Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
File:                     HRAqymzxNRE4UpTnfb4nN2jAoEs.mft (raw, json)
Hash identifier:          3JnWzzXJr90JkxfHf/tu+xXOSsk8l1rjU0acqm37W9E=
Subject key identifier:   79:17:11:19:86:7A:EB:7E:B8:27:CA:E3:B4:81:B5:09:C2:67:29:17
Authority key identifier: 1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
Certificate issuer:       /CN=1d102aca6cf13511385294e77dbe273768c0a04b
Certificate serial:       01962E98AD61EFC379FF1A19A2155728CAF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
Manifest number:          09C7
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: HRAqymzxNRE4UpTnfb4nN2jAoEs.crl (hash: 3NhNTWhKtYLcdXLOmSPCQ0TMwbgjb/IzOiMMCcTaqt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:61:ef:c3:79:ff:1a:19:a2:15:57:28:ca:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d102aca6cf13511385294e77dbe273768c0a04b
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=79171119867aeb7eb827cae3b481b509c2672917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:57:9a:ea:99:68:09:c1:10:46:87:6a:fd:
                    e3:a1:42:09:24:df:73:51:d9:e1:fb:c5:87:87:10:
                    ba:d6:3f:1b:6c:0a:0e:7a:35:d8:10:89:e0:8b:38:
                    57:cc:e1:19:47:3a:1d:99:bd:3f:7c:03:7c:a2:c4:
                    a0:e2:12:f0:5e:ab:72:72:63:01:cb:50:6a:1a:cb:
                    ff:29:b9:d5:30:a4:c8:19:f5:02:4c:c7:e8:ae:f0:
                    59:e9:48:19:b6:3c:c3:36:c4:a1:4f:01:10:f9:57:
                    0d:98:9e:e6:eb:de:59:4b:c7:4d:13:b7:15:ec:26:
                    9c:47:d6:b6:5e:3d:c6:26:09:d4:1a:98:ba:34:8c:
                    d7:d1:42:83:10:7f:ae:c5:98:b3:c4:14:42:ab:07:
                    54:cf:4e:c9:d3:34:aa:95:4c:35:c5:f4:42:26:b6:
                    5c:e1:ac:50:7e:9a:33:34:2e:b1:2c:5f:95:41:8c:
                    3a:af:34:d5:01:1d:6c:5f:5d:9b:9a:04:a4:37:8c:
                    2a:e3:77:59:94:94:d8:ec:33:7b:a9:78:5f:27:bb:
                    94:fc:3b:95:04:03:55:ad:67:35:88:c6:09:fb:d3:
                    16:82:c5:d1:af:83:e5:fd:13:c0:83:2f:90:37:f8:
                    8e:d0:bf:5f:f3:93:2d:ee:eb:f5:f7:83:2d:99:26:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:17:11:19:86:7A:EB:7E:B8:27:CA:E3:B4:81:B5:09:C2:67:29:17
            X509v3 Authority Key Identifier:
                keyid:1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:70:25:20:f3:da:01:4d:4d:5b:d4:96:d1:25:f3:3a:e8:89:
         c3:7a:47:1a:76:8e:d7:4a:75:17:f0:93:8b:bf:ae:21:b2:36:
         07:cb:9d:00:16:b5:39:86:d5:55:4f:a1:ec:24:10:c3:c5:4e:
         df:7c:92:91:9c:d2:6a:af:ab:4a:22:fa:7e:02:8e:ab:22:91:
         35:8d:df:f1:20:cb:50:da:5a:31:4f:6d:e7:78:37:42:93:da:
         fb:01:69:1b:62:c3:54:0b:98:83:c8:86:ed:4c:55:66:08:7c:
         a7:2e:7b:89:b8:a8:91:84:29:fe:2a:31:64:a4:bc:76:67:a1:
         29:05:66:bf:33:3e:10:3c:25:56:61:b7:11:53:e3:f6:9d:df:
         c4:ce:d3:37:41:c6:b5:89:a2:44:54:6c:da:b7:63:4c:71:11:
         a5:aa:fc:37:56:0d:0d:93:48:7c:45:80:49:24:7d:03:07:c6:
         c4:28:b7:48:60:28:48:f4:bd:35:c4:84:a3:31:d7:4b:72:ac:
         99:67:98:19:13:9e:08:b6:a0:26:53:b5:1d:bc:2c:c0:3a:71:
         2c:a5:8a:80:6f:df:72:72:8a:47:d7:62:74:64:fe:c7:fe:64:
         8b:6e:6e:85:8b:da:d2:06:62:19:cf:03:a4:87:9f:c1:fb:88:
         9a:1f:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----