Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.mft
File:                     HdGoMITMB7cxuvkdqvMTbC9rddM.mft (raw, json)
Hash identifier:          VkElEs1GzLL4BHrxAMs5AOvLUihjLxZ4746ATZuNHxc=
Subject key identifier:   47:91:D1:77:12:5E:7A:47:7C:1B:B0:73:24:89:98:CB:27:35:E0:6F
Authority key identifier: 1D:D1:A8:30:84:CC:07:B7:31:BA:F9:1D:AA:F3:13:6C:2F:6B:75:D3
Certificate issuer:       /CN=1dd1a83084cc07b731baf91daaf3136c2f6b75d3
Certificate serial:       01962E98AE5DFD1DA678922207875CF1B9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdGoMITMB7cxuvkdqvMTbC9rddM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.mft
Manifest number:          10B7
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: HdGoMITMB7cxuvkdqvMTbC9rddM.crl (hash: LLDdWOOZubSxpit6wlWjrUUQWhVYbMUcxc3BcvlE8CQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:5d:fd:1d:a6:78:92:22:07:87:5c:f1:b9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd1a83084cc07b731baf91daaf3136c2f6b75d3
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=4791d177125e7a477c1bb073248998cb2735e06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:6e:3c:24:ac:56:36:56:3f:28:28:d2:45:
                    21:17:21:97:b1:ec:e5:ef:89:f3:e4:16:ab:d4:29:
                    06:1f:0f:1f:48:aa:84:ad:c3:c4:03:b8:06:c0:15:
                    a9:b6:63:27:f3:2f:88:6c:4d:8c:45:c2:1f:b9:f3:
                    fa:8e:b6:2d:0b:a1:56:79:35:d5:d0:64:93:0c:ea:
                    e8:17:cf:c3:42:1b:ab:be:4f:9a:67:0c:a3:ae:f8:
                    e0:d1:a3:5e:96:37:23:7e:20:fe:7f:0c:cc:bf:48:
                    b1:b4:e3:c4:5b:52:8e:10:63:b5:4c:4f:b8:66:ee:
                    e7:02:f8:13:7c:0c:94:6d:2d:91:75:79:cd:66:1a:
                    49:71:61:47:db:78:44:ad:03:33:d6:48:17:c5:7f:
                    79:ff:3e:d1:cb:c1:6e:bd:75:ce:30:79:d4:fa:cd:
                    58:30:84:11:4c:65:24:47:82:cd:15:50:a7:cb:67:
                    02:58:12:58:e0:35:60:25:62:d7:fd:82:5f:50:68:
                    aa:94:f6:44:c9:48:7c:3b:2a:2e:b7:9b:ab:ff:be:
                    b9:64:db:36:89:98:f8:14:71:3b:0f:4f:62:13:e0:
                    51:03:35:96:a9:08:0b:1d:bf:c5:39:a0:89:17:8d:
                    e7:99:f4:9e:00:77:57:20:cc:e0:63:29:23:bb:e5:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:D1:77:12:5E:7A:47:7C:1B:B0:73:24:89:98:CB:27:35:E0:6F
            X509v3 Authority Key Identifier:
                keyid:1D:D1:A8:30:84:CC:07:B7:31:BA:F9:1D:AA:F3:13:6C:2F:6B:75:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdGoMITMB7cxuvkdqvMTbC9rddM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:e7:90:fa:94:59:55:f1:55:df:d6:f6:d1:8b:2c:7a:ea:
         ab:11:a4:35:f5:03:ed:f3:b6:75:8a:a2:ac:bd:3c:6e:a1:ed:
         5f:ec:7e:33:72:83:c9:39:37:e9:68:4f:b9:54:59:b1:ae:03:
         6d:07:6e:13:40:4f:b3:3f:09:44:50:d6:fb:b9:e8:60:f8:36:
         a5:24:a9:ce:fc:29:99:4b:61:ce:99:0e:74:82:3b:3f:98:20:
         bf:23:be:5f:8a:ac:02:f0:fb:ef:3e:6c:fd:92:84:0a:e5:5d:
         b0:e5:d7:44:df:49:de:b7:ab:a8:96:71:5b:af:3f:25:3b:53:
         df:3a:42:45:99:8a:11:21:38:8c:26:47:d4:18:ed:c6:04:49:
         8f:f6:a4:6f:ef:9e:9f:f1:91:e5:10:a0:5a:2a:fe:ed:f6:45:
         61:2c:e0:20:f6:6f:2f:7e:68:d8:d9:eb:f2:87:05:d4:e2:6e:
         e8:97:9e:5e:76:a7:40:c5:e3:01:98:56:04:62:b5:5d:8a:0d:
         18:87:2e:50:4b:a9:6b:de:88:a5:4d:07:c4:a6:1f:de:9f:66:
         81:ee:4c:2c:37:a0:67:92:57:6e:b6:49:d1:95:8f:67:9e:7e:
         e8:c1:dc:80:38:ea:e1:5c:50:d4:08:fe:d2:28:a0:a4:b1:b3:
         62:92:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----