Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
File:                     hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft (raw, json)
Hash identifier:          Q2IYcTYGN/xypV8RVGqO3uxG+MyeYXm7n/sPpxmbRD8=
Subject key identifier:   DD:A4:40:38:1B:72:3E:32:6E:DC:8F:44:61:39:FC:93:F9:FC:DA:7A
Authority key identifier: 86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
Certificate issuer:       /CN=8649aa4b328735536d27c168cdbf4ea177701dce
Certificate serial:       01962DF3FD291A7E42B5DAFAC68ADA557D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl (hash: 37N2X1jopbWYrTStPlL89va4tysG6nwAo5NrlveOzEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fd:29:1a:7e:42:b5:da:fa:c6:8a:da:55:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8649aa4b328735536d27c168cdbf4ea177701dce
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=dda440381b723e326edc8f446139fc93f9fcda7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:7d:e2:b2:23:9b:7d:61:87:48:4c:d7:fc:
                    68:2c:8e:98:c3:a6:b1:aa:f4:e4:ed:9f:38:bd:a0:
                    d0:7f:fb:d3:91:b1:37:6a:d8:c2:d8:58:cd:ff:6f:
                    d6:e3:ec:fb:12:df:ea:d6:2f:ca:e8:35:65:13:00:
                    e1:65:a8:f9:8f:d2:82:77:95:56:35:f8:f6:b0:16:
                    0d:a5:19:09:9e:c7:f9:ce:07:c6:69:2c:46:09:eb:
                    3d:c4:7b:0e:db:27:01:70:38:71:0a:4a:70:25:2d:
                    c4:ed:2a:65:6a:6d:ac:ea:1c:ca:ad:b0:08:2a:be:
                    60:f1:cf:d8:f0:91:59:bc:fe:96:08:e3:d2:a5:1e:
                    35:9a:7d:af:9d:45:0a:52:d7:b6:f2:66:b6:52:fd:
                    c7:50:e3:59:c0:bb:5d:64:c3:20:7a:f5:56:28:74:
                    e5:8d:3c:30:88:37:26:0e:da:c8:56:a0:4b:7c:7c:
                    fa:50:dd:5d:21:a8:22:dd:11:ac:b5:d0:a3:31:63:
                    d0:cc:8e:74:82:54:1d:bd:02:fb:a0:f9:de:67:c5:
                    fd:f1:34:e6:86:ad:0b:ff:90:ef:54:9e:cd:46:e2:
                    85:79:51:01:02:42:62:23:37:df:eb:a7:6d:a3:d0:
                    f3:29:cd:cf:df:81:0d:ad:aa:0d:40:11:38:17:3f:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A4:40:38:1B:72:3E:32:6E:DC:8F:44:61:39:FC:93:F9:FC:DA:7A
            X509v3 Authority Key Identifier:
                keyid:86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:ca:fa:1f:09:7b:6a:48:27:a6:7d:49:28:6e:5f:67:34:
         ca:6f:1e:c7:b0:db:42:26:61:60:86:c2:52:a1:d9:2b:d5:33:
         4e:27:99:43:ae:54:b1:19:b7:2f:6a:78:cd:d4:ff:08:b1:d6:
         93:93:6f:6d:29:01:85:19:95:45:fc:75:64:fa:22:4d:c4:84:
         cd:bf:5a:49:32:e5:12:18:a9:54:d0:7e:e2:0c:ac:3c:86:cf:
         17:3c:d9:d7:89:b7:ab:45:ce:f8:46:d8:24:e3:c0:63:79:f7:
         80:e3:17:fe:47:4b:8e:fc:be:e3:0b:38:fa:19:e4:81:cf:71:
         7e:82:90:90:be:07:9c:fc:9b:73:62:75:55:f3:72:35:de:e2:
         d6:c0:41:fd:9c:55:4f:90:1f:57:79:f9:de:11:a3:d3:df:6d:
         41:35:7f:98:a7:2a:75:f7:7f:3c:b9:e9:36:9b:e6:8d:20:66:
         f7:91:88:b7:41:c0:69:bc:5c:79:6c:3a:8d:51:c1:19:7f:05:
         13:64:fe:dd:44:c5:f6:66:12:fb:2d:9d:8d:e9:84:ec:79:b1:
         90:14:38:d6:4f:87:89:f1:f2:23:90:ef:37:40:84:38:67:aa:
         7b:da:0c:97:f4:03:18:da:1a:95:1f:51:70:52:4d:c5:40:20:
         9a:4e:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----