Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File:                     hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier:          tRJ2E4+ckPTV8b7XLJEokdlneZ15XeGHssekD45TIcw=
Subject key identifier:   2B:4E:C8:1F:18:07:D3:DE:28:63:CA:81:E2:BB:F8:D0:5E:2C:CF:B0
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer:       /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial:       01962E99C19B1BA7EF8B9B94C0D916B55B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number:          0DBA
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: Y6B0JpVKXfQI7iGgPQ7BGxBAc40LGPfhtsagIbtX6Ek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c1:9b:1b:a7:ef:8b:9b:94:c0:d9:16:b5:5b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=2b4ec81f1807d3de2863ca81e2bbf8d05e2ccfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ef:86:3e:d0:d1:3c:27:5d:1c:41:c7:9f:e8:
                    e6:9d:0b:fa:67:52:cd:cd:4a:16:e0:25:52:75:30:
                    02:6c:d6:bd:23:d1:4c:f3:01:11:06:bf:bd:dc:85:
                    96:e3:bb:8f:35:ad:61:16:31:2e:3d:4b:29:97:81:
                    2f:2e:3f:f4:40:c0:d1:95:05:3a:e7:b4:56:ca:1d:
                    68:1f:79:67:43:0c:d9:ef:6e:26:0b:ba:3c:98:47:
                    14:4d:2e:99:45:32:ac:5c:6a:e8:e9:13:6a:32:f4:
                    00:4e:cc:4e:0a:e3:2c:be:bd:5c:e6:55:c6:af:e2:
                    58:6b:54:a0:86:52:3b:d7:4f:f9:71:6b:62:7e:4a:
                    5e:99:e3:83:60:b5:08:ef:fc:ac:eb:ef:3c:19:9b:
                    2b:77:e2:45:90:7d:1b:7b:4f:65:9a:d0:20:f8:ad:
                    5d:f3:c3:ee:1d:0e:c7:c5:8f:a8:dc:3e:46:ef:fc:
                    5a:c4:ee:fd:a8:ac:c8:8c:41:33:27:22:ca:20:1b:
                    2f:92:21:b3:05:18:b3:25:f2:0c:11:b8:10:d7:a7:
                    4f:bf:2d:03:35:d5:f0:38:40:13:ed:7d:cf:d1:cf:
                    23:64:42:84:41:ab:df:19:75:db:45:10:aa:e4:37:
                    61:75:ce:43:5b:05:9b:df:35:ad:b8:f5:fe:79:09:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:C8:1F:18:07:D3:DE:28:63:CA:81:E2:BB:F8:D0:5E:2C:CF:B0
            X509v3 Authority Key Identifier:
                keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:a6:d0:be:c1:7a:a2:56:e6:ad:9c:fd:54:59:fc:0e:5b:
         3c:62:e7:aa:16:f7:f1:4c:71:b5:92:eb:78:cb:5e:a2:f0:de:
         46:ac:cc:13:a7:63:da:90:c7:89:5f:0b:d9:01:df:ff:ff:32:
         be:65:fb:92:08:de:a3:81:e4:f7:12:d3:a8:7b:7c:33:b8:97:
         a8:e8:c0:27:97:c5:d6:60:4e:72:56:10:5b:c4:4f:28:f9:9d:
         b5:76:93:19:cc:46:15:39:6e:25:3a:66:c7:f1:87:c6:f9:1c:
         c2:58:d1:9c:e1:ae:9f:63:a8:a8:22:04:30:e8:a1:f0:2c:8e:
         63:1c:fc:57:51:5b:b9:1f:ef:28:10:e8:03:86:bb:42:73:36:
         66:b9:6f:2b:a5:ae:04:26:86:27:ac:77:82:0c:e2:43:7c:dd:
         84:fb:2b:32:e4:e5:a5:d9:26:b2:c2:cd:b0:15:ef:0e:50:cc:
         be:04:71:e3:a3:e8:f9:2b:b3:68:b9:3c:35:29:df:a9:56:ae:
         4f:96:a3:94:c1:8d:fc:cd:20:39:60:c3:bc:b9:e1:25:42:cd:
         36:ad:2a:1a:eb:c9:6d:c5:bb:57:90:07:8f:86:c1:ce:84:1a:
         11:cc:c9:75:c0:98:f1:61:fd:d9:98:8c:91:a6:09:68:59:6f:
         c0:a3:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----