Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
File:                     HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft (raw, json)
Hash identifier:          fcmSmZJCcwhoo1RgxVMxSxJv9WtONYUdT8p+cwMMNbs=
Subject key identifier:   B6:9F:84:50:15:DE:0D:A1:7F:02:AD:C5:CE:FA:24:76:6B:1C:A3:42
Authority key identifier: 1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50
Certificate issuer:       /CN=1c5353a86abd33b1a236e407ce469261d0636150
Certificate serial:       01962F74A3EFB923CCAF62B19CBF24DF0D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
Manifest number:          076F
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl (hash: qU7Vrnud7OIhhn+RED/5Tv1bEuySsQnRweG4OQi6VGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:ef:b9:23:cc:af:62:b1:9c:bf:24:df:0d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5353a86abd33b1a236e407ce469261d0636150
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=b69f845015de0da17f02adc5cefa24766b1ca342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:ee:ae:49:33:8d:1d:f0:a2:84:83:04:de:
                    3a:57:29:fc:c2:de:a7:6a:1d:1a:da:a1:6c:43:ed:
                    dc:40:4a:51:f2:ab:24:e8:0b:19:de:f4:46:b4:b5:
                    9d:e0:8a:79:1d:b9:5c:f2:aa:07:05:45:61:fc:f9:
                    53:a6:0f:2c:5a:13:7d:f7:b0:87:d6:bb:9c:5a:14:
                    a1:2c:c8:f6:a4:07:89:ee:cf:8c:ea:f8:8d:d3:1d:
                    8e:c2:ef:dd:c5:e1:15:7c:b3:65:73:52:5c:62:df:
                    7c:e1:93:ef:b3:11:1c:d8:20:aa:ed:44:07:73:3b:
                    95:39:00:ae:ec:93:d1:47:1e:a2:70:e6:04:7d:44:
                    40:78:6d:b3:f1:8a:54:4d:ba:8c:57:6b:64:c7:ff:
                    d1:1c:34:9e:df:b5:21:84:2c:e2:da:ff:02:56:ec:
                    be:26:25:67:4f:59:84:e7:a2:32:2e:80:f0:d4:20:
                    5b:78:1f:0c:37:d6:bb:3c:fb:14:5b:89:8d:bb:20:
                    9d:a5:9a:f5:72:1b:a1:de:84:7a:7b:a2:e4:66:85:
                    8b:d0:82:7f:00:9f:ef:0c:1c:be:dd:b8:fc:62:0f:
                    69:fb:0a:d9:4a:1a:91:16:6f:93:cc:c1:ef:9c:af:
                    76:e6:21:7c:63:df:aa:b8:a2:a4:ff:04:d6:21:73:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:84:50:15:DE:0D:A1:7F:02:AD:C5:CE:FA:24:76:6B:1C:A3:42
            X509v3 Authority Key Identifier:
                keyid:1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:59:17:d1:6f:c1:77:12:4a:52:63:7a:2f:82:71:66:0e:36:
         71:6a:f5:15:22:61:e3:ee:a9:b5:9e:a0:cb:b0:11:15:c5:6c:
         40:16:2f:7a:c9:51:04:27:52:5d:2e:20:9b:34:1e:b9:5a:cb:
         77:c1:b7:4c:8a:98:2c:32:3b:ac:89:f7:aa:ea:d0:cc:31:c7:
         49:4f:83:51:f1:c3:8a:bd:22:21:d3:e7:0a:ff:c7:0b:52:03:
         16:13:79:58:1f:8e:f6:9a:00:9e:ed:39:24:30:64:5d:fb:ce:
         82:bb:1d:95:96:7f:83:f9:52:ac:9d:43:8a:6a:2b:78:b0:66:
         98:37:32:86:c1:30:71:f7:0d:fc:bb:03:1d:b9:4f:e0:bc:8a:
         a1:68:82:3c:7c:ce:bb:59:21:8e:35:9b:2d:b7:14:af:44:84:
         21:af:d1:09:cb:19:39:c2:11:5f:7e:bd:17:be:0b:cc:88:39:
         5c:fb:e5:e5:83:52:f8:8f:62:12:67:2f:fe:ea:f0:7b:f1:38:
         29:f8:cf:e7:a3:b4:79:a5:89:31:c2:e5:dc:04:7a:bf:b3:22:
         0c:fe:a3:57:39:84:af:24:0f:3e:92:94:47:ca:57:b0:22:44:
         51:cb:31:60:24:16:e2:29:00:77:84:f8:d9:43:12:3b:0d:71:
         9e:3d:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----