Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File:                     HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier:          kMq5BXzJNY9hAYUfo0alRwMX2Svq+D5lfE2zWKyck0I=
Subject key identifier:   6E:FE:E1:F2:85:45:13:15:91:7E:30:37:43:61:8D:FD:A8:CB:CD:08
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer:       /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial:       01962E99B03D34F0500A5293ED6E9A802417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number:          0E2F
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: ue4IKUsGStlEWojSUVOjG+jU/lFVRCACs7vG7443NUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b0:3d:34:f0:50:0a:52:93:ed:6e:9a:80:24:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=6efee1f285451315917e303743618dfda8cbcd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:58:38:c4:27:0e:ac:39:5d:34:10:14:73:b2:
                    22:de:9e:b4:b6:9c:9f:30:ee:f5:fd:73:18:63:6f:
                    5a:24:5a:0f:f6:be:d7:e6:ce:df:75:7b:e4:d1:97:
                    76:fa:74:2f:d0:8f:4b:f0:8d:fa:4d:d1:c6:76:70:
                    14:ca:f2:a5:b6:c1:83:9d:80:4e:42:c6:d6:31:a0:
                    67:25:ce:f3:c3:8c:ee:7c:82:27:11:ef:59:19:89:
                    22:17:83:a3:a5:93:9b:ee:49:da:18:30:1c:db:2a:
                    98:60:54:8e:d7:c7:ff:3e:6f:45:9f:eb:a0:30:90:
                    2f:b2:cc:08:27:1a:ed:33:cb:26:3c:81:97:1b:c6:
                    b9:bb:97:b9:83:fb:30:c7:30:26:b3:ab:15:9c:c2:
                    dd:37:23:06:64:31:57:5a:24:5a:54:02:bd:15:0a:
                    f5:7d:fd:31:65:ca:9c:9d:eb:10:37:1e:d4:44:ad:
                    b2:9a:b5:f9:30:9c:44:65:fe:5b:21:4f:bf:18:47:
                    a6:a7:49:97:bd:f2:df:93:7f:1e:d6:ce:a7:d9:0e:
                    25:96:90:c5:82:c7:61:ac:d5:88:3d:3a:d9:dc:f2:
                    1d:e7:66:53:ec:37:a5:a5:af:bd:3d:7f:45:e7:94:
                    74:38:82:d9:bf:4a:b5:f3:58:b4:4f:ba:43:e8:79:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:E1:F2:85:45:13:15:91:7E:30:37:43:61:8D:FD:A8:CB:CD:08
            X509v3 Authority Key Identifier:
                keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:24:c9:c8:aa:2a:30:9d:bf:db:17:1d:f6:7e:dc:32:7d:dc:
         a8:22:9e:6c:e2:c7:fb:90:e9:3a:37:fa:b0:1d:7c:5b:7f:0f:
         99:af:80:e2:eb:a9:ac:0e:83:2c:ae:48:aa:f1:21:a4:95:2b:
         28:b0:aa:d1:62:99:35:45:9e:15:30:f3:45:c5:c7:d8:69:e1:
         08:fa:14:40:33:1b:b9:03:e9:92:f0:65:5a:89:67:9c:e1:ac:
         4f:20:80:9f:0e:f6:b4:75:2e:37:08:9d:7d:b3:bc:62:4b:f8:
         4b:72:99:2e:ea:bc:6d:a9:01:d9:6a:60:d3:aa:23:c2:5a:86:
         1c:2b:2f:3b:8a:35:14:5e:72:68:da:cb:b4:0f:27:ba:9b:ff:
         28:69:18:99:e2:db:3a:c3:25:88:49:16:22:3e:ad:aa:8c:c6:
         4f:e4:ee:0b:8e:24:83:74:df:9e:2f:7e:9a:0d:92:1d:11:83:
         e2:82:9f:26:a2:9a:14:94:89:99:97:16:2d:39:8f:8d:cd:00:
         87:d3:97:11:20:ad:c0:5b:f1:2f:3d:83:9e:b8:56:a3:11:ad:
         7d:91:35:37:95:41:2b:e3:36:fb:5d:6b:f6:87:e8:41:9d:30:
         dd:fd:c7:f6:f7:87:1c:9e:29:1c:ef:9c:02:ab:ae:6e:f9:67:
         55:0e:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----