Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File:                     HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier:          5C4L5W9zatDx9a93DkK701A0eoLLlKoBMnizRaVnKlI=
Subject key identifier:   2D:CC:23:00:72:6B:60:A7:82:A9:61:F9:C4:28:39:BF:E6:CD:FA:FC
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer:       /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial:       01962E99A2774E5D901153F6E71F641E366B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: 9RWc5SSxcjoY22/T3YvKleqIgFtCMKmRR+vtfZ8V51s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a2:77:4e:5d:90:11:53:f6:e7:1f:64:1e:36:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=2dcc2300726b60a782a961f9c42839bfe6cdfafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6b:41:e2:16:4c:12:52:d2:63:72:1a:60:71:
                    70:1c:c0:c3:8f:cd:87:8d:d8:42:94:8d:98:15:3a:
                    1a:a3:54:bc:d0:f8:cd:d2:ba:34:0e:1c:82:f6:bb:
                    e2:61:c1:84:f3:ca:86:10:65:7c:e9:71:f4:07:b6:
                    16:29:cf:3b:72:30:5b:29:f5:9c:b6:1b:76:c5:54:
                    9f:41:3a:8c:e4:8d:f8:67:59:c9:84:6b:23:a2:97:
                    a7:08:63:d2:a9:24:9b:f1:14:1a:83:0b:92:93:6b:
                    8a:07:8d:fc:74:00:a6:d2:37:9e:71:b7:6e:68:b4:
                    7b:82:eb:a8:17:dd:5a:90:a1:71:d7:57:65:cf:3d:
                    1b:66:b8:61:8c:87:9a:f1:3c:ec:a5:20:2c:25:f9:
                    1d:f2:64:a8:98:24:cc:85:32:86:ae:35:40:fb:d8:
                    f9:32:5d:10:1c:39:3f:2e:ea:f3:fc:83:da:8d:5c:
                    fc:ee:b1:04:49:0c:dc:6e:fd:22:50:45:9e:14:16:
                    7d:b4:7f:82:5c:9c:68:f3:1c:59:16:54:9c:fc:9f:
                    e5:0b:3d:59:24:a5:01:a8:5c:ee:57:2c:22:ae:ab:
                    9b:4c:6b:f7:b7:8e:39:3e:d1:79:64:04:38:5a:26:
                    af:1a:7f:bf:00:bd:3f:ee:14:6a:4e:f3:f2:0f:40:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CC:23:00:72:6B:60:A7:82:A9:61:F9:C4:28:39:BF:E6:CD:FA:FC
            X509v3 Authority Key Identifier:
                keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:60:17:8a:74:ab:24:a7:fe:22:f2:b2:5d:04:be:85:69:4e:
         05:5c:1b:8e:f4:1f:20:b5:0b:5d:63:89:dd:37:fb:9c:42:c6:
         10:8c:70:6b:b6:a2:a9:ef:0d:dd:0d:e4:45:b1:70:7b:b8:f6:
         89:ee:eb:ae:30:f0:d9:40:25:35:2d:78:94:46:df:dc:1e:3e:
         44:34:b4:d0:03:5a:71:0b:dd:de:e6:46:27:53:b6:73:73:3f:
         f8:0a:ce:03:73:ae:00:71:1d:a5:90:09:0c:6e:74:05:1f:c2:
         07:7e:f0:b3:5c:b1:dd:53:7c:41:56:37:43:b9:f9:f0:1e:28:
         e0:ea:ae:52:61:f8:0d:11:9d:99:36:92:c8:de:c8:c3:11:5b:
         b5:a1:dd:a8:ad:48:1a:34:74:07:d8:b3:00:d5:80:f2:c7:c5:
         78:e1:f7:0a:fa:63:7e:eb:ee:51:08:19:3e:2f:81:03:11:38:
         c1:d3:9c:41:b5:f5:8c:ab:6b:6e:80:dd:b9:10:e4:6a:9c:7c:
         4e:49:d8:7c:21:9d:e1:86:a7:4c:f2:3c:93:08:60:44:3b:59:
         21:2a:c9:f0:46:b3:e9:e3:3e:a4:3c:4d:44:0c:ba:3e:db:4d:
         1b:0f:c0:c0:2d:f1:81:22:a0:c7:17:5d:b0:ea:b1:63:e8:d7:
         3b:73:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----