Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File:                     1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier:          goO9sNGGLyX+BElE3PLRqjC7bh5PRcQeiu0pG+NXpuA=
Subject key identifier:   F0:50:D0:AB:02:59:10:84:7D:CC:4E:F9:16:5F:1D:E4:B2:9A:28:59
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer:       /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial:       01962E2AE423E315BE26087DC06684990AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: 9D0qH1ebK86Ahz2XmiNvQOceQFJ/wvVY063wdHo8Oy0=)
                          2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e4:23:e3:15:be:26:08:7d:c0:66:84:99:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=f050d0ab025910847dcc4ef9165f1de4b29a2859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:a3:fd:31:35:d2:12:a9:33:89:c1:1f:e2:
                    66:39:aa:7f:89:1f:e5:a9:70:1a:c6:cc:b3:31:fd:
                    23:a5:25:b3:aa:1c:bf:f4:ea:c3:1b:2b:78:5d:d1:
                    e0:1b:c8:c5:22:34:79:dd:72:b6:61:7b:4c:18:f3:
                    78:45:a9:31:a7:fa:31:51:af:99:fe:32:75:96:d6:
                    d8:b6:8b:e2:e1:db:ac:52:ff:95:d4:95:2f:01:98:
                    8d:01:94:63:56:28:9c:0a:65:7b:0e:3a:75:e9:66:
                    4a:82:98:cc:3b:0d:bd:44:02:a4:a1:97:02:11:e5:
                    32:e5:87:72:f4:d3:ec:f2:55:44:5d:6b:3a:34:57:
                    ed:63:1d:4e:89:fc:c3:a3:06:5c:fc:5f:9c:ef:17:
                    59:39:6b:37:9e:90:19:29:ff:ac:d2:e3:11:37:2c:
                    a8:db:c0:76:63:ad:35:cf:7c:47:a0:20:7a:23:c4:
                    00:02:b5:d7:7e:f7:31:76:eb:ad:4f:39:ee:9c:b0:
                    b4:a3:93:d4:1d:7c:6f:82:6a:ef:4c:a5:32:69:d1:
                    8b:b9:a6:b6:80:f1:d4:2e:73:3c:24:9d:8f:3a:fd:
                    3e:60:39:2d:04:8e:9f:ba:41:c1:85:8c:8f:13:ec:
                    d2:4e:4f:a5:87:4f:77:01:ff:3d:3a:7a:ff:19:d3:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:D0:AB:02:59:10:84:7D:CC:4E:F9:16:5F:1D:E4:B2:9A:28:59
            X509v3 Authority Key Identifier:
                keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:16:c0:65:2f:c9:47:d2:98:ef:cd:f3:4a:0a:2f:f2:af:b9:
         63:83:40:1e:e4:71:d2:16:48:31:79:97:74:8d:87:ca:ea:ac:
         ef:a8:9c:aa:67:c1:25:ee:33:e3:66:8b:14:b0:10:67:e9:8b:
         5e:60:c3:85:09:fd:85:a9:a8:c5:89:44:e6:27:51:06:67:b9:
         89:41:dc:45:35:7e:2b:0b:36:dd:0d:5c:8c:f5:d2:42:de:f2:
         52:ee:3b:f7:6c:7a:a4:ab:ad:a9:99:08:4d:80:a3:cb:fb:06:
         4f:78:4a:a3:05:e2:5b:f6:e9:ba:6e:20:6b:c2:c0:a7:8c:67:
         1d:88:d2:e5:a9:2c:a3:70:da:04:17:a5:19:fd:80:ec:f1:85:
         dc:fc:0a:a5:e4:81:61:6a:06:3d:ff:2d:2f:33:6a:0a:a9:f4:
         c2:f5:e3:cf:21:2a:1c:90:a3:0b:50:25:54:dd:be:6d:eb:63:
         1c:9e:3d:36:8b:98:47:2d:08:d1:61:32:d6:51:1c:2b:fb:b3:
         1b:33:5d:a0:58:b6:af:0f:0d:ed:a9:b3:33:c7:c2:2a:87:3d:
         08:82:6b:8e:47:6f:b7:78:1c:24:c1:a4:e1:15:be:3a:0a:f4:
         75:f5:ca:e3:d3:c5:8e:4d:82:ab:dc:84:6d:b2:2d:72:c7:dd:
         d4:40:43:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----