Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File:                     1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier:          W5fRfkLCEQhet+nImWY0HsDOs86FBLGOkmvctFVdWOE=
Subject key identifier:   96:44:CC:CC:52:EB:2E:65:25:DC:2A:E3:C0:44:80:F8:3F:A8:EB:39
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer:       /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial:       01962F063CAC671A343F984B611CD7E124A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number:          082C
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: 5Kt1z/tAuiBvnvFa4cB//m5mm4WorXRTstzdJAwN1OQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:ac:67:1a:34:3f:98:4b:61:1c:d7:e1:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=9644cccc52eb2e6525dc2ae3c04480f83fa8eb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:53:c4:ab:ff:85:b2:da:36:d1:fa:6a:ee:
                    76:cd:ae:01:60:e6:68:40:80:92:75:37:b9:9f:cf:
                    3e:95:be:c1:26:f7:40:ce:0f:f0:95:1e:37:b7:ea:
                    5a:f1:8d:a6:73:8f:ff:07:be:a3:65:e4:39:f1:c4:
                    73:7a:ed:86:39:fb:61:db:0d:29:b4:2a:66:32:36:
                    3f:17:b6:bb:8a:a8:38:7a:8b:00:43:02:d9:92:15:
                    6d:d5:a0:51:f7:2d:84:31:e1:e6:c3:25:c9:3f:57:
                    96:45:86:1d:8d:18:05:34:db:f9:a5:f0:72:12:da:
                    0d:95:69:d6:29:b1:dc:28:bb:82:53:51:5e:e7:8f:
                    eb:3c:ab:53:d2:1d:98:3b:8f:e1:e4:df:34:df:6b:
                    13:67:6f:a2:58:91:92:36:2f:85:79:ad:04:5a:29:
                    5c:bf:38:b8:02:c2:90:94:71:54:4c:09:68:c0:79:
                    d2:dc:55:e8:69:76:d6:ce:b2:b0:97:f7:33:51:8c:
                    ab:54:ed:a9:14:4e:af:0e:95:8f:07:8b:c0:a3:3c:
                    4c:24:c7:21:88:be:a6:ae:a7:24:b8:b3:41:89:c7:
                    98:66:a8:f0:11:f1:1b:ef:e4:68:d6:17:01:ff:76:
                    28:5d:84:b6:3e:3b:d1:56:54:7a:41:85:cb:32:e4:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:CC:CC:52:EB:2E:65:25:DC:2A:E3:C0:44:80:F8:3F:A8:EB:39
            X509v3 Authority Key Identifier:
                keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:88:cf:db:3c:cd:b5:aa:30:86:eb:02:de:72:cc:0b:f2:
         af:cb:c9:f2:3e:a7:b8:c8:82:d8:d8:ea:3a:89:91:7a:d2:f9:
         48:d8:a8:50:63:ad:72:04:d5:b7:3f:6c:d0:b0:11:a1:ab:3b:
         07:1d:d6:b6:06:25:33:2a:59:7e:7a:b7:57:62:0c:4b:bf:be:
         56:7a:74:49:5e:2b:f0:d7:70:06:1e:02:47:cc:66:0f:81:b3:
         be:ec:17:89:e5:e6:a9:04:34:c5:ca:27:a0:65:9a:22:97:4f:
         df:30:73:d2:3b:30:75:72:3a:0e:5d:d8:2b:84:77:de:11:38:
         49:04:d2:20:98:47:07:92:82:c5:37:0f:d6:ce:07:15:06:4b:
         93:39:a2:fa:c7:cb:17:8a:30:c2:1a:d3:61:ba:ac:72:a0:55:
         7b:c9:5a:4f:fd:fc:24:eb:92:99:02:62:e7:30:bf:95:cd:91:
         f8:2c:59:84:10:35:0e:1b:99:02:04:c1:b5:12:1d:a9:b0:2f:
         8a:45:37:a2:9c:14:1f:54:95:d9:03:c0:95:7e:da:9a:79:96:
         91:5b:3b:19:82:eb:9e:5e:20:f2:16:3d:78:f2:52:32:a0:29:
         bc:48:8b:a4:2b:fe:3c:41:a7:00:eb:50:e6:1c:ae:44:7c:0b:
         68:61:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----