Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File:                     hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier:          v1rKiGpAuYFm9+biKlj6YLsAM8TNArCwNn6emY25zwU=
Subject key identifier:   59:DC:FD:C0:BA:46:C1:85:3F:41:9D:D6:7C:80:C6:33:06:44:46:38
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer:       /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial:       01962E61875E18AA1FFA4AE8672E4EE9D4D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number:          08DA
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: VwD+WKn2/e0Y0v+nwqWnmmYOcpJDvcAMxlwQYs3XFl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:5e:18:aa:1f:fa:4a:e8:67:2e:4e:e9:d4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=59dcfdc0ba46c1853f419dd67c80c63306444638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:fa:d8:aa:46:f6:f9:31:5f:d2:5d:d7:36:
                    71:db:6e:d5:cf:d9:8c:e0:08:0d:8d:32:81:b3:19:
                    75:a2:48:32:47:6d:7f:16:cb:99:fe:85:54:f3:7b:
                    50:6b:5a:23:89:8b:17:88:1c:85:f9:af:ef:b2:1e:
                    9f:44:bf:8c:b9:ce:31:8e:50:4c:d6:1d:f3:fa:5c:
                    5c:16:a1:a4:96:9b:49:46:d8:67:c5:69:57:22:63:
                    9f:15:0b:b8:16:94:64:84:dd:68:06:38:28:07:27:
                    cb:7f:33:eb:82:1b:49:ed:6a:26:54:09:0b:c3:66:
                    66:e1:b6:75:a6:ae:93:9c:b7:42:c4:ef:f7:38:2f:
                    fd:ce:b9:b3:d2:5f:d7:5c:71:25:0f:32:90:43:e9:
                    95:a4:a4:a8:bb:8c:a2:e6:3c:c2:25:52:88:85:9d:
                    27:2d:e8:d6:ae:f4:a0:aa:db:d1:cd:0f:7a:7c:92:
                    8e:72:e2:a7:1b:38:f6:bc:1d:6d:90:7b:58:93:be:
                    b2:23:66:47:b7:f1:a8:0a:24:ee:5f:fe:e5:7c:8e:
                    d1:ea:e2:6e:fc:19:f8:91:1f:57:f7:b0:b8:58:14:
                    af:7e:57:36:8e:e0:8f:e7:e1:7c:5c:ef:5c:e1:29:
                    18:6c:8c:39:d3:c8:41:88:5f:7d:1f:9b:8c:e1:1a:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DC:FD:C0:BA:46:C1:85:3F:41:9D:D6:7C:80:C6:33:06:44:46:38
            X509v3 Authority Key Identifier:
                keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:30:ed:fc:90:7e:e0:be:9c:db:cc:5a:69:b8:1b:f4:e8:
         02:6c:70:8b:d2:45:7a:67:7d:86:38:20:af:af:99:57:28:8e:
         e3:8c:33:6f:e4:19:ed:c4:52:6c:1c:78:a2:a4:fd:32:8a:cb:
         ac:fc:33:05:c9:cc:a9:17:f4:e0:0d:a8:a5:58:5c:36:1d:ef:
         7e:aa:df:92:3f:3c:0b:ea:f4:62:90:3d:dc:14:e0:ed:01:b0:
         a5:3a:5a:a5:e8:65:47:96:16:a9:ac:83:36:d2:5d:bf:59:38:
         4c:12:9e:a9:36:70:3e:fc:60:5d:1d:94:48:f3:4e:47:54:e4:
         66:89:c2:bc:7f:dc:bf:78:bf:7b:b6:25:1f:08:42:8f:21:ba:
         00:84:8b:4a:02:d0:e2:a0:2a:27:b3:b6:07:7f:ff:21:7b:6d:
         0b:cb:7d:f7:d6:18:5f:70:74:6e:b7:fa:87:68:95:28:e8:d8:
         ba:bf:18:08:3f:b0:1b:26:e7:40:e9:92:58:8c:8b:f0:92:e0:
         4b:51:c3:c7:61:e7:5f:c8:0c:f0:7e:15:32:96:c1:6b:88:d8:
         86:f6:ed:e7:b9:ee:35:9a:26:61:01:2e:cd:ac:81:72:f4:e8:
         66:dc:3e:88:66:8d:77:15:96:23:b0:59:17:b9:ef:6f:55:85:
         b5:ce:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----