e6:e3:08:42:
         9e:44:a9:2f:42:df:2e:2d:fb:82:f8:08:8c:35:90:bf:20:df:
         15:1d:d1:2c:02:27:7d:00:d4:21:04:71:7a:b1:2b:f4:9b:12:
         6f:9b:f3:a8:e5:9b:b3:a9:bc:e5:25:84:c2:27:a1:21:66:8c:
         5e:51:8c:f3:97:d0:f9:8a:a0:3a:b3:58:56:a7:00:f1:54:66:
         05:62:d4:ff:1b:15:2e:b8:d2:bc:79:05:2c:c4:16:1e:20:da:
         8d:47:a0:f6:92:4c:05:b2:c5:64:b6:55:0b:a9:ed:84:32:0b:
         43:f5:9d:b9:23:10:3a:42:06:42:ee:e5:5f:ea:05:14:46:f1:
         b2:52:ef:f8:43:12:94:0d:68:72:3c:b2:7b:fb:b7:d9:62:d4:
         db:b9:64:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----