Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
File:                     hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft (raw, json)
Hash identifier:          FKIwMc5aKTN/OR4sbuSb4k5RRtMX+i+6JKyBpZVWeVc=
Subject key identifier:   5F:AA:94:F1:33:4E:EE:54:7A:A7:04:7C:3D:BA:4E:81:3A:D0:1E:C3
Authority key identifier: 84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
Certificate issuer:       /CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Certificate serial:       01962E98B198719118CC31B8C2ED35A5D615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
Manifest number:          07CF
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl (hash: ZhMrSvEHlfz2kwHsIkrG5B+KubKFFTAED8pRe6k0nUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:98:71:91:18:cc:31:b8:c2:ed:35:a5:d6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=5faa94f1334eee547aa7047c3dba4e813ad01ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:12:e5:83:56:98:ab:68:ab:83:0e:01:a6:
                    04:97:9b:6e:11:8c:69:9f:2c:db:51:2b:02:12:85:
                    db:91:25:2d:7b:ff:bd:84:88:04:a4:9b:c3:fd:e2:
                    40:39:98:68:65:e5:4c:b8:d2:19:28:de:53:b9:bf:
                    e3:80:cb:f6:17:86:77:43:52:b9:aa:b0:2e:dd:17:
                    41:a2:95:29:53:3d:1e:48:4d:86:53:1b:98:c7:48:
                    5a:41:5c:b4:74:e4:1e:7d:26:d3:4b:06:6f:9c:90:
                    10:8c:71:1f:5c:f8:c2:dd:bd:e4:92:77:96:3a:fd:
                    b4:de:48:93:df:f6:14:20:a8:3b:58:48:c3:84:12:
                    63:f0:53:0a:a8:b0:d4:69:9b:12:fc:c6:d3:92:cf:
                    a3:f9:54:2a:68:cc:2a:23:b6:21:8c:b7:66:e6:0e:
                    3b:a1:b1:dc:51:ab:2b:b3:27:85:b2:68:e6:dc:3e:
                    bb:a6:d8:7d:c2:a6:ad:5a:c1:78:0a:52:29:9c:a5:
                    2b:96:b7:c2:c6:9e:89:55:5c:26:0c:3d:a7:0e:30:
                    d8:86:85:ff:b1:d6:fd:d8:9e:e0:98:a9:fe:69:6d:
                    5e:85:5e:f4:1a:05:0a:9d:1e:ba:80:c8:d6:06:b6:
                    c9:d3:49:57:21:01:4e:25:fb:20:64:36:24:5b:54:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AA:94:F1:33:4E:EE:54:7A:A7:04:7C:3D:BA:4E:81:3A:D0:1E:C3
            X509v3 Authority Key Identifier:
                keyid:84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:54:52:20:5c:1a:40:06:22:ba:bc:1a:04:54:d5:09:c5:79:
         fb:d0:93:f7:0c:1d:52:c1:6b:41:7c:47:67:02:8b:37:a4:f2:
         22:a0:b1:b6:31:eb:86:4d:33:e5:9a:44:67:5a:b3:c7:b6:d1:
         c9:fb:fd:a2:02:6d:7b:35:fc:38:20:cf:78:a4:db:28:49:43:
         c1:b0:03:83:9f:4e:f4:32:48:65:7e:22:41:6e:e9:c5:f0:c1:
         51:58:08:88:d7:84:5a:6e:db:af:1f:ee:f7:6f:31:75:2b:5b:
         cc:67:a6:57:17:ba:10:b9:59:66:9c:52:b3:6d:3c:0b:bb:89:
         2b:e1:63:93:d7:4c:29:13:c8:c8:d8:be:a3:63:31:7b:61:83:
         55:59:c7:97:7b:42:f6:b1:89:de:48:8d:90:46:46:94:fe:62:
         50:05:3d:ac:42:07:2d:2a:70:33:e0:0f:77:d8:05:95:8d:b6:
         b0:d3:08:ee:3e:5f:59:31:c1:cb:be:c2:ce:5e:82:60:76:28:
         4c:bd:80:d5:96:f9:d2:87:fb:92:3a:f2:0d:e2:c3:a5:6d:a0:
         97:80:6d:93:96:18:0c:bc:4c:c3:8a:a7:90:96:51:1f:b5:e8:
         e2:f6:7f:61:6f:9d:2d:6e:3b:94:3e:99:ec:43:cc:44:20:44:
         ad:ae:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----