Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File:                     1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier:          hTHbtM4Tylxj1pRU+n78xYrIF5NlZoHVwnV34AvSpGo=
Subject key identifier:   49:A1:A9:29:41:13:B1:9C:3B:C5:4C:EB:C2:B7:F3:34:E1:C4:0F:34
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer:       /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial:       01962E98642B2EA2E6B51FE3CD64CF1A840E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: U1UFApE2rb7Vtl8T0MU4cL0mnP2Bjetqh3IcKVZibjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:2b:2e:a2:e6:b5:1f:e3:cd:64:cf:1a:84:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=49a1a9294113b19c3bc54cebc2b7f334e1c40f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:71:49:94:b5:69:d0:23:cb:77:11:53:aa:
                    a0:9a:81:a4:74:a6:fe:70:99:5c:e3:55:55:2f:19:
                    df:46:b6:b0:e2:ec:2b:2f:26:40:84:03:f0:c3:bd:
                    fd:92:13:43:3f:96:8a:7b:ff:12:df:2e:38:47:07:
                    bd:e5:0e:c2:41:1c:eb:6a:43:cc:28:a2:3a:ca:f1:
                    c3:d2:f2:ae:b7:10:05:cc:ee:1e:10:75:96:e0:11:
                    59:7b:53:5c:3f:01:6b:39:9b:52:9e:3e:d1:13:7f:
                    a9:0b:91:77:e9:18:9a:d5:6a:8f:48:5b:65:d7:c5:
                    ca:78:ec:29:d1:42:c3:4f:a8:0e:64:d5:c7:66:e3:
                    c2:30:33:bb:b7:61:43:cd:09:11:17:8f:c4:c6:97:
                    7d:82:d3:c6:7f:e4:7d:40:1d:1f:9d:a2:c3:4b:b0:
                    d1:a6:04:ed:64:8f:1c:bb:ed:bd:a7:7b:d9:ba:0b:
                    89:a7:86:bb:8f:f6:47:92:c3:63:c3:d3:8d:ba:54:
                    6a:ea:9c:40:d5:d5:01:f5:3b:15:6c:f2:c9:62:b0:
                    10:8b:c4:54:e7:fc:35:27:7c:01:02:51:10:9e:a2:
                    57:6b:74:ab:df:00:8f:42:d2:58:15:ff:30:60:ba:
                    1f:a6:85:35:5c:17:85:ab:51:fc:25:6c:8b:ad:11:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A1:A9:29:41:13:B1:9C:3B:C5:4C:EB:C2:B7:F3:34:E1:C4:0F:34
            X509v3 Authority Key Identifier:
                keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:43:a2:41:e7:e3:90:55:39:81:aa:55:26:1b:9e:68:a4:61:
         23:49:07:ed:b9:66:a3:c2:38:5c:c7:b4:c3:15:45:d1:49:b4:
         c1:1b:52:96:df:17:89:00:ba:0c:03:49:2d:bd:e5:75:0d:17:
         c1:78:69:41:96:87:6b:59:48:3e:45:2f:cd:0a:2d:b0:48:1b:
         1e:50:40:19:94:1b:0d:ec:da:84:a9:35:2d:e3:8b:65:82:23:
         53:2c:b2:6e:ff:62:84:53:73:14:39:d5:3c:15:f6:9a:21:b1:
         a2:80:c6:58:c7:fd:2e:95:36:7e:69:c5:97:1a:1f:d3:8d:60:
         24:35:95:61:b3:6e:62:e4:28:51:7c:cf:18:6f:1e:ae:60:b7:
         19:57:f2:bc:69:ef:c1:da:53:99:3f:97:06:85:46:38:39:de:
         7b:7c:d5:6b:b7:6c:90:f6:8f:9f:8e:31:d7:db:93:d6:6f:af:
         19:1b:57:7c:eb:3c:4b:49:ef:4a:15:8d:b6:51:e5:73:85:c2:
         fb:80:75:70:6c:c3:d0:7a:b2:cc:27:33:a4:5f:bc:49:e0:74:
         ae:2b:40:41:83:e7:b6:cf:5b:47:b3:3b:18:2a:ac:32:ae:31:
         f6:bb:a8:2a:cf:94:42:fd:75:1d:f2:52:08:c0:e1:f0:d7:64:
         6c:ed:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----