Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
File:                     3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft (raw, json)
Hash identifier:          e3TrEg1wfOZMOCEyZzLE2u1+7YGy7DTDsx1Vi2CkpTw=
Subject key identifier:   78:9E:C7:CA:8D:15:DE:54:8A:1A:D8:1A:4B:FB:46:28:B3:F3:8B:74
Authority key identifier: DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
Certificate issuer:       /CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Certificate serial:       01962E9977956AC7293A73930AA9E6EC0184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
Manifest number:          0BDC
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl (hash: /fzwMhjxaGg0dlfWYYX2RkMT+5A1m4bur9dnQ8cwKFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:95:6a:c7:29:3a:73:93:0a:a9:e6:ec:01:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=789ec7ca8d15de548a1ad81a4bfb4628b3f38b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:58:6e:a8:d5:23:4c:43:5b:00:dc:58:8e:
                    14:d0:6b:73:a2:09:3c:ef:be:04:59:db:51:6a:5c:
                    ba:8c:8d:bf:22:8c:e4:ef:48:f3:87:f1:e8:e6:e4:
                    79:6d:e0:2b:eb:de:69:7c:f3:f3:c1:d5:e4:61:f5:
                    d3:dd:54:d0:08:e7:35:eb:9f:04:95:bd:15:63:82:
                    a8:7c:7c:ba:ea:b2:79:57:ec:18:09:4c:5b:02:7e:
                    7a:1c:47:83:46:9f:7e:56:69:c7:22:7c:bf:f4:27:
                    01:34:33:5f:ed:bb:09:a9:18:18:4f:68:dd:38:3e:
                    54:a8:2f:85:ec:2c:d0:f7:be:fa:c9:74:04:50:fb:
                    ea:bf:eb:42:38:b9:4e:72:03:fd:c6:a1:ea:77:02:
                    d3:c9:e1:17:f6:ac:4c:e8:40:18:ca:91:ab:da:db:
                    81:e6:c0:48:c6:4f:21:4d:ac:c0:c3:a1:d6:74:60:
                    de:6c:70:f8:8c:67:f3:19:19:fd:dc:0b:c0:c2:c4:
                    f2:bd:6d:0c:da:b9:af:7f:8d:40:9e:3b:10:d8:74:
                    31:b2:78:12:e3:93:39:95:0e:6c:0b:0b:5d:8f:03:
                    d2:d1:a0:70:8e:6d:9c:4a:ff:bf:83:61:68:cc:f4:
                    4d:59:58:36:f3:60:fd:83:77:b4:7e:3f:e8:29:33:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:C7:CA:8D:15:DE:54:8A:1A:D8:1A:4B:FB:46:28:B3:F3:8B:74
            X509v3 Authority Key Identifier:
                keyid:DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:a6:e9:32:eb:54:b8:ad:18:63:43:01:4c:39:b0:96:3c:
         00:c9:8c:2b:9e:2f:1c:ef:2c:b9:4d:10:8a:ee:93:0b:e7:e1:
         6d:ea:11:a4:8d:60:05:d7:26:98:a7:fd:ec:3d:01:3e:3e:0d:
         c6:0f:7d:f1:16:d8:af:e1:d1:13:3e:27:a3:e3:48:06:69:21:
         77:1f:37:60:cd:80:e6:05:49:3e:ea:dd:a9:ff:50:9a:57:16:
         5c:1b:56:23:10:fd:22:95:e8:20:f5:10:56:1f:03:b1:52:bd:
         53:6f:8a:e5:0e:6c:ee:b8:fb:73:6c:73:db:b1:76:81:a3:1f:
         41:5b:3d:5d:a3:1c:a7:d0:31:8c:23:21:91:ee:f7:57:18:5c:
         fb:1e:d4:9b:32:21:20:03:aa:ad:4a:27:2b:2c:24:21:a2:b4:
         2b:34:03:34:07:b8:bb:e9:3a:79:04:88:f0:70:0e:e3:af:a4:
         24:dd:ad:d6:3a:79:47:10:82:71:cb:a1:38:c4:76:ec:1e:62:
         c4:27:b0:ce:b6:51:dd:f6:28:fe:29:7d:62:9f:14:b3:e7:75:
         f9:3b:94:06:f3:34:86:bc:44:82:cd:d0:ac:9e:cd:73:f5:69:
         a5:fc:ef:4e:78:cb:b9:06:2c:e9:cd:d7:39:8f:19:55:45:c9:
         78:0c:1c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----