Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File:                     HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier:          qKEjpuBxnNQQhyd/zINeMbfGesEs++eGUYX7My0Jjvk=
Subject key identifier:   DD:3D:B8:76:2B:A9:BE:0A:0D:85:B2:41:E9:58:AC:C2:15:BB:98:3F
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer:       /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial:       01962F069251D946164D31FDABBD8EB1FE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: zT+Vt4iODTYT330EjqOJdJsv/Mrr50pWmDlRfQj83fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:51:d9:46:16:4d:31:fd:ab:bd:8e:b1:fe:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=dd3db8762ba9be0a0d85b241e958acc215bb983f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:94:5d:65:0f:a9:04:a3:42:eb:ff:03:fa:
                    0b:eb:45:31:ef:1d:9a:76:26:29:46:a7:bd:13:75:
                    93:25:4d:a4:1b:7d:0e:ff:7e:24:3b:d2:f3:6a:dc:
                    c0:6a:43:f2:ba:2c:b3:a2:88:25:82:8b:89:ae:9d:
                    b5:18:37:26:50:be:98:5b:29:fb:6b:f3:8c:8f:b4:
                    75:9a:e5:1a:9c:1a:5e:c6:e6:50:b1:2e:84:e0:2b:
                    60:cc:8a:bf:6a:c6:c1:b8:2f:49:92:3a:60:02:7e:
                    93:27:e8:d8:53:a1:0b:2b:8a:c7:0c:34:64:63:8f:
                    d3:78:1f:e6:f8:ff:7e:69:80:c9:e9:8a:75:f5:06:
                    44:7d:67:8a:57:19:0d:f7:6e:ae:7b:b7:4e:ef:c1:
                    ad:fc:23:d5:78:fd:1e:b5:a6:3a:90:07:89:7b:82:
                    bd:39:86:c3:d4:1d:01:e8:47:e4:da:c7:bd:0c:b1:
                    e6:a2:64:7b:d9:a9:91:61:a5:f3:ba:04:36:44:a1:
                    05:21:b8:4d:ae:be:73:4f:f9:77:db:34:cb:8b:8b:
                    5e:fe:a3:60:9f:7b:4b:83:fb:03:22:ec:b3:e3:14:
                    0d:c5:25:44:9c:a4:63:f0:d7:ba:82:20:75:80:d3:
                    5b:ff:80:7e:b6:3b:9c:e7:27:fd:73:d3:f6:7e:cf:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3D:B8:76:2B:A9:BE:0A:0D:85:B2:41:E9:58:AC:C2:15:BB:98:3F
            X509v3 Authority Key Identifier:
                keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:4f:1d:f6:f1:93:c2:d2:57:f0:a5:10:36:c0:d8:1b:3f:
         72:d4:ed:15:ca:15:7f:5a:3b:89:a0:63:d6:94:ae:2f:a0:bf:
         2e:03:f1:9b:6e:a5:24:b9:a4:e8:8c:d0:e4:11:b8:5b:f3:54:
         56:33:56:b5:5b:c2:4d:a5:2a:35:1a:cb:69:34:1a:93:19:ba:
         75:28:7f:5d:33:39:d4:95:9b:b8:79:7f:c6:05:39:f3:73:8f:
         c0:c3:8e:35:51:77:03:02:a1:fd:37:39:bd:ba:49:d3:2b:e4:
         0f:22:86:00:02:f4:0b:e3:30:dd:ce:bf:98:43:d0:35:ea:00:
         c0:cc:1b:24:41:fa:ad:6a:b6:a1:bf:15:60:7a:52:b9:e6:b4:
         de:57:19:ae:0f:d8:d8:1f:aa:85:3f:fa:c0:d5:99:f5:2f:ea:
         51:5d:06:4f:ec:4d:54:9f:80:3f:31:50:36:f2:49:72:19:fc:
         c4:bd:be:6b:22:8d:dc:17:8e:42:db:15:1a:f3:12:d6:cb:4d:
         fc:4e:d3:6c:c0:79:d5:69:d7:1d:9a:4b:29:4a:19:f4:76:03:
         94:fd:1a:f1:1c:33:4d:fd:1d:c9:59:66:22:39:f6:3d:34:b4:
         16:73:e3:12:22:34:0a:ce:db:2f:a6:5c:67:d3:8f:a4:40:93:
         36:88:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----