Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File:                     hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier:          suv+iB2Ix0wh+4260BmqL0JPjRfndUQmRcJJ5JUF+I4=
Subject key identifier:   86:14:85:06:85:9E:33:AE:1E:1A:59:25:A9:5C:70:8A:B4:D5:AB:2C
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer:       /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial:       01962E988FEC9C833D05AC9B31F322EE770E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number:          111C
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: h3HXQlBq0ax5JOKjQ1eidqd7OJB/MZGfQqXUHtPDXFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8f:ec:9c:83:3d:05:ac:9b:31:f3:22:ee:77:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=86148506859e33ae1e1a5925a95c708ab4d5ab2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:a4:1b:06:de:a0:c8:08:73:8b:71:92:86:
                    14:9e:fa:25:63:f1:a5:13:31:e7:81:d9:a7:b7:99:
                    cf:a6:56:c5:99:c8:fb:19:bf:e5:16:60:80:e4:d5:
                    cf:ca:af:d4:22:fa:95:e3:59:d4:d7:f6:40:e4:40:
                    92:cd:49:a7:0f:e5:5f:a9:8a:87:55:0a:c7:a3:3b:
                    78:d7:54:3e:9d:ad:04:5e:53:ad:1a:43:af:7d:d4:
                    6b:1f:a9:3d:fe:0d:94:c4:a8:cb:96:57:6a:63:cc:
                    1a:fd:3c:ad:ff:65:be:25:b0:b2:51:1a:96:41:6d:
                    c8:f3:59:e5:f7:0f:23:b3:87:41:51:ab:27:58:f3:
                    43:57:5d:4e:18:e6:06:5f:2f:c1:dd:5e:cb:bd:51:
                    0b:41:ed:3e:f4:24:ff:30:c8:ac:22:2e:1a:f3:56:
                    96:3a:be:a6:3b:65:86:c1:fe:31:9c:aa:79:e3:f8:
                    a2:9d:20:ed:e8:8b:dd:29:28:17:b5:71:98:4f:53:
                    f6:36:f9:fd:1e:a1:a5:e0:94:c1:fc:04:8b:2f:c3:
                    60:c9:38:e9:a5:66:45:e6:0d:13:91:ca:99:a6:ef:
                    09:b5:1c:c9:52:a4:48:ba:68:b6:ba:a8:b5:2c:26:
                    69:fb:ed:c9:b3:0e:69:8f:83:3f:a6:bc:b0:9c:c3:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:14:85:06:85:9E:33:AE:1E:1A:59:25:A9:5C:70:8A:B4:D5:AB:2C
            X509v3 Authority Key Identifier:
                keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:73:1c:d4:fc:b0:c6:f0:af:25:54:5f:37:4f:b9:d8:66:
         ad:56:e4:22:21:d0:cd:97:92:28:95:f9:5a:54:d6:6f:59:14:
         66:52:66:20:68:e8:31:0d:04:d7:c5:31:82:03:73:d8:54:e3:
         15:56:50:7b:67:2c:ab:f7:d9:27:7a:45:09:12:cc:83:be:a8:
         4c:5d:33:d6:96:5a:cd:f1:2d:f7:51:36:77:1b:2e:55:f2:6b:
         b9:4d:d6:69:fc:e2:6a:bb:be:66:ca:9f:6d:3a:f5:6c:97:9e:
         39:b8:14:7b:91:56:69:51:66:66:b6:49:30:5d:7f:6b:4a:8b:
         f3:11:28:8f:a3:f4:2c:b6:f6:61:92:cd:bc:07:f7:96:0c:91:
         3e:eb:91:55:6a:f0:8e:b0:63:17:89:17:05:e5:a5:b6:69:6c:
         d1:56:d2:9a:a3:69:9c:f9:4d:7e:06:77:41:c3:aa:fe:09:48:
         bb:95:d2:23:d5:e7:b9:f3:6c:6c:7d:28:b2:72:86:d2:8d:da:
         94:b8:7d:f3:60:d9:97:4c:28:c5:6e:b3:a7:b3:47:d0:ef:8f:
         74:f2:05:fd:87:ae:dd:2c:70:cb:04:df:d7:8b:d8:e6:68:00:
         a6:8d:83:d7:69:f1:54:d4:7e:bc:59:e1:81:cd:ea:d1:3d:b8:
         85:8b:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----