Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File:                     HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier:          XjqAOvTikK1qhakhn7sXcuXMDJV2RXcUaxhXk8FSJ4Y=
Subject key identifier:   08:B2:CB:54:12:12:AF:C8:BF:AC:20:7F:5B:FD:A5:A7:EB:DD:46:2B
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer:       /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial:       01962E2AB941550A8D3EE2307908C8B5FCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number:          0B92
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: DGj5+irnqF7eQuQbMboLJt6kjHaD7kjfQK0DPKzBcjo=)
                          2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:41:55:0a:8d:3e:e2:30:79:08:c8:b5:fc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=08b2cb541212afc8bfac207f5bfda5a7ebdd462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:32:c9:fc:6f:d9:f3:22:88:e9:9d:82:68:
                    66:e4:94:d4:6f:b1:65:c4:da:7f:51:cd:41:e9:85:
                    5c:a3:27:50:88:2e:3a:7e:6a:c2:5d:dc:c0:8e:0a:
                    46:29:74:c0:a5:28:90:30:ee:a4:cd:d2:87:7f:bd:
                    73:eb:ee:ec:28:de:44:94:66:71:aa:3c:4e:98:f8:
                    f6:b4:09:f6:8e:d2:93:a3:6a:a4:bf:35:e6:f3:9b:
                    2b:f3:0d:32:a8:69:10:e2:38:d1:9d:5d:cf:5a:e0:
                    62:72:d9:46:38:6f:46:63:fc:dc:84:ca:45:0f:bd:
                    8d:b4:48:51:a2:6f:e6:79:9c:b3:51:f5:f7:15:01:
                    8e:a1:c1:39:04:99:e0:f2:0d:b6:08:5f:2d:94:3c:
                    59:f5:e0:58:44:94:81:fb:29:14:ac:7b:e4:0e:80:
                    b9:57:5b:97:ea:64:9f:2a:94:9f:72:37:e6:30:47:
                    45:ae:18:85:e6:c0:e1:b4:b6:9f:96:f4:22:85:51:
                    30:32:04:30:45:56:b4:40:73:2e:bc:35:a8:53:96:
                    d3:08:c5:64:a4:a0:c1:d8:6a:9e:e4:07:86:0c:e3:
                    4b:0d:f2:4b:0f:85:67:d4:9c:22:eb:0b:01:b1:06:
                    c7:35:bf:5c:d7:db:a5:06:9c:7d:d2:a2:78:bc:c5:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B2:CB:54:12:12:AF:C8:BF:AC:20:7F:5B:FD:A5:A7:EB:DD:46:2B
            X509v3 Authority Key Identifier:
                keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:6f:6d:b9:46:95:8a:db:3b:9c:ae:f2:c6:db:7b:45:83:
         34:be:57:47:88:34:7b:a4:1e:20:95:f0:03:87:15:2c:5c:86:
         90:90:2c:74:2d:09:fc:b4:b9:7a:57:4f:ea:b0:cf:01:94:b5:
         6c:27:10:75:2a:3d:42:25:ac:bc:33:8d:e3:40:5c:15:e9:e5:
         26:56:cb:bb:b8:d8:97:76:e5:17:c4:57:9a:c4:58:e0:16:ce:
         54:43:27:c5:2e:5d:d8:37:7e:59:00:da:10:59:54:9a:18:c6:
         e6:2f:a5:b0:c9:66:cf:5b:02:af:fd:d4:bb:31:20:8f:06:f0:
         3e:92:68:56:11:d0:60:fc:4a:57:ea:ad:32:e3:5a:1a:b5:5e:
         18:a5:36:ac:0b:13:fb:c2:9d:e5:2d:3e:2d:a5:ff:50:91:d6:
         c9:8a:6c:c4:76:98:66:c9:b4:90:60:4a:0d:d7:35:ec:02:01:
         8a:cd:07:d2:28:08:b3:0b:0c:48:69:a0:bd:a2:37:7d:a3:23:
         0f:0b:2d:5d:ed:fd:21:67:65:8e:ce:6d:ba:96:a8:7c:d9:0e:
         07:9b:ff:bc:50:9b:81:5b:d3:91:8e:4d:0b:36:77:59:8b:28:
         c6:65:4a:a1:df:f8:1e:98:ca:d3:a5:3f:9d:40:54:f1:95:52:
         d9:7b:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----