Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
File:                     hlonCgsIptsPlMdDV96OSC1944Y.mft (raw, json)
Hash identifier:          92+jwJ7AYjkFIZzn1ehXPDDlxeod/hgZ2AD0Ji1LLSA=
Subject key identifier:   71:25:D8:C0:F9:6B:1C:DB:53:BC:04:D0:93:7C:7C:FB:58:BD:87:AA
Authority key identifier: 86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86
Certificate issuer:       /CN=865a270a0b08a6db0f94c74357de8e482d7de386
Certificate serial:       01962F3D8DEAEA85195AB80B445EF5EF7ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
Manifest number:          06BC
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: hlonCgsIptsPlMdDV96OSC1944Y.crl (hash: BQ5S8Hgjqtaa/jhbHy6n0VcgAxYep4DZUni75zpnTGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8d:ea:ea:85:19:5a:b8:0b:44:5e:f5:ef:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865a270a0b08a6db0f94c74357de8e482d7de386
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=7125d8c0f96b1cdb53bc04d0937c7cfb58bd87aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:ec:1b:ae:c1:ea:73:cb:ea:da:ca:00:c7:
                    1e:ef:cf:19:6d:5e:53:78:28:c1:81:e0:09:ba:a9:
                    49:2f:0a:8d:e6:46:92:4b:86:ca:ee:37:ea:d8:5a:
                    94:32:45:08:78:68:ba:93:51:fb:34:95:c3:11:08:
                    2e:23:f8:b7:d2:e2:24:e5:70:e7:87:20:86:62:32:
                    fe:2f:6f:a7:e8:4c:cf:54:19:53:47:dc:56:8c:5c:
                    71:2a:58:20:6e:d6:4a:b1:1d:f0:44:fe:d1:24:12:
                    0d:3b:98:55:05:6b:36:84:bc:74:5f:f6:79:6d:7f:
                    67:11:08:4e:bb:3b:23:c2:41:5b:d9:40:ae:26:24:
                    02:4f:3e:bb:d3:78:36:e2:75:8d:72:14:1c:d1:62:
                    de:3d:3b:86:33:d2:ff:83:a9:80:46:0a:59:3e:08:
                    05:dc:45:e5:8a:6d:a1:bc:8e:0e:cf:3b:44:66:85:
                    a0:16:f2:70:22:80:52:b3:f3:71:72:54:48:06:d8:
                    2b:86:bd:03:99:0e:44:a5:56:37:ff:8f:21:7f:60:
                    93:b2:c9:18:ce:46:80:eb:2c:cd:32:63:33:f2:98:
                    b7:71:55:26:6c:26:41:f1:3d:98:45:6d:21:8b:8f:
                    1d:a0:d4:88:f5:5a:93:bd:f0:5b:9b:26:cc:d0:9e:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:25:D8:C0:F9:6B:1C:DB:53:BC:04:D0:93:7C:7C:FB:58:BD:87:AA
            X509v3 Authority Key Identifier:
                keyid:86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:43:ab:6c:e6:02:9d:68:14:ea:88:dd:28:4e:6a:ad:bf:
         f1:8f:73:5c:41:d2:07:49:42:c0:3b:25:05:92:a8:53:64:45:
         1a:66:b3:32:81:b5:d7:8e:10:cc:da:76:01:90:24:f4:9e:31:
         27:f8:ed:e8:17:19:42:19:8e:87:53:3c:85:9a:db:51:ce:2c:
         5f:2e:cb:b0:c0:e6:17:ac:72:02:64:2f:49:2c:28:a2:0a:13:
         ed:55:56:01:a8:e7:be:58:df:a1:27:2a:87:9f:39:4d:0c:b6:
         6d:c5:a6:18:3e:c7:53:d7:c5:e3:73:49:de:45:66:e2:a9:eb:
         15:45:26:2c:98:ab:48:fa:4e:fc:d5:48:e3:64:e6:25:5b:90:
         d5:61:0a:e5:b4:65:99:d7:c6:48:1b:33:30:c6:82:f0:35:30:
         80:7b:c9:cd:de:b4:90:22:1d:a1:c8:8c:4c:c7:4b:36:5f:c3:
         56:75:81:a2:a4:23:df:77:2c:d0:23:b2:c4:f8:11:53:51:91:
         0f:92:e8:64:bf:b4:66:78:58:1f:47:d0:4f:ea:f8:d7:bf:23:
         a0:f7:80:f9:53:44:ab:05:16:9a:49:e0:c3:a4:1f:79:ba:88:
         6a:e7:e1:fb:55:8d:b4:77:2e:3b:e2:48:9c:18:dc:16:ac:d4:
         ac:24:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----