Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
File:                     HJglkTOVXy7mNvuB8MDqYExmM1g.mft (raw, json)
Hash identifier:          qLBeHuS2kUlJF9ADRRudoqBaVka7Zp2NgoQO5bYQo74=
Subject key identifier:   E3:4A:8B:75:3B:63:90:36:31:E9:8C:4E:F0:F5:6A:B3:2E:56:A1:87
Authority key identifier: 1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
Certificate issuer:       /CN=1c98259133955f2ee636fb81f0c0ea604c663358
Certificate serial:       01962DF3C928A649AB4A3B80019ED96C58D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
Manifest number:          01C9
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: HJglkTOVXy7mNvuB8MDqYExmM1g.crl (hash: fjgj/N5V8XJJuGdNyDgo5tb6SRrBuwqBe4ygBG6dsIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c9:28:a6:49:ab:4a:3b:80:01:9e:d9:6c:58:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98259133955f2ee636fb81f0c0ea604c663358
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=e34a8b753b63903631e98c4ef0f56ab32e56a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:90:e5:d7:be:37:59:bd:5d:e3:f0:83:b1:
                    ec:32:94:ca:33:6b:d5:f5:96:1d:62:b4:f5:bc:84:
                    36:98:84:7d:0c:ea:26:1e:ca:cb:81:59:37:7d:bf:
                    cd:92:5a:f0:13:ea:02:29:3d:5b:40:1a:2b:79:e8:
                    3d:35:78:d8:37:74:85:7c:b3:c7:b0:48:e3:dd:92:
                    b6:9e:9b:cd:0f:4e:98:b6:dc:70:30:5f:35:9c:1a:
                    2c:9a:9b:32:01:56:e3:40:f1:2d:84:bc:14:9e:99:
                    0e:99:28:fe:89:31:b4:b2:99:bb:6f:27:55:29:86:
                    fa:e0:e4:5e:ba:ef:4b:00:62:54:9f:7b:bf:bf:65:
                    89:4e:f1:d7:e3:98:c9:0d:0b:7b:83:43:da:83:d7:
                    fe:5d:55:d3:e6:25:ab:29:43:e1:40:58:aa:7e:43:
                    58:c7:ef:36:a5:9b:a1:8e:a9:34:36:df:b4:5d:f4:
                    6b:b2:26:9d:f0:14:11:5c:7e:fb:e9:7f:f2:e6:84:
                    22:68:d0:80:2f:0f:8f:a9:b5:6b:c3:fa:6b:84:7c:
                    52:65:9f:5d:f2:12:fd:82:f0:12:ca:25:93:7b:0d:
                    1e:ec:a5:ed:68:6b:8b:a7:cb:6c:07:81:46:c0:45:
                    24:36:ba:46:6f:3f:b6:60:68:a7:90:91:eb:d4:1b:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:8B:75:3B:63:90:36:31:E9:8C:4E:F0:F5:6A:B3:2E:56:A1:87
            X509v3 Authority Key Identifier:
                keyid:1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:8a:35:05:32:f6:c8:1e:c9:e4:4f:59:05:3c:3b:19:fc:
         b5:33:79:af:c1:e8:3b:0f:b4:36:b3:6a:74:07:06:19:40:cc:
         1f:59:8f:cb:55:f4:f9:a2:e8:cc:bd:98:13:55:96:4b:38:ea:
         60:88:ed:2d:51:44:a5:c1:6c:b8:e1:13:a5:90:b1:c3:7e:71:
         17:9c:b2:ec:c6:03:1b:ae:4a:d4:7c:74:18:b2:09:ec:4b:b1:
         2b:b1:d0:d9:d1:68:55:6c:6f:b6:88:9f:0b:da:e8:d5:6d:82:
         bf:9e:e0:24:69:76:92:11:3f:7f:0f:8d:44:8b:f2:73:7a:9c:
         97:c4:86:c8:47:60:59:c6:e1:4a:be:ed:78:08:66:90:e7:7f:
         fa:e1:dd:87:d3:92:30:e2:05:fc:76:2e:b3:0d:45:ea:89:d0:
         45:52:d8:6b:d9:48:a5:a1:9b:77:2d:f4:ee:49:59:0e:d3:99:
         d9:c9:7b:12:4f:7f:e8:77:c9:75:6e:77:44:11:d7:ec:9a:8c:
         5a:94:75:05:1f:09:5c:e5:15:c0:a5:bf:c5:a5:5d:47:0f:79:
         1f:23:0d:28:f7:73:d6:e5:27:b7:22:f0:f8:48:94:d3:cb:eb:
         c3:76:2a:ac:a0:27:5b:0a:c2:16:f7:ce:98:67:96:29:7e:f1:
         49:6f:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----