Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.mft
File:                     hyyq6fD7ed7GhEvqzowiHO9NMsk.mft (raw, json)
Hash identifier:          HoyrGQvZD3rHQm+aWTIffJfCzuZ3htzbEnlw+2zjCOU=
Subject key identifier:   19:EB:78:EF:DC:6B:03:EA:9B:4F:0A:91:7D:E1:A5:3E:2B:D9:D7:1C
Authority key identifier: 87:2C:AA:E9:F0:FB:79:DE:C6:84:4B:EA:CE:8C:22:1C:EF:4D:32:C9
Certificate issuer:       /CN=872caae9f0fb79dec6844beace8c221cef4d32c9
Certificate serial:       01962E98786A8538C3E4B7C351B31B46667D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyyq6fD7ed7GhEvqzowiHO9NMsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.mft
Manifest number:          0F72
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: hyyq6fD7ed7GhEvqzowiHO9NMsk.crl (hash: +1Zyg36TY2Sv8el7faOcC/IwKwZOjgCJAzakEHNwurs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:78:6a:85:38:c3:e4:b7:c3:51:b3:1b:46:66:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872caae9f0fb79dec6844beace8c221cef4d32c9
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=19eb78efdc6b03ea9b4f0a917de1a53e2bd9d71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:f0:5d:25:7e:fe:0b:73:89:6d:69:6e:a3:
                    b8:9d:e9:ed:12:c6:5e:af:ea:41:71:54:df:cc:67:
                    08:5b:40:2c:d4:fb:3c:f0:57:fc:a4:ef:88:93:91:
                    2b:93:db:a2:b4:a4:3a:7f:fb:0b:fd:48:3b:b1:98:
                    2c:01:9e:24:43:56:55:ce:0f:2c:b2:97:e2:69:58:
                    cd:17:66:1d:84:7d:ac:36:b4:4b:d8:82:76:ef:3a:
                    40:6e:bb:40:e0:c9:fc:17:c9:d3:56:c6:fa:47:c0:
                    7c:32:e2:98:19:6a:31:2d:f8:6f:6f:7a:94:1a:b9:
                    2e:3b:11:6d:78:3b:4d:63:4f:4a:58:19:6a:82:f9:
                    9f:fe:d9:0f:77:51:cf:88:9e:c5:11:60:df:61:6c:
                    a6:bc:7d:0b:91:50:d5:cf:5c:9e:6a:37:83:d6:3d:
                    df:67:85:70:46:c2:9f:8c:8c:42:ed:f0:03:77:d0:
                    6a:a6:11:27:c6:1a:4b:22:4c:0a:ac:5d:35:48:15:
                    0a:bd:30:f7:de:0a:84:a2:eb:77:be:6a:19:d5:ee:
                    95:d4:75:ab:61:67:61:1e:a1:83:96:0a:17:44:09:
                    c4:28:83:25:7b:be:16:1e:48:7a:93:d0:cd:18:97:
                    6e:28:24:77:ad:1f:54:05:f3:be:64:91:41:9c:62:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EB:78:EF:DC:6B:03:EA:9B:4F:0A:91:7D:E1:A5:3E:2B:D9:D7:1C
            X509v3 Authority Key Identifier:
                keyid:87:2C:AA:E9:F0:FB:79:DE:C6:84:4B:EA:CE:8C:22:1C:EF:4D:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyyq6fD7ed7GhEvqzowiHO9NMsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:07:6e:53:5c:d2:02:09:7d:42:a5:b2:8f:49:0f:ab:d2:
         0c:f1:c0:d5:96:f8:1d:c4:1b:f2:ba:1b:ec:6f:92:63:ff:2b:
         61:ef:57:0b:ed:6b:34:9e:d7:75:b0:0d:ac:71:91:d7:d5:27:
         b3:6e:a3:12:81:07:b8:d6:17:8a:cc:ce:cf:55:40:7b:b1:88:
         d5:a6:c9:2b:1b:94:d8:ea:4b:83:7e:72:9c:29:c2:dc:7e:a2:
         71:e9:5c:02:b9:84:6e:90:fd:f9:ba:5c:7e:68:7a:9a:ee:d4:
         97:ab:5b:78:e2:74:46:ff:51:b8:f9:ac:86:32:76:6f:82:2f:
         b7:42:ed:f1:f2:72:5d:68:e3:d5:a4:e1:b2:2c:60:5c:92:05:
         df:92:eb:7b:f6:b8:db:e5:49:14:0c:c3:35:99:25:2f:56:36:
         d6:cb:bc:a9:43:a9:df:42:6f:31:d7:de:03:6e:37:04:da:6e:
         12:64:b0:c2:27:c6:5a:b6:af:a1:32:1b:2c:e8:ac:a0:95:11:
         ae:2c:81:e8:50:f6:19:f3:36:18:96:bf:a7:f0:73:03:e9:85:
         fd:14:79:26:c6:e3:ac:91:3e:19:2c:4f:04:64:af:05:89:73:
         ae:e0:fe:16:3c:65:c0:ce:bb:8b:0c:d4:1b:1b:b5:53:63:9f:
         bc:b7:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----