Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.mft
File:                     HrwURUFHAQyh700E0hASXh7X0ho.mft (raw, json)
Hash identifier:          ik0xRa4jHaN2e2ZV3Lh4ziasEAIVzlLnPfLWwQ6Q/qM=
Subject key identifier:   42:37:2B:66:63:84:9B:3F:77:59:21:FE:9A:B7:BE:8D:C4:89:52:EC
Authority key identifier: 1E:BC:14:45:41:47:01:0C:A1:EF:4D:04:D2:10:12:5E:1E:D7:D2:1A
Certificate issuer:       /CN=1ebc14454147010ca1ef4d04d210125e1ed7d21a
Certificate serial:       01962DF44DD5CF19E4C1390CA82A2B486A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrwURUFHAQyh700E0hASXh7X0ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.mft
Manifest number:          06A9
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: HrwURUFHAQyh700E0hASXh7X0ho.crl (hash: WMqazTEs+rlhFPaemTxf/Ymne+fj0Nz1cnqASgqfvI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4d:d5:cf:19:e4:c1:39:0c:a8:2a:2b:48:6a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebc14454147010ca1ef4d04d210125e1ed7d21a
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=42372b6663849b3f775921fe9ab7be8dc48952ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4a:68:59:70:70:56:21:3f:93:ea:a5:37:04:
                    cb:0f:1a:83:09:f0:3e:75:d4:40:f4:0b:4b:40:63:
                    5f:6a:1c:d9:ac:6a:1e:ad:46:ea:f2:4d:2d:8f:ce:
                    5a:77:0e:a2:54:91:d6:e9:11:9c:ef:4d:2e:ed:8d:
                    ea:84:28:f4:cb:3c:45:f1:aa:da:40:db:44:df:5a:
                    57:22:10:c8:b5:bd:ee:c4:75:10:d7:89:85:d0:d6:
                    e5:c5:82:9c:5c:f2:45:eb:2a:86:70:79:16:ff:84:
                    95:64:a3:c0:c6:ed:68:8a:bf:da:37:80:d5:97:e2:
                    ee:18:01:0c:05:4d:1e:02:1a:03:1a:5d:9a:78:6e:
                    fa:1a:51:89:39:b5:22:0c:40:7c:14:ec:cc:9d:82:
                    28:1d:64:fa:73:7d:92:88:d3:ee:61:e0:94:46:59:
                    30:c3:7a:b1:87:a5:f3:f7:ca:8f:d7:6c:fb:d4:fa:
                    78:01:35:8c:7c:50:21:4a:34:03:0f:a8:0d:96:06:
                    78:2a:fa:2c:42:37:ba:c0:c8:14:d2:e8:3e:43:21:
                    4d:75:1f:29:53:e0:2b:ac:a3:05:b4:c1:41:72:a0:
                    2c:8e:db:f6:ea:6b:68:6f:6a:e4:ea:f0:76:64:e2:
                    e1:a1:4d:9a:43:e5:76:44:6c:c3:d0:86:1b:f9:b0:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:37:2B:66:63:84:9B:3F:77:59:21:FE:9A:B7:BE:8D:C4:89:52:EC
            X509v3 Authority Key Identifier:
                keyid:1E:BC:14:45:41:47:01:0C:A1:EF:4D:04:D2:10:12:5E:1E:D7:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrwURUFHAQyh700E0hASXh7X0ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:79:64:d0:af:b3:31:d0:96:07:be:92:86:29:42:6d:83:
         b0:9e:6d:f9:6c:eb:d4:f4:bf:b2:4d:06:98:20:e3:39:8b:34:
         d6:d5:01:e1:78:85:44:10:31:99:e0:34:80:c5:44:00:4d:79:
         1d:6b:f1:f7:31:fc:a6:c1:dc:d6:92:71:13:98:19:6b:4e:9f:
         9c:26:98:d0:b3:88:37:88:1b:70:dd:89:81:cf:5c:8d:ae:b1:
         ea:ae:f6:9a:c9:51:ac:ac:5a:c0:5a:ea:7c:b6:92:cf:7a:fa:
         64:85:c5:35:b6:c4:de:8d:c3:ec:d2:5d:4b:a8:54:99:a8:22:
         85:99:48:f5:77:75:e6:c7:b2:a5:49:7d:01:16:b9:23:c7:5a:
         51:fe:ef:d2:3a:56:aa:cb:f4:68:52:3d:cd:23:90:3b:f4:25:
         30:1d:b7:8a:00:33:9a:1a:20:5a:eb:78:4c:50:e7:6b:17:3b:
         06:62:be:9a:87:6c:13:4a:0f:9d:1f:32:86:31:4a:a1:9f:87:
         19:48:96:e3:53:21:08:62:81:8f:50:bf:e7:a9:2b:ac:e8:24:
         ef:92:49:2e:c4:d2:07:7f:9c:34:04:80:d4:d7:1d:b8:ee:2c:
         e6:84:b9:28:35:58:39:83:f4:d8:d1:9a:0a:ce:d9:2d:29:ce:
         58:36:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----