Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
File:                     HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json)
Hash identifier:          JDMLMapKydHO4weD/22PMxExqdyZuG9ZhTRgnUWIveM=
Subject key identifier:   33:E4:1B:47:62:6F:9D:23:A0:63:C2:40:45:61:CB:F5:AA:90:7D:E9
Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Certificate issuer:       /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Certificate serial:       01962F06CD3DC77DFDDB25C71C03FA3CBA54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
Manifest number:          09D1
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: +WRTaHbwRoB3KhFbdURteVJRvbUhHWxYlgk2z0ztSBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:3d:c7:7d:fd:db:25:c7:1c:03:fa:3c:ba:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=33e41b47626f9d23a063c2404561cbf5aa907de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:5f:d8:69:af:c9:a1:9b:90:0f:97:16:93:
                    7c:02:87:4c:dc:b7:f2:97:38:55:da:32:af:eb:0c:
                    3f:76:45:01:8f:76:ad:15:d1:82:02:f6:e7:c5:ec:
                    14:84:c7:a0:d3:6b:93:dc:f5:8e:bd:d3:c6:8a:79:
                    37:ad:85:18:4b:97:90:94:ce:d5:d2:b2:e3:a6:fb:
                    14:8f:f8:6c:99:b4:9f:21:82:e6:41:4b:ff:23:54:
                    e4:e8:8f:2b:f1:d6:cf:16:6c:e0:0c:68:06:c0:0d:
                    f3:65:66:af:56:28:07:ed:a3:39:a1:a7:9b:be:94:
                    ab:3c:85:16:82:4e:06:c6:82:33:fe:1d:43:f1:2c:
                    af:fa:97:b9:e2:c7:96:9d:b2:a5:e2:84:32:51:a6:
                    20:30:05:b4:72:4f:b3:b2:64:cb:3f:99:39:42:ab:
                    39:69:a9:62:6f:37:2a:bd:78:25:74:88:10:88:95:
                    b9:50:a9:13:24:8b:c2:4d:b2:48:ca:e7:22:b0:3c:
                    63:99:f0:83:4f:aa:a9:ff:b9:bc:af:07:a8:5b:2d:
                    cf:92:58:87:3d:b9:86:19:68:20:b4:55:88:85:da:
                    cb:27:17:43:3c:85:3b:19:30:a2:80:11:7b:05:3f:
                    37:17:f4:29:8d:5b:40:67:99:24:a4:32:84:bb:6c:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:1B:47:62:6F:9D:23:A0:63:C2:40:45:61:CB:F5:AA:90:7D:E9
            X509v3 Authority Key Identifier:
                keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:18:cf:4e:4a:5e:63:47:a9:f6:11:0a:14:f2:68:77:15:c9:
         04:83:d3:f9:3f:3a:37:6e:a3:b6:ec:6a:36:a0:15:28:79:0a:
         67:7b:77:37:0b:ea:82:f9:8a:4c:ad:cf:a1:c0:79:20:51:34:
         40:86:73:ad:da:21:b8:f6:a9:fe:ff:15:45:66:e4:c9:1c:86:
         67:15:02:02:0c:5f:db:a4:e9:93:31:70:ff:21:61:46:0c:28:
         99:59:d5:1f:95:cd:f2:8e:a4:9e:51:96:77:f3:9f:67:a1:09:
         37:4d:4d:8f:e4:89:6b:09:c6:3c:3e:22:a9:b3:23:46:29:4e:
         a8:b7:f5:f1:65:c7:79:ff:7d:60:73:36:2f:03:50:cd:08:64:
         d4:fc:0e:e2:b4:97:ab:69:4c:98:48:d2:46:ef:c1:48:42:20:
         7f:cf:f0:1c:3e:56:b9:d3:5b:43:c7:cf:b1:9e:f0:76:52:a9:
         a5:3f:10:ce:b6:4d:9a:e0:b6:8d:d4:f8:1c:d8:cd:27:6f:cf:
         27:42:9f:54:12:65:87:ac:52:be:4a:6a:26:66:59:73:47:8a:
         c1:f0:6e:48:12:bd:f7:01:42:ab:cd:0d:85:f4:6d:29:05:88:
         ca:ad:68:12:e0:ea:01:35:6a:1f:8b:47:2e:32:3d:61:42:5c:
         c1:76:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----