Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File:                     Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier:          Afg1/IjlVQLxIe4FnC6Y7c0AxqvS3AoUHD8R0uDyQ9I=
Subject key identifier:   2B:34:4D:41:5F:B0:31:4D:22:86:9E:AF:A1:E6:2C:17:0F:5E:A2:7C
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer:       /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial:       01962E98DEDAEFA89BFF71D9D3A64E0460C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number:          0AEF
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: AafJi2Tk/8jcptvLt+/+jWdfPG52TRNznCzJU3M+Vlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:de:da:ef:a8:9b:ff:71:d9:d3:a6:4e:04:60:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=2b344d415fb0314d22869eafa1e62c170f5ea27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:51:dc:f7:03:c0:e8:fd:bd:9c:2f:64:00:
                    05:c9:57:c8:37:bb:a9:6b:e2:a2:8e:5b:ca:e5:df:
                    16:0f:74:c9:fd:39:e8:c4:94:52:4c:d8:24:3a:49:
                    88:26:e8:5b:4e:98:bb:3a:19:59:a4:91:f5:96:2c:
                    bd:a9:df:15:52:0b:63:b9:ab:45:46:b9:a3:fb:bf:
                    0a:24:17:35:59:d1:44:f3:b1:1e:53:39:fd:a6:16:
                    d4:0f:02:1e:9d:42:82:38:07:ac:e6:b5:46:76:1b:
                    24:c0:cc:a7:88:1e:da:18:c5:57:82:ed:8d:7d:a3:
                    5f:30:af:8b:85:c4:b0:a6:c1:43:76:5c:20:6a:20:
                    98:f1:f6:9e:f0:3b:73:4d:3b:69:40:31:aa:e9:61:
                    ed:70:d8:af:ac:7f:6f:87:50:60:24:91:3a:bb:79:
                    58:77:c7:6c:b9:61:cc:7b:eb:77:7e:52:dd:8b:7f:
                    01:18:90:cb:88:74:12:e4:39:5b:94:76:b1:20:bf:
                    80:6c:c3:7f:30:2d:7a:fb:06:c5:df:af:fd:3c:07:
                    58:34:52:37:b4:74:0a:55:a1:2c:ce:2b:b1:a0:d6:
                    ce:fe:91:49:2a:1d:61:54:b8:f2:ac:0e:16:5c:7d:
                    b0:1e:aa:11:d0:10:cd:5b:65:c8:1f:ad:b3:04:9b:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:4D:41:5F:B0:31:4D:22:86:9E:AF:A1:E6:2C:17:0F:5E:A2:7C
            X509v3 Authority Key Identifier:
                keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:b8:fb:7b:7e:19:6d:d7:47:3a:de:b7:35:27:ee:02:e0:
         74:6c:ae:93:0f:b9:90:45:41:95:f1:8b:96:87:4f:92:b0:b4:
         35:23:9a:48:27:20:e6:c4:0a:29:8d:99:40:53:51:b1:31:af:
         7b:1b:8f:a8:cf:99:c0:59:a5:83:46:3c:3c:0c:eb:fb:3c:d3:
         6b:38:46:0a:cf:bb:37:bf:a8:58:c0:35:08:b6:8c:c5:27:59:
         99:0c:ca:d7:60:6a:6d:35:30:d0:5d:27:02:79:a5:01:ef:b1:
         b3:0e:09:ec:2c:39:4d:7d:f4:03:ee:87:ba:d3:4e:f9:09:c4:
         19:32:10:fd:86:a0:ae:0b:28:22:ad:5b:49:4e:4a:a1:09:f4:
         f5:21:59:1a:30:b0:ad:da:74:9a:9f:80:65:98:63:07:40:60:
         a2:55:c3:a6:70:69:35:75:d7:cd:0a:fd:44:6e:4b:88:c7:dc:
         d9:6f:0c:24:a1:39:f7:c8:db:e3:ff:a4:1e:fd:32:93:e4:cb:
         3e:86:05:9a:b1:9f:f4:5c:cb:84:60:1c:a4:51:ff:6b:16:b8:
         c6:21:ac:d8:81:f6:af:f8:71:0d:a1:23:40:6a:41:a8:7c:8a:
         2c:88:22:14:1c:11:c3:b0:b1:1b:63:45:c5:9b:25:2a:cb:06:
         80:71:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----