Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File:                     HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier:          yOE2NZuIIIaCWxnvfQZ+deEMQ7qcJ4AhPZ9xhymMfxo=
Subject key identifier:   F5:44:EE:F0:2D:03:E5:D1:AC:F9:89:A4:3D:19:6C:02:97:91:30:19
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer:       /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial:       01962ECF916A25D2CC20C3FD3E600EB8260D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number:          1097
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: iMooPKW9nVNVO97ssKBSwMbZ9aeOGZSTTaxRMW6V0iE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:91:6a:25:d2:cc:20:c3:fd:3e:60:0e:b8:26:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=f544eef02d03e5d1acf989a43d196c0297913019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:6e:51:27:85:06:a2:23:a8:11:48:35:8e:
                    df:ca:e2:2b:bd:fc:de:ee:52:55:e1:ee:7d:89:96:
                    f6:3c:18:8e:b4:cc:28:95:1a:97:2b:d8:0a:26:52:
                    58:18:ee:fc:db:f3:90:24:bd:79:59:ce:f3:c1:a7:
                    92:c5:84:11:35:32:23:b3:36:64:05:37:ae:84:72:
                    a6:02:02:9e:46:18:f9:ab:0d:70:97:18:cf:52:06:
                    15:d8:64:e2:0c:15:67:eb:21:ac:c4:fb:4b:3e:8e:
                    58:fe:9a:99:12:9d:35:da:df:e5:7f:21:4e:71:0c:
                    81:c9:67:0f:49:90:94:95:11:e1:92:95:8a:38:6b:
                    bd:f3:c1:bd:c0:13:9d:77:f7:62:6c:09:a5:1d:12:
                    56:d4:ea:ff:e5:8d:9b:67:5e:91:8e:05:b8:bd:62:
                    9d:b1:00:fc:fd:bf:47:d8:3a:18:37:44:ea:10:cd:
                    d7:cd:02:dc:3e:6b:cf:5c:3d:9c:ce:09:ee:95:6d:
                    35:15:fb:c1:ff:d0:83:e6:30:17:b6:19:94:be:40:
                    a6:aa:de:86:ab:01:27:84:1d:4e:27:a9:b3:e6:7f:
                    a2:74:e2:40:38:fd:62:65:e0:5b:78:53:f6:06:14:
                    c9:df:9a:ea:94:9a:25:38:22:d4:b3:09:71:bc:b9:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:EE:F0:2D:03:E5:D1:AC:F9:89:A4:3D:19:6C:02:97:91:30:19
            X509v3 Authority Key Identifier:
                keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:74:f0:12:9c:7b:a1:11:f5:a7:30:8e:1e:95:4c:39:76:
         3e:17:f7:4d:e7:ce:e6:43:45:34:1c:fe:10:e2:42:e5:1c:bf:
         63:bd:15:32:b3:80:e0:2a:5b:88:6e:db:95:ba:29:b3:d7:d2:
         ba:90:38:90:a7:57:0d:c8:69:b7:2e:91:f7:0f:65:65:f7:6a:
         ef:60:7e:f9:83:c4:ef:c7:d7:08:d6:a2:a6:19:db:b7:13:b1:
         57:00:b0:84:a1:b9:20:f8:61:ad:89:46:9c:7a:1c:39:d5:ad:
         f2:0b:10:57:e7:2c:f4:18:b8:ad:7a:be:13:06:fe:e9:9e:c0:
         ec:7a:59:dd:ad:8b:00:ec:45:4f:46:d2:32:2f:bb:6b:aa:87:
         69:5f:db:f0:56:c9:0e:e2:80:ae:b1:0e:29:63:99:0a:65:de:
         76:4b:1a:c8:49:31:25:4a:8d:43:c2:8f:33:b9:b4:84:9d:d1:
         bc:70:60:d9:0b:27:ef:0f:24:02:14:9f:52:6b:d3:3e:f1:14:
         92:6a:34:38:9c:45:89:23:f8:14:ee:ac:21:6b:03:3d:b3:34:
         a3:07:92:86:89:66:dd:8e:7e:e7:52:9e:a7:c6:0a:eb:65:f5:
         8f:44:90:87:46:2e:6c:ed:b6:22:14:cb:88:88:4f:66:84:86:
         3c:95:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----