Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File:                     HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier:          lDd97OegUT+0hUx6Z2VZ8QDQq29u8u5rPZblj8g70tw=
Subject key identifier:   02:75:FD:D7:D4:20:CF:A4:A4:6F:22:02:73:D0:42:7C:A9:F3:3C:85
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer:       /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial:       01962E988C6FEADDF2B09B5097DB3347E89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number:          0B7D
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: vPX4bG52YDYKI1LIG1Pkuq0//KL/9JH2yDFei9NccZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:6f:ea:dd:f2:b0:9b:50:97:db:33:47:e8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=0275fdd7d420cfa4a46f220273d0427ca9f33c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:dd:f4:33:8d:5e:1d:ac:c6:4b:da:c6:0e:
                    12:6f:ef:2e:d0:0f:fa:d9:16:8f:76:0a:08:ee:7b:
                    f3:6d:77:3c:38:5d:d1:01:44:0c:b7:aa:14:3a:24:
                    23:2f:a1:50:d1:bf:0a:6a:97:56:68:1f:3a:c4:d1:
                    4b:c4:51:65:ba:c9:43:bb:1f:ba:35:ea:2f:9d:17:
                    e0:ad:38:98:78:6b:48:84:54:10:e5:dd:8d:11:a3:
                    57:9b:95:d2:e1:bf:8e:6b:f8:e4:61:22:51:d5:65:
                    ce:06:30:52:b0:9e:04:e6:a8:2d:ce:ca:be:72:f6:
                    f5:47:27:76:65:de:b2:51:66:b8:26:bf:a3:64:2b:
                    7b:56:5c:b0:a1:62:99:16:ee:24:4e:ea:b9:6b:8d:
                    24:05:69:c8:4a:b0:b5:a5:ee:f6:07:09:a0:f3:bc:
                    dc:3b:57:72:23:a5:ba:3c:48:1c:df:d4:14:16:4d:
                    0b:b7:1e:42:3b:29:d0:38:29:81:44:60:03:fd:0d:
                    e8:10:89:d3:f8:65:f3:77:41:22:ba:a7:00:ce:0f:
                    ce:c0:0b:d7:9c:f3:6a:36:8d:d1:26:ad:ac:3b:85:
                    ef:8e:1e:1b:fe:2f:31:2a:01:03:89:9c:62:f9:36:
                    89:50:8c:5f:9a:70:6a:14:a7:88:10:46:a0:72:c1:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:75:FD:D7:D4:20:CF:A4:A4:6F:22:02:73:D0:42:7C:A9:F3:3C:85
            X509v3 Authority Key Identifier:
                keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:43:72:40:05:68:f1:84:72:82:47:40:c7:99:6e:df:ca:
         7f:cd:a7:b7:fd:ff:98:4f:08:34:d9:13:6c:d7:01:e8:57:0c:
         5e:c9:ed:bc:47:4f:96:02:8b:c6:02:d5:31:c6:62:4f:41:e3:
         82:5e:15:1a:3f:0b:b0:05:98:b1:8e:56:fe:f9:df:5d:c8:9a:
         b8:67:75:64:d6:b7:3f:84:c1:9f:fb:b6:45:09:2c:f5:f7:96:
         cf:cb:5d:ed:29:81:a2:3c:2a:33:18:80:a0:61:85:a7:2f:d1:
         4d:25:65:28:5d:64:5e:91:ce:b8:f3:4a:af:2c:44:2a:92:27:
         48:12:b0:d8:d4:3e:c6:72:0e:02:ea:a7:3d:38:99:40:48:f9:
         06:e5:ba:bb:d8:83:55:c1:b8:ba:e0:03:2e:1d:12:f7:9f:a6:
         b9:c6:1d:aa:a0:91:af:6b:45:61:77:68:80:12:97:80:70:eb:
         07:6a:c5:58:8a:10:e2:a5:ea:12:26:47:56:ac:8e:af:33:7a:
         b5:cb:c5:8c:29:cf:1f:76:9d:a2:1b:bb:ab:e8:71:88:87:6d:
         d1:d0:89:71:64:50:5c:5c:c2:08:ec:75:a5:32:54:1f:b4:d6:
         f6:70:ca:80:67:bb:0e:87:1d:b7:fe:df:fb:e5:23:d7:57:2a:
         38:8a:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----