Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File:                     HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier:          YJkVOJMwoZiJCQXFyEjPskj35+VRFY4EzEGV59QaR2E=
Subject key identifier:   9E:07:49:91:F7:4B:CA:32:25:39:E8:CD:C7:73:F8:95:F8:6E:72:A9
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer:       /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial:       01962DF3A883348D615B7C24928070688418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: eZNi8XyA+cQBQSBrdnbLLPYk4A8ohMbtJ29uZNPM2S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:83:34:8d:61:5b:7c:24:92:80:70:68:84:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=9e074991f74bca322539e8cdc773f895f86e72a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:82:6f:c9:3c:4b:f1:15:14:71:95:5e:e1:97:
                    bb:96:71:e0:6d:fc:91:e9:3a:8d:6e:0c:b6:61:99:
                    72:37:b3:7f:ff:45:98:d6:cc:15:40:9d:c7:e5:69:
                    5a:7e:9f:63:5a:13:48:9e:b6:b4:8f:54:90:4c:3a:
                    d1:14:e6:8e:1a:73:a5:c3:6c:cd:fc:d0:12:c0:a6:
                    19:ea:86:2d:4a:fe:ca:f0:31:b1:1e:87:54:b1:a6:
                    4e:8a:b9:05:68:ea:88:90:cc:7a:72:ff:70:69:66:
                    38:7c:68:c5:f3:28:f6:ff:49:60:b4:d2:7d:fc:ef:
                    5a:c5:c0:93:9a:9e:46:df:53:8b:7b:12:f8:c1:4c:
                    66:bd:ee:95:8f:4f:c3:57:1b:f9:13:5d:0c:c6:2d:
                    bf:b9:9f:4b:10:b2:f2:a8:a6:ee:7d:d0:da:b0:25:
                    61:e0:f4:e5:c7:7a:bd:b2:43:fb:60:f9:d2:e2:52:
                    85:17:4a:31:1b:ba:02:1e:a5:de:c9:35:95:0e:07:
                    33:a6:c8:e6:b1:b4:6f:98:36:08:8e:a1:1b:35:f5:
                    5e:a0:a4:d2:71:fd:d7:40:a3:35:be:ce:ab:29:43:
                    df:95:b0:07:5b:07:8b:23:8e:7a:7f:60:16:e5:c7:
                    3b:96:45:69:68:45:2c:31:36:c9:ff:f3:c3:b6:d8:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:07:49:91:F7:4B:CA:32:25:39:E8:CD:C7:73:F8:95:F8:6E:72:A9
            X509v3 Authority Key Identifier:
                keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:4f:8b:54:02:05:b7:b3:9b:e9:8f:20:7d:c5:cb:fe:9b:
         3f:71:45:29:6a:c0:ee:bc:88:3c:ee:c7:8e:b7:df:8a:87:94:
         fb:c4:5b:ce:f9:8e:49:75:7b:ce:80:54:a9:58:da:3d:23:3d:
         f5:4c:af:24:28:0d:d1:6b:f9:2d:32:10:6c:f1:07:72:ef:ad:
         1c:bc:d2:39:31:68:1d:89:0e:35:3e:93:2e:da:32:dd:e9:8c:
         46:4f:08:41:1d:83:c2:ca:e6:7e:81:a1:11:89:3b:82:bd:ec:
         03:d0:87:3a:09:8e:80:9a:ff:fb:4b:be:05:f8:cf:8f:34:bc:
         30:da:45:7e:8a:f0:83:bb:98:57:ea:82:72:ae:81:13:86:7a:
         72:67:a0:96:f2:3f:5e:3f:f3:30:2e:a7:b1:ae:17:75:7d:b4:
         53:42:ef:01:5f:04:0e:7b:0b:cd:83:c7:ed:36:74:f0:fd:d9:
         9b:a5:53:2a:04:9e:48:cb:f0:5f:6d:2b:87:b8:5e:9f:73:68:
         87:03:fd:43:00:fe:7b:1d:ae:f7:1b:9b:7c:bd:49:e6:75:ef:
         6a:2b:35:f8:92:d2:5c:2e:f0:66:27:bf:95:cf:1c:b4:10:a8:
         9b:a1:33:b8:be:2e:28:58:2d:5d:2b:7b:78:07:f9:ec:1d:7c:
         66:e5:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----