Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft
File:                     HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft (raw, json)
Hash identifier:          jrWtKwNIdLDP8EP+XyhqecaIyQ1aCykin7dusBWNIo4=
Subject key identifier:   40:4E:B9:5C:B8:A0:6C:99:FD:D5:5E:6C:E2:DE:52:50:C6:65:BE:8F
Authority key identifier: 1D:89:33:C1:93:F0:4E:32:44:1E:37:16:2D:C4:DE:FA:97:44:B8:4F
Certificate issuer:       /CN=1d8933c193f04e32441e37162dc4defa9744b84f
Certificate serial:       01962DF3F46B0A5C4B2312B23B99A3DD79BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYkzwZPwTjJEHjcWLcTe-pdEuE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft
Manifest number:          12AE
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: HYkzwZPwTjJEHjcWLcTe-pdEuE8.crl (hash: eN3NVgCU4bANraT8t+z6pZoNmf/gWLjidgCtK0tZJq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:6b:0a:5c:4b:23:12:b2:3b:99:a3:dd:79:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8933c193f04e32441e37162dc4defa9744b84f
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=404eb95cb8a06c99fdd55e6ce2de5250c665be8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c6:a2:cc:99:e3:2c:06:56:43:81:5b:16:69:
                    ff:e6:1b:bb:77:23:27:4f:ca:b1:46:90:44:39:71:
                    90:bb:1e:bb:59:d5:28:6d:19:da:63:62:a3:c8:06:
                    a4:14:58:dd:78:7c:a0:6d:e9:6f:97:c4:b0:b5:ab:
                    ad:70:34:4c:09:cd:8d:16:3e:a4:46:e6:47:26:61:
                    ba:f5:f6:0b:4d:bf:17:ce:70:d5:b9:4e:14:fe:19:
                    6e:30:a1:5f:79:f3:4e:02:60:d8:c1:05:52:70:72:
                    c1:65:ca:c8:79:3d:66:14:b1:19:0f:81:c4:63:00:
                    c4:eb:73:7e:8a:9c:d4:ce:38:17:7f:80:18:43:92:
                    5e:c8:85:56:39:66:df:5a:6f:9c:51:6e:5f:0b:09:
                    c8:30:b2:8e:4a:37:09:e5:b8:22:bc:b1:aa:ea:ff:
                    16:e3:23:36:ad:56:e4:f8:ee:73:49:ef:0a:20:40:
                    22:2c:4a:82:1e:f4:3d:07:a2:99:43:cc:02:c9:21:
                    ac:68:fd:8f:70:74:b2:ac:9a:80:5e:56:61:21:5d:
                    85:5b:df:49:dd:e3:05:05:26:16:7f:90:54:55:ea:
                    a0:82:cf:a1:15:82:e3:af:c3:3f:18:71:f1:21:15:
                    3b:5e:3f:4f:d2:ea:52:91:dc:b1:53:5c:90:22:c7:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:B9:5C:B8:A0:6C:99:FD:D5:5E:6C:E2:DE:52:50:C6:65:BE:8F
            X509v3 Authority Key Identifier:
                keyid:1D:89:33:C1:93:F0:4E:32:44:1E:37:16:2D:C4:DE:FA:97:44:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYkzwZPwTjJEHjcWLcTe-pdEuE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f8:01:6c:95:a0:93:49:38:4e:89:bc:3b:9e:c0:65:88:cc:
         ec:53:dd:77:dd:81:82:6e:41:18:aa:47:24:6a:10:67:e8:1f:
         fd:0e:24:75:f5:17:47:f9:54:78:10:ad:f3:9a:d0:04:a2:d5:
         20:c2:33:a1:6e:e6:f2:ad:1e:21:ed:08:2e:c8:ed:5a:bb:68:
         66:9f:58:8a:b0:13:d3:62:16:3c:0f:3b:5e:0f:b1:3e:fa:09:
         87:c8:ab:4f:80:31:ec:1b:31:29:3d:d8:b7:e8:a4:2a:e9:a6:
         75:73:24:b9:d9:eb:8f:eb:de:61:02:da:c3:df:89:08:56:c1:
         ed:31:f0:17:41:4f:91:d4:79:a5:5e:5d:df:d9:8a:38:1a:18:
         10:0d:45:1e:a2:c7:7a:3c:33:4d:b5:42:ca:e5:5f:07:d5:7f:
         42:43:9c:91:42:8c:2c:76:07:78:56:37:c2:b1:ec:0c:e2:4f:
         28:25:72:a0:d6:c1:c0:20:66:cf:e3:3e:eb:cc:80:fa:67:bf:
         02:67:78:b7:3f:b7:57:fa:7d:3a:ed:e3:66:81:04:61:ce:f4:
         4f:b0:93:35:ae:ce:2f:e2:17:d5:40:3d:1a:ec:d9:ef:da:c3:
         02:18:11:33:03:42:e5:df:b0:28:32:8f:d7:14:91:9b:45:dd:
         d8:a0:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----