Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
File:                     Hekyc87VkolMnTVRSLsfrMEPcqI.mft (raw, json)
Hash identifier:          lYDHJDZA5YGxzYfjIrR3qiktYHUClwyUMH+cQrKtDg8=
Subject key identifier:   90:5D:E5:FA:53:66:1B:B9:7D:50:9E:89:4E:8B:09:11:75:7F:07:E3
Authority key identifier: 1D:E9:32:73:CE:D5:92:89:4C:9D:35:51:48:BB:1F:AC:C1:0F:72:A2
Certificate issuer:       /CN=1de93273ced592894c9d355148bb1facc10f72a2
Certificate serial:       01962E98E0AF5AE96C3D624840E7FAED728C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
Manifest number:          10CC
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: Hekyc87VkolMnTVRSLsfrMEPcqI.crl (hash: TPljU+f/1JHszUK69xamUkletSPsFMXPvRPD2kPyUhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e0:af:5a:e9:6c:3d:62:48:40:e7:fa:ed:72:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de93273ced592894c9d355148bb1facc10f72a2
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=905de5fa53661bb97d509e894e8b0911757f07e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:e2:5a:b7:e0:61:4c:3a:27:27:62:f2:1a:
                    4d:eb:7b:33:10:31:bf:9a:13:8c:4e:e8:5c:bb:41:
                    63:c6:99:0d:c4:dc:4c:fd:21:1e:cc:c6:b9:9f:3f:
                    0e:09:4a:76:14:b6:53:a3:60:8d:cf:eb:7e:eb:72:
                    3d:58:22:31:34:d8:1d:fb:e6:f5:af:cc:2a:4b:30:
                    20:e2:37:02:84:50:d3:4d:a5:39:ac:9c:6a:41:7a:
                    06:dc:bd:6d:a0:62:1b:fe:7d:a2:fc:bd:3d:4d:a5:
                    9d:25:0f:6a:49:d9:20:8c:cd:5c:aa:a9:09:88:47:
                    7e:33:f0:e3:08:43:d3:a0:85:25:08:47:1a:21:d4:
                    c9:19:e8:d7:1d:77:35:ea:1f:06:18:c5:0d:15:07:
                    c6:20:c9:01:de:c2:d0:33:78:b6:95:32:f1:aa:5f:
                    01:d3:f2:23:07:8f:c3:e4:e0:54:8e:3f:ec:54:83:
                    e3:fa:bc:e3:e0:24:00:5f:3b:26:27:c4:c7:ba:f1:
                    57:ca:df:7f:14:8a:36:19:b2:6c:61:35:49:b0:dc:
                    88:50:2d:80:8e:b0:90:8f:fd:d5:ed:ef:53:b5:91:
                    6b:fe:23:f0:7e:3c:7f:12:2c:ea:e8:44:3e:af:5f:
                    c2:74:73:00:02:4a:ad:d1:cb:d8:eb:35:fc:aa:b1:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:E5:FA:53:66:1B:B9:7D:50:9E:89:4E:8B:09:11:75:7F:07:E3
            X509v3 Authority Key Identifier:
                keyid:1D:E9:32:73:CE:D5:92:89:4C:9D:35:51:48:BB:1F:AC:C1:0F:72:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:98:6a:53:17:fe:81:79:a4:dd:cc:38:b7:aa:c4:c2:93:04:
         77:79:2f:80:c0:f6:a1:c2:9e:a7:9f:50:f5:00:f9:ec:d8:e8:
         ff:9f:21:6a:a1:1e:d9:0b:35:a1:56:ca:d4:36:64:fa:2d:10:
         f5:d0:a6:9a:63:53:6f:9c:e0:72:b8:e5:bc:4f:1b:d6:a7:bf:
         c1:ac:a7:55:a9:4f:61:e5:8e:fc:e4:cb:be:79:b0:68:d9:9c:
         e5:09:5d:fc:74:ea:b4:10:b3:bc:f8:f7:61:d8:82:94:0b:2b:
         ed:fc:2f:47:6d:26:35:c3:e5:04:03:63:af:bd:74:f7:57:4b:
         0c:71:5f:71:28:5d:8d:b9:17:95:b2:8d:54:3c:46:ce:a2:89:
         ae:3e:03:d3:3e:65:1a:56:4c:34:92:52:1d:bd:fa:18:f5:b3:
         45:1d:ca:15:89:5e:d6:f4:aa:77:2e:be:75:a6:2c:ef:79:5a:
         a6:45:22:da:13:d7:c1:17:e1:99:ef:a2:b1:77:9c:ee:84:fb:
         9e:af:92:04:69:2d:ff:72:63:50:95:94:f1:e3:11:89:b0:ec:
         fb:5d:92:26:4f:40:6b:ba:a1:95:4d:0a:55:ce:bb:0d:57:08:
         c4:bb:5b:d8:fa:bf:90:ee:e5:96:1d:4f:a0:f1:62:c0:c0:fa:
         07:6d:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----