Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7129e7-8247-4bbd-b017-ecec1b2edb59/1/hWNQMF8ROHUA8DxaBv9zqhNZLxw.mft
File:                     hWNQMF8ROHUA8DxaBv9zqhNZLxw.mft (raw, json)
Hash identifier:          w/rA24/mRSjtamQQlt6bc7FBhi1CmxRtM5CYV1kUN7s=
Subject key identifier:   DD:5C:BF:0A:A2:7E:A4:DE:38:8A:87:8B:89:36:CD:A7:7D:28:9A:F6
Authority key identifier: 85:63:50:30:5F:11:38:75:00:F0:3C:5A:06:FF:73:AA:13:59:2F:1C
Certificate issuer:       /CN=856350305f11387500f03c5a06ff73aa13592f1c
Certificate serial:       01962F069A1A469FB24BECBF7B0810A7D0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWNQMF8ROHUA8DxaBv9zqhNZLxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/7129e7-8247-4bbd-b017-ecec1b2edb59/1/hWNQMF8ROHUA8DxaBv9zqhNZLxw.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: hWNQMF8ROHUA8DxaBv9zqhNZLxw.crl (hash: fQBXkr2M0WM0ttzD7d1PWvM+jym4kVLkWrvzz8Bp84M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9a:1a:46:9f:b2:4b:ec:bf:7b:08:10:a7:d0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856350305f11387500f03c5a06ff73aa13592f1c
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=dd5cbf0aa27ea4de388a878b8936cda77d289af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:27:26:92:ea:90:a4:42:86:a6:dd:ae:d9:
                    7e:d3:27:0f:aa:fc:87:3b:76:d2:5a:57:4a:8d:ae:
                    f4:7c:d8:4d:66:bf:06:3c:84:d0:72:02:a8:bb:dd:
                    00:fb:ea:ad:4e:be:bb:d1:8b:23:4a:35:bf:de:c8:
                    b7:61:84:c7:5d:7c:6d:94:11:9a:dc:c8:7e:f4:1b:
                    7e:94:1d:04:ad:ce:fc:8c:57:23:d7:84:27:1d:3f:
                    b4:c3:59:ee:f2:d8:0e:62:a8:72:4e:24:a2:3d:63:
                    64:89:ff:fe:b9:82:19:b5:58:c1:b5:0b:38:15:e9:
                    d7:58:c8:c9:17:72:b2:33:80:24:17:9e:ab:5e:a3:
                    47:db:4c:71:34:8d:7c:06:70:01:ce:71:58:35:13:
                    bc:1c:3f:d7:a8:93:3b:56:dc:74:5b:55:c8:e7:7b:
                    9f:89:8c:56:d4:d3:2f:cd:a7:c4:f0:f1:17:26:4b:
                    96:67:96:c5:45:e9:e7:d6:16:3b:fe:dd:66:7b:c8:
                    c8:79:f9:d9:05:87:30:2e:e4:53:10:5a:0e:e0:ac:
                    a2:75:aa:68:d4:c1:d6:6e:9f:8d:76:fa:af:ac:95:
                    6d:de:e3:f2:43:c9:ad:c1:43:53:fe:29:34:e7:0d:
                    09:f6:f3:f1:66:b4:62:93:72:42:3d:50:c8:6d:5a:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5C:BF:0A:A2:7E:A4:DE:38:8A:87:8B:89:36:CD:A7:7D:28:9A:F6
            X509v3 Authority Key Identifier:
                keyid:85:63:50:30:5F:11:38:75:00:F0:3C:5A:06:FF:73:AA:13:59:2F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWNQMF8ROHUA8DxaBv9zqhNZLxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7129e7-8247-4bbd-b017-ecec1b2edb59/1/hWNQMF8ROHUA8DxaBv9zqhNZLxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7129e7-8247-4bbd-b017-ecec1b2edb59/1/hWNQMF8ROHUA8DxaBv9zqhNZLxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:5d:d8:57:c6:b9:bd:39:93:e8:b5:ac:1a:38:7e:36:89:
         07:3e:bc:aa:f5:91:cb:c8:2b:5a:b3:12:bb:69:e7:13:a4:8f:
         93:85:0e:99:46:73:95:f1:da:9a:45:18:b9:36:1e:4e:c6:b5:
         89:20:d8:80:eb:bc:f4:7e:f0:2b:05:d2:ab:3d:be:f5:95:4f:
         8b:0e:9f:c1:e6:e8:0d:29:1a:fd:88:a4:c1:ab:ac:89:87:bb:
         bc:f6:b7:62:d9:4a:92:2f:c1:b0:fe:77:33:58:f8:b9:4b:6e:
         4e:b4:a0:a3:60:86:a6:c6:0c:26:39:15:57:f4:df:9c:25:30:
         e3:58:0a:2e:4c:9a:47:39:58:15:38:38:52:2a:6a:33:b4:95:
         26:92:e7:57:11:85:c1:2e:fd:d0:c0:32:80:6f:0c:14:85:a7:
         a9:ef:e6:fc:5f:76:31:fc:af:5c:2e:dc:67:b5:dd:4a:ef:6b:
         bc:89:23:b6:98:96:82:19:07:52:64:7c:d2:a8:64:eb:d9:bc:
         3a:a9:91:5f:eb:20:c3:32:5e:bd:7a:e0:90:0a:16:29:d4:66:
         ff:4b:5b:64:8c:f6:37:b1:35:ee:c0:aa:26:b9:a9:59:53:06:
         75:65:4e:10:57:f4:a9:3e:fc:ab:a0:82:05:40:2f:a1:c0:f8:
         55:d3:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----