Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File:                     HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier:          trFfywpeQ7AOFEGyPZgajU/PYDC+gHlARQhgSzDtG6k=
Subject key identifier:   BE:AE:2D:61:DE:87:87:17:97:7B:D6:A9:33:59:52:25:84:0F:D9:05
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer:       /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial:       01962E991BCCE8942F5330292063951AAA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: 8WnPhBp3r0hfNTI8uOADEa8O4QhQzG08VuFFacZR+bo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:cc:e8:94:2f:53:30:29:20:63:95:1a:aa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=beae2d61de878717977bd6a933595225840fd905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:48:40:21:ba:cf:94:bc:91:f6:60:79:20:
                    d9:6c:3c:d3:bd:9d:9a:0a:cd:65:d6:d6:63:22:ce:
                    de:5d:3d:a8:b9:af:3c:18:db:0b:58:11:a2:13:ca:
                    8b:2d:ca:a5:a4:f7:7d:db:1a:34:75:fe:31:42:26:
                    1e:0d:1d:3d:c3:41:3f:de:be:bf:f0:c6:3a:76:83:
                    20:f6:97:95:3e:cd:1b:f6:5b:40:fb:dd:8a:cd:1a:
                    f5:17:91:3a:34:bf:15:aa:0c:f5:77:b7:50:9d:e2:
                    e3:87:4d:1a:90:2e:86:52:ce:8a:be:d8:32:69:f6:
                    12:3b:05:29:b7:c0:77:19:ff:3f:32:9c:90:b7:43:
                    4b:c5:97:d0:62:bd:27:73:9c:25:ae:5a:5f:56:ad:
                    ea:0f:7f:de:a7:a9:59:f5:c7:64:56:7f:f8:e5:26:
                    78:0b:55:bb:df:25:64:3f:c4:c7:b2:ac:a6:c6:e3:
                    e3:f6:a3:9c:ca:e6:43:cf:b2:ac:95:0b:ad:c9:79:
                    51:0e:c2:17:cd:8c:45:6b:87:65:a4:9f:97:88:67:
                    d2:09:ab:f5:17:fd:50:dc:81:c5:a7:5d:f2:fa:3f:
                    33:7c:2e:8d:5e:53:69:4b:5a:f1:76:e3:75:f6:f6:
                    cc:10:67:b1:13:37:ff:c7:d0:3d:b6:ea:f9:fa:63:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AE:2D:61:DE:87:87:17:97:7B:D6:A9:33:59:52:25:84:0F:D9:05
            X509v3 Authority Key Identifier:
                keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:05:39:63:d6:a6:e3:6f:7c:3d:18:54:fb:83:b1:19:4d:
         05:87:f0:67:80:d1:3e:f2:1a:3b:21:d2:7f:fc:eb:7d:06:02:
         38:52:33:55:da:16:ca:58:4a:31:ed:06:6a:57:99:24:c8:6a:
         a2:b7:a3:ef:5f:8a:20:bd:01:fb:e1:4f:80:85:b9:34:a1:6c:
         52:d4:33:d8:12:fd:eb:08:6a:c2:07:c8:ae:5d:14:49:da:15:
         c1:a1:b2:bd:7d:0b:92:ab:16:9c:15:dd:d7:06:46:6d:85:28:
         34:a4:8f:0b:e9:b1:cc:38:90:3f:2f:bf:49:f7:20:c4:f0:51:
         0d:ba:88:e6:e4:a4:b9:c2:73:4c:31:d5:ca:be:ec:16:1f:7d:
         2d:d0:f6:79:f8:47:40:0d:dc:f5:f0:eb:0a:23:91:cb:35:68:
         17:4e:be:50:c6:e8:b8:d6:17:c7:1a:4f:4c:db:39:3b:a1:ec:
         38:63:1f:60:68:52:0d:63:a0:8e:6a:a9:23:24:5c:94:77:58:
         95:7a:df:b4:05:33:21:10:77:85:ec:dc:32:e4:df:d1:c4:7c:
         49:10:43:71:4a:32:c2:2f:9c:eb:7e:96:6c:99:d1:7e:6c:23:
         34:9f:55:c5:3d:e0:6d:25:17:40:17:7d:c9:df:b9:1b:14:f5:
         92:a1:4b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----