Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
File:                     H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json)
Hash identifier:          HB/0fDYjVhM+dyV77L6I5Wz4iZQ7482F9V1aAx7hxts=
Subject key identifier:   54:AD:20:FD:20:CC:99:02:79:8B:2F:79:78:42:AA:FA:FD:5D:E5:5B
Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
Certificate issuer:       /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Certificate serial:       01962E9960D338F5E6AC2377B27D010D64CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
Manifest number:          038B
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: 8mVXEz27pJkr5BpqZr1ubyRLFCMa20gdohu3/ELX42w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:60:d3:38:f5:e6:ac:23:77:b2:7d:01:0d:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=54ad20fd20cc9902798b2f797842aafafd5de55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:24:bf:53:1b:bf:f3:1c:8c:1e:f6:06:a1:
                    9a:10:f6:46:bc:b7:80:60:2b:23:e1:d7:f4:55:d5:
                    89:eb:da:dd:a0:75:71:62:9a:45:0c:e3:8b:99:02:
                    09:ff:38:61:76:70:57:c9:8a:01:09:90:4a:06:1d:
                    c7:4f:f3:11:83:2b:ea:89:36:3c:78:65:dc:d1:7f:
                    e6:64:ab:86:53:f2:54:9b:e8:db:e6:10:23:43:25:
                    36:ad:f4:b2:00:da:c9:eb:24:34:22:e6:fa:c6:cb:
                    6c:56:e2:16:26:59:88:1d:69:ca:d6:a6:e9:26:2c:
                    15:57:ef:00:25:9e:29:f5:75:dc:dc:f5:10:55:73:
                    57:af:59:63:d5:c1:5a:9e:84:a3:75:de:92:da:10:
                    24:8c:5f:98:45:a3:88:cc:4b:30:6e:e6:24:81:7b:
                    be:bb:9e:f0:3d:3b:a2:a6:69:3d:c6:c2:5e:74:42:
                    aa:e6:e6:19:83:cd:4a:0f:33:0f:4c:93:58:1a:5b:
                    c4:97:ad:8c:c8:25:9a:39:5e:46:3a:35:6a:67:34:
                    30:32:53:be:88:07:0a:03:49:7f:c6:7d:60:db:3e:
                    6c:f9:17:67:2e:b8:76:37:8b:ec:9d:e5:19:a2:1a:
                    36:05:bb:4b:e6:aa:0b:e7:fd:e7:a4:e3:5b:78:41:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:20:FD:20:CC:99:02:79:8B:2F:79:78:42:AA:FA:FD:5D:E5:5B
            X509v3 Authority Key Identifier:
                keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:59:d6:cb:b7:57:3a:97:89:28:0d:77:2c:87:5c:48:9b:
         66:d0:dc:de:b3:6d:56:66:41:71:e3:f7:f3:14:08:b9:d0:b1:
         0b:33:17:06:3b:57:2f:e0:e9:8b:0a:89:37:09:e8:64:67:f7:
         d8:63:29:68:94:96:ef:ca:3c:d3:4b:3c:83:65:c4:6a:db:26:
         8a:e8:8f:52:18:8c:eb:1b:35:7b:2b:c9:56:2f:f0:c7:63:6d:
         99:6c:0f:32:91:56:3a:8d:19:ea:a1:4d:c2:e5:68:e6:98:2e:
         e9:dc:46:0b:bf:0a:ea:97:48:48:6b:c2:cf:5e:9f:31:1e:a1:
         5b:03:61:f6:94:bf:3a:54:f8:57:45:f6:ce:3a:5d:22:79:d0:
         a0:b3:92:d2:e2:6f:c4:11:24:d0:3e:fb:6a:d7:af:f3:62:ce:
         77:1f:0f:a1:64:98:6e:76:14:5e:e9:03:3b:6b:2b:93:89:85:
         e1:ee:49:76:55:5b:40:f5:5d:6f:c4:b6:bd:24:9d:6e:3f:e9:
         e6:1a:0d:8e:20:54:7c:23:7e:85:35:f2:32:c7:c3:3a:b4:cc:
         a7:fe:7c:bb:12:b2:a2:b3:f1:ec:2a:6f:0c:13:ae:15:3a:9b:
         a4:d2:bf:a3:2c:7a:e5:6c:b1:91:5e:4a:4f:d4:a2:e5:0f:cc:
         9e:5a:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----