Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
File:                     Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft (raw, json)
Hash identifier:          WP6x6IJJl1Un8J8au6i+x21dFvqJ0oHS1x1YsYM44dw=
Subject key identifier:   5C:40:41:79:10:13:1C:2A:E9:32:34:F2:C8:39:D1:31:0E:5D:8E:3D
Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
Certificate issuer:       /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Certificate serial:       01962F746DD2042000AAE5436DFBF3729A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
Manifest number:          08F9
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl (hash: m+JcsiWdOURR/8XZFX+LMjTMseEsDjjgzLrTa6vivYs=)
                          2: tylNMSSvS99Dcyy-HHi_PFuMqa4.roa (hash: ccMlffzxJqfYWwFrr0eYQi/P7Vh6cNEU7oOeSOxzYpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:d2:04:20:00:aa:e5:43:6d:fb:f3:72:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=5c40417910131c2ae93234f2c839d1310e5d8e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:ed:ae:e0:62:f7:97:56:5e:d8:ee:f1:41:
                    69:79:43:df:80:ae:ae:9a:24:dd:5e:5b:33:60:d0:
                    1c:70:38:e6:7e:ae:e0:8a:fa:64:6c:79:48:bd:8b:
                    91:47:2b:96:10:35:81:90:9d:fd:90:72:9c:29:a5:
                    16:52:f2:13:b2:3e:a6:6f:d7:01:6a:6a:bd:79:ff:
                    b3:7c:d0:8a:d4:f8:2d:87:ea:33:73:14:a0:23:24:
                    8f:20:55:91:ba:c8:66:2c:14:59:63:7e:50:8e:8c:
                    a5:e2:7d:da:59:3a:45:78:69:90:5b:c9:f0:0f:1e:
                    3d:33:be:5b:9b:fe:68:e2:92:73:c6:2e:0c:f2:24:
                    16:84:ad:e2:a3:88:52:88:a2:93:20:85:06:e5:00:
                    ef:c5:16:16:42:15:be:04:a1:61:b2:fa:c6:8f:56:
                    df:60:5c:c1:03:35:30:db:9c:ee:34:7a:31:0b:4e:
                    cb:de:03:b1:83:4f:2f:3a:31:0c:3b:02:a1:f8:b2:
                    62:17:00:9c:a3:e3:f4:f9:c6:de:8d:d6:14:32:c9:
                    f3:c3:91:c9:c9:60:ed:a7:0b:70:22:3c:74:74:c7:
                    c9:e9:5e:97:ab:e5:46:e3:d2:b1:ac:82:8c:37:c1:
                    f2:8c:c3:03:f8:28:00:3d:7c:57:22:be:74:06:76:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:40:41:79:10:13:1C:2A:E9:32:34:F2:C8:39:D1:31:0E:5D:8E:3D
            X509v3 Authority Key Identifier:
                keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:45:06:8f:8b:3e:5a:a2:da:e2:29:d6:f3:6d:8f:4b:1c:
         db:9d:96:27:09:b9:2d:ff:ff:ba:66:8a:d7:04:00:dd:e4:64:
         83:9c:a4:af:6e:2a:d3:b5:4a:95:88:bf:f8:dd:e3:f1:07:80:
         5c:86:23:40:05:f6:67:6b:13:8f:f5:ac:b2:d4:8b:78:70:31:
         be:bc:f4:0e:b2:6a:c8:6e:db:73:b6:54:7e:f3:02:81:4b:75:
         23:77:16:47:89:2d:1d:30:62:bf:eb:a0:48:51:70:a2:de:b0:
         28:d6:7a:53:69:08:d7:69:bf:d3:9f:75:9a:fe:42:be:5e:f5:
         d7:a0:d6:d2:ca:0e:1e:30:26:45:c7:81:e3:d0:86:f9:f7:80:
         89:20:75:4d:4e:fb:a7:c9:8c:59:27:18:6b:07:3e:b1:d5:ad:
         bb:15:ab:33:06:18:58:bb:ca:de:84:62:c0:33:4e:ab:2b:2c:
         51:9c:25:45:12:c1:a3:83:35:3a:b0:37:db:bb:0b:d8:e8:77:
         ac:ac:f0:18:d6:ff:5f:6c:68:26:8a:bb:9d:ee:be:0d:08:b4:
         68:42:75:61:b3:72:96:91:23:84:68:2c:75:5e:d0:32:77:8d:
         9f:22:36:d2:f5:1f:ef:1f:a1:ef:8a:9d:f6:e0:ba:3d:4e:ea:
         ca:56:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----