Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File:                     RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier:          DdAgPASLnxqnGvRSH08KSNX+O/y1/I90JkjpIs95OOs=
Subject key identifier:   38:75:2B:CC:45:A4:49:F4:7F:9F:24:3C:36:62:2B:8F:FC:5E:20:C2
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer:       /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial:       01962E99C1173E2F341D8E6965BDC8C86BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: D4ACLlmxXczXr6bdZ9Uc9sWg5wLJebBGu7YaF2noqzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c1:17:3e:2f:34:1d:8e:69:65:bd:c8:c8:6b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=38752bcc45a449f47f9f243c36622b8ffc5e20c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:7c:fd:77:ce:39:81:87:a9:3b:92:6f:73:
                    0c:db:e8:27:95:d4:87:16:b6:69:15:e7:c8:74:84:
                    77:10:a0:a6:c0:c5:23:e6:31:fb:36:79:aa:24:8b:
                    e2:07:e2:15:a2:23:56:08:9b:96:65:75:46:35:8f:
                    e9:de:35:80:69:02:e1:d9:2d:f4:ab:5f:44:64:36:
                    16:3a:a7:19:95:db:5a:6e:02:7f:cf:09:7d:45:ae:
                    fc:fe:1d:12:3f:fc:ee:f6:1b:26:cd:10:6d:65:d9:
                    57:53:1d:62:d9:f8:54:84:5e:ed:73:9e:51:7c:27:
                    8b:25:0a:f4:85:29:d3:b2:16:36:b8:f6:05:9a:4c:
                    83:8d:4b:90:d4:c4:f9:8c:f2:27:05:5e:29:b1:23:
                    bf:fa:1d:49:66:46:62:14:c4:8c:c1:1b:b5:9d:0c:
                    57:f2:2a:30:e1:16:21:86:77:c3:bb:38:85:e4:c2:
                    39:04:cc:2f:b5:ec:95:82:5d:d0:22:28:cf:a7:fc:
                    7f:4a:47:6f:42:02:07:46:d5:4b:f2:5a:58:f4:34:
                    e6:a9:27:82:84:be:01:a9:6a:1c:9b:5a:92:34:38:
                    9a:0f:9d:45:82:c6:6d:89:92:12:07:84:0a:6b:7c:
                    d9:65:4f:8c:9f:6b:26:cc:e1:af:de:20:fb:81:94:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:75:2B:CC:45:A4:49:F4:7F:9F:24:3C:36:62:2B:8F:FC:5E:20:C2
            X509v3 Authority Key Identifier:
                keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:36:74:15:61:7e:35:ba:8a:d3:dc:9a:5b:85:eb:36:20:0f:
         6c:c9:05:0d:53:e6:7d:23:fc:56:52:4d:43:8a:d0:ab:5d:8b:
         c6:fc:0c:af:eb:04:8a:7c:d1:df:a1:cd:96:d9:3e:36:b0:05:
         6e:2d:80:48:c0:7a:e5:fc:dc:32:fe:34:dc:86:e4:15:62:8d:
         91:d0:13:3d:7e:40:2a:94:23:1a:ea:a2:25:d5:fe:50:9b:0f:
         02:b5:e2:53:ca:ee:4e:80:36:81:0e:57:98:ae:3d:8b:c2:ca:
         47:0d:84:01:1e:35:4e:b7:db:db:64:1d:e3:55:08:9b:9d:81:
         fb:aa:74:98:45:c6:01:2d:29:33:b8:49:ed:43:3a:93:f3:e1:
         46:fe:7f:1b:88:4d:dd:49:e8:b9:0e:f6:6c:c3:0f:1d:0f:28:
         be:a2:d1:d7:64:30:08:91:82:be:8d:96:31:ba:10:d5:e8:a3:
         a4:0e:e7:c5:23:60:d3:7b:02:c7:93:7a:cd:f7:e7:41:ce:18:
         7a:cb:57:62:b7:d1:64:bb:13:67:13:27:01:bf:cd:42:0d:00:
         95:ac:79:f9:db:4e:0d:29:4f:42:22:ad:15:de:59:4d:57:d8:
         fe:88:b1:af:26:b4:ba:f6:93:d4:72:bb:a3:d9:28:53:c0:57:
         bf:e5:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----