Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/98b5dd-7dee-4f4e-9cd1-16320d014c04/1/hQEj5M4rgOvxLkP-5LHBjFxz07Q.mft
File:                     hQEj5M4rgOvxLkP-5LHBjFxz07Q.mft (raw, json)
Hash identifier:          NrRMQ1UzsNDgguIwE+uCKCXQ6IBk6aes+L+XM6o8950=
Subject key identifier:   0B:DB:AB:29:86:E8:B1:33:9A:C7:C8:9A:75:B2:B1:96:90:CF:34:19
Authority key identifier: 85:01:23:E4:CE:2B:80:EB:F1:2E:43:FE:E4:B1:C1:8C:5C:73:D3:B4
Certificate issuer:       /CN=850123e4ce2b80ebf12e43fee4b1c18c5c73d3b4
Certificate serial:       01962E993586A269B9E4612CD6FC273331E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hQEj5M4rgOvxLkP-5LHBjFxz07Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/98b5dd-7dee-4f4e-9cd1-16320d014c04/1/hQEj5M4rgOvxLkP-5LHBjFxz07Q.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: hQEj5M4rgOvxLkP-5LHBjFxz07Q.crl (hash: JDraTZIkDVpMfZBkv7/C/GjYpXP+7rPxR+ZOUM/BK6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:35:86:a2:69:b9:e4:61:2c:d6:fc:27:33:31:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=850123e4ce2b80ebf12e43fee4b1c18c5c73d3b4
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=0bdbab2986e8b1339ac7c89a75b2b19690cf3419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:c0:dc:95:2c:ff:42:c1:47:63:72:58:41:
                    59:13:f0:9f:31:4b:7e:db:38:34:a7:ea:bc:97:86:
                    0f:3c:36:d5:5b:05:2c:d5:19:10:c2:63:02:b2:75:
                    6f:27:b4:e8:a4:a0:13:70:ab:c4:96:8d:4e:dc:f5:
                    f4:63:70:83:e6:52:20:55:89:ee:65:69:14:11:1e:
                    f8:90:45:64:eb:f1:6e:b3:c9:c0:dc:03:a9:1f:5c:
                    9c:db:d2:1d:64:79:6d:59:87:d2:4d:45:65:85:51:
                    c0:8f:d0:45:1c:1b:6d:d8:70:04:95:24:5d:46:a3:
                    0a:a4:72:dd:a1:57:d5:bd:75:4a:1f:df:0a:7a:c2:
                    7b:4d:94:f8:56:3b:39:0a:ef:aa:9f:4e:1a:a8:46:
                    cc:fa:9c:67:0a:97:f0:55:77:a9:da:2e:7e:48:85:
                    bd:fa:f6:68:99:9d:bc:a3:ac:e6:bb:7f:64:f6:c9:
                    df:e7:0f:eb:87:1f:a6:5b:0e:2f:f1:e5:7e:2a:42:
                    1e:fa:75:5f:8c:94:bc:40:b3:0d:7e:89:66:91:eb:
                    bc:d5:58:32:20:0b:46:cb:d7:68:2f:fb:d0:f8:33:
                    83:c0:5d:4b:97:57:01:dc:c2:b2:b7:f4:31:1e:f7:
                    03:20:62:92:3b:82:22:b8:32:e7:c8:a2:9f:f3:69:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:AB:29:86:E8:B1:33:9A:C7:C8:9A:75:B2:B1:96:90:CF:34:19
            X509v3 Authority Key Identifier:
                keyid:85:01:23:E4:CE:2B:80:EB:F1:2E:43:FE:E4:B1:C1:8C:5C:73:D3:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQEj5M4rgOvxLkP-5LHBjFxz07Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/98b5dd-7dee-4f4e-9cd1-16320d014c04/1/hQEj5M4rgOvxLkP-5LHBjFxz07Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/98b5dd-7dee-4f4e-9cd1-16320d014c04/1/hQEj5M4rgOvxLkP-5LHBjFxz07Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:05:d4:0a:d4:38:d8:ac:81:50:18:05:67:cc:c4:65:9f:e2:
         2b:e3:6c:d2:56:2c:8a:4b:75:d9:80:a0:23:2d:24:12:14:c8:
         7c:db:88:91:ae:8a:3c:b6:60:b9:fa:21:8f:73:43:ef:0c:ab:
         78:c6:c6:a9:df:6c:6a:aa:9e:bd:72:7f:40:79:53:50:6c:cd:
         a9:2f:38:21:7b:f9:14:b1:46:bd:d7:ba:ab:02:2f:85:10:83:
         92:6f:e8:14:70:48:d8:fd:5c:c4:c7:87:98:7c:4e:ac:8e:e4:
         b3:91:66:0a:7e:4b:dc:a9:5a:da:25:e0:9e:5d:cf:6a:67:80:
         1e:db:16:3e:f2:e2:bb:6c:42:0e:c3:ca:9f:c5:9b:8f:ce:ad:
         2e:24:2c:73:43:da:8b:d0:6d:67:5b:89:cb:3d:90:72:21:45:
         24:f4:fc:d8:28:67:eb:90:d9:59:57:6f:6f:38:0b:d7:3d:c3:
         e5:8b:cb:13:f9:54:dd:34:64:48:4a:4a:34:8e:fd:9b:11:0f:
         0c:03:5e:14:1b:f5:88:d2:69:b1:72:26:4c:db:c1:9d:44:03:
         31:61:e7:a5:96:5e:06:7b:43:78:1e:2d:3f:44:27:a5:47:a6:
         9c:b2:9b:2f:a6:4b:73:7a:55:72:8e:64:15:12:9a:1d:5c:6c:
         62:6c:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----