Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
File:                     HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft (raw, json)
Hash identifier:          R0qwJCGIBqZad3+s0MwWyK7oqFuwcsfC9/FUm/fWYBM=
Subject key identifier:   A2:1E:5A:BA:33:B3:2C:8B:25:00:98:33:46:37:3E:62:C8:7D:54:44
Authority key identifier: 1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
Certificate issuer:       /CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Certificate serial:       01962F74B700B37759F2A2E9DDC25D5D20D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
Manifest number:          052A
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl (hash: m4AvakqhQF1NNBtQO5uVl6Ne6xhM7wWOEVq7r3Ijia4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:00:b3:77:59:f2:a2:e9:dd:c2:5d:5d:20:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=a21e5aba33b32c8b2500983346373e62c87d5444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:bc:eb:54:bd:6b:ce:db:13:dc:8c:2b:39:
                    d6:f4:4a:1e:09:2d:2e:ab:36:26:d4:ea:b6:67:ef:
                    58:85:3a:67:e5:a2:37:0a:36:68:1c:f2:1d:17:73:
                    f4:03:4b:eb:8b:d1:18:51:10:82:4b:44:f1:80:60:
                    46:bb:be:75:32:4e:97:63:0a:62:33:f4:60:70:07:
                    13:c4:ba:66:6d:01:d2:39:89:4e:08:54:c8:3b:ac:
                    e5:19:ea:99:72:5e:09:0c:f9:9e:72:7d:10:60:eb:
                    ae:8e:4f:04:21:a5:29:da:b2:1a:46:5e:c6:e5:3b:
                    05:83:97:b7:48:ee:54:87:2d:4b:a7:23:5d:bc:d8:
                    19:f0:76:4c:97:6e:98:cb:8a:fe:b5:41:a4:b0:eb:
                    48:10:5b:a0:2c:01:a4:c0:51:63:60:b6:f7:30:3a:
                    ad:a1:ae:9d:c9:06:51:bd:fc:65:78:e3:37:45:d4:
                    1a:b2:01:96:d9:78:fc:76:d4:c7:d1:7c:7e:60:b1:
                    2e:3f:98:92:bd:43:b1:20:61:f1:01:d3:3e:04:a7:
                    e9:5e:f0:c7:42:7a:ed:67:70:dc:65:9a:1c:4b:cc:
                    04:47:12:25:78:ea:23:10:34:8a:ab:f8:ae:7b:c6:
                    28:65:b1:45:4f:c0:8f:98:da:d8:e9:af:c3:67:83:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1E:5A:BA:33:B3:2C:8B:25:00:98:33:46:37:3E:62:C8:7D:54:44
            X509v3 Authority Key Identifier:
                keyid:1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:2b:0e:e8:6c:84:c1:87:19:51:3c:e4:97:d6:d4:1a:5e:
         57:13:f8:83:f3:2a:48:60:e7:84:1a:50:65:31:f0:05:60:6b:
         53:b6:c7:79:b7:d3:72:07:19:d6:8f:d0:10:21:ce:c5:e2:7d:
         d9:b6:d3:e0:a8:1e:92:3f:f7:6f:05:a2:30:96:4f:d8:e1:1d:
         28:26:d8:ae:2c:d4:dd:30:de:e5:08:6f:6a:4f:4c:86:01:aa:
         56:54:8b:d9:33:82:16:37:02:61:56:ad:93:39:f8:e2:12:71:
         1c:4c:c6:2f:bb:67:7d:07:88:9c:a4:be:f3:8e:3c:4c:05:4a:
         5e:e5:89:fa:fb:c9:2b:ad:6c:66:4b:f2:fe:4d:14:02:b3:f0:
         5c:8c:a3:b2:ed:a0:81:bc:0a:57:27:86:ae:ba:1d:d4:a6:e0:
         3c:ea:35:8d:59:1b:6c:41:b8:46:8c:71:4e:1d:bb:21:2a:46:
         25:5e:f7:74:cc:e7:69:1f:01:c6:bb:45:af:4a:ef:67:35:81:
         10:f8:96:96:58:12:f7:d6:c7:a8:3c:5a:e4:b2:74:62:b1:d1:
         64:e8:e2:06:33:d4:20:cc:f8:69:3f:eb:6e:a6:18:18:ab:aa:
         c9:d1:d7:40:3c:63:8a:92:21:0c:1c:40:04:3c:c1:e8:82:1b:
         ae:72:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----