Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File:                     Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier:          Ibm/2Baac6ufF+Q81h3eRVCjso9FDJHuyswmkzz6DsI=
Subject key identifier:   C0:0F:1E:27:32:7F:C6:8F:9F:89:BE:E6:AB:BB:D3:C4:9C:89:B2:5B
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer:       /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial:       01962E61ABD2CC2F113619F73BABC6373EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number:          0C0A
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: MGlcGpPaKV5svA7YfoNgTcFh1fX7LV/e8WkE6LHU4P4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:d2:cc:2f:11:36:19:f7:3b:ab:c6:37:3e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=c00f1e27327fc68f9f89bee6abbbd3c49c89b25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:e4:ec:a8:35:f4:14:3f:74:cd:18:44:89:
                    da:e5:48:4b:2f:0c:33:50:44:19:85:53:1a:b6:1d:
                    fe:6b:e4:01:46:bf:20:48:cc:44:52:41:72:cf:fd:
                    c9:0c:6b:e4:62:cd:2b:51:80:af:7a:52:7d:8b:af:
                    81:a3:23:4b:0e:8d:41:ba:4d:2e:18:f4:e3:11:77:
                    61:bd:a4:e3:e8:cb:b6:ae:b6:e8:71:0f:0a:70:ec:
                    13:54:89:eb:8d:04:da:59:eb:43:6c:a1:75:d4:68:
                    66:2a:1c:52:c8:d1:94:fe:d8:0b:8b:bc:fd:a8:f4:
                    96:23:03:2b:90:37:d9:00:61:ec:93:66:92:dc:c0:
                    bb:27:25:e3:b7:88:dc:4d:da:b6:59:0d:60:8c:46:
                    df:21:bb:4d:08:80:82:91:4a:21:52:3c:5b:1b:ae:
                    d9:1f:43:1c:20:2c:c0:49:1a:d2:5a:e0:e1:3d:7b:
                    40:63:08:4b:2c:2d:7d:25:2b:52:27:d5:99:ff:b0:
                    95:f9:a2:e4:8d:3b:f6:2b:bb:3d:f1:3f:0b:b7:2b:
                    2a:3c:8d:08:ea:7a:78:00:f0:8c:a3:63:c4:68:8e:
                    4b:4f:94:71:36:46:0d:84:04:1e:31:03:88:ce:05:
                    ca:6b:e7:d3:d7:f8:a9:97:89:38:6e:f7:6b:71:61:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:1E:27:32:7F:C6:8F:9F:89:BE:E6:AB:BB:D3:C4:9C:89:B2:5B
            X509v3 Authority Key Identifier:
                keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:59:8e:46:25:f8:38:7e:da:f7:de:04:17:24:3c:e3:0c:f3:
         ff:91:26:6b:4a:bd:fd:c3:5c:06:7a:e0:75:82:c8:68:6a:65:
         a1:bb:99:bd:70:8c:ca:bd:82:4c:61:6f:00:bc:88:2e:28:e2:
         37:88:61:bf:2a:fa:9d:b7:04:62:4a:f3:c9:99:81:b1:9c:b6:
         eb:b5:4e:83:f1:4b:7b:3e:37:73:89:3d:33:a1:c9:77:6b:ef:
         eb:ef:85:bf:1e:89:a4:4f:d7:af:93:55:ae:cf:18:e5:dc:c1:
         12:ec:d9:0b:42:25:bc:69:9a:7d:76:53:1a:ce:c5:0d:38:e2:
         22:0e:6c:fb:55:94:24:e6:30:e4:59:1f:38:95:74:23:69:87:
         c5:3d:e5:2d:7d:c9:91:38:38:d2:15:1d:6b:5f:ec:57:aa:31:
         d7:89:a2:0c:5f:20:f1:64:c4:01:fd:87:2f:57:f2:a0:eb:29:
         1e:5d:37:ca:f8:ca:a7:76:f0:f0:49:67:78:6a:70:f9:76:db:
         61:d5:fd:46:70:9f:40:3b:3e:7d:6f:e2:35:84:7e:5f:01:1c:
         f7:b6:87:1c:a3:66:60:33:1e:e0:2c:80:e3:48:cb:b4:d0:45:
         92:fa:8f:3e:d3:2e:cb:b4:48:93:7d:d1:40:5a:3c:cf:17:30:
         c1:78:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----