Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File:                     HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier:          sd7GgIwMzRLryyStudVAMoQxmy5lg5QppyRltDp8fNk=
Subject key identifier:   49:C7:68:7A:D6:11:88:E7:2A:72:23:38:1C:80:D9:BD:62:4C:01:D4
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer:       /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial:       01962ECF92E4378C9915BBCE437A868F1338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number:          100A
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: /+3IekQcxmAa6ueuhIPdRaNYd35Box3F3a9175/47SM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:e4:37:8c:99:15:bb:ce:43:7a:86:8f:13:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=49c7687ad61188e72a7223381c80d9bd624c01d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:e0:82:91:58:e9:7d:3e:d7:d4:96:63:a6:
                    33:9c:71:d3:7f:91:aa:e9:76:c5:9c:84:b5:4d:a0:
                    97:02:dd:78:1d:10:5c:5d:e5:dc:27:0b:4f:cd:63:
                    2d:78:b0:cb:88:db:0b:ae:ed:a9:5c:b8:65:c9:af:
                    08:72:2b:85:eb:90:30:85:1f:56:0c:61:f1:75:38:
                    9d:ee:8e:24:54:32:8f:b1:c3:c9:7e:c4:6e:45:22:
                    58:c7:c8:29:e9:f0:6a:dd:bb:ab:9f:87:e3:67:02:
                    62:be:99:fc:13:94:db:f0:6c:11:62:25:db:47:33:
                    1b:48:c0:53:9f:a6:80:96:76:2a:66:b6:7b:d0:63:
                    26:17:10:b5:59:ce:ae:85:90:a3:58:e6:3d:eb:71:
                    ba:be:e9:80:db:fd:af:aa:b8:02:0a:ae:7b:a1:8a:
                    15:af:35:eb:d7:e9:6a:cd:d1:59:96:c9:3b:8c:e0:
                    ac:a8:30:a0:f7:22:19:5b:1c:f3:93:d6:e5:46:43:
                    4c:7b:28:c3:a8:8b:a3:bd:1e:c5:23:ac:56:06:1d:
                    77:0e:85:24:41:af:78:3c:e1:fd:ea:95:06:c9:f2:
                    30:ec:dd:65:0b:92:da:9d:26:b1:39:93:f7:65:a0:
                    57:91:40:93:3f:b8:38:ff:03:7b:a6:b7:15:b0:42:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:68:7A:D6:11:88:E7:2A:72:23:38:1C:80:D9:BD:62:4C:01:D4
            X509v3 Authority Key Identifier:
                keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:52:ab:ed:da:de:30:96:72:d9:01:64:ab:10:67:0e:c2:3d:
         a6:c8:ab:6b:ad:2b:f7:80:07:39:8c:36:f9:9a:94:54:6e:c0:
         61:f9:37:e8:2b:17:3c:6b:f7:c2:89:ff:9b:57:39:b8:ba:c8:
         d9:4f:64:98:3f:67:b6:06:de:39:75:59:4c:25:4d:af:c6:da:
         b1:0a:cf:5d:12:33:4d:42:9a:32:0a:88:49:17:7d:1e:62:b3:
         10:94:c0:60:37:69:10:9f:ca:31:cb:d3:cd:ca:d9:c4:0f:a9:
         4c:a2:a7:62:0a:a0:49:a3:d9:97:c9:37:a7:dc:e3:4f:af:2b:
         d5:1d:a2:b8:8a:c6:d1:4f:09:97:15:45:12:67:bd:e3:70:f8:
         02:1c:04:ba:22:0f:18:cc:d4:02:8b:2b:0d:a9:10:d1:b6:e8:
         6d:47:1f:04:30:3e:10:35:fe:5c:79:3d:6d:8f:0f:de:91:9d:
         91:7b:a5:d4:a5:8b:9b:4f:80:15:f6:4b:5c:d7:60:24:22:c8:
         39:a0:cf:c2:b3:65:fa:01:4e:6b:97:26:cb:57:6e:25:bb:dc:
         e0:d9:24:e7:d4:93:fb:af:a8:0c:e8:e5:41:87:9e:19:16:02:
         9e:b6:52:8f:67:c0:b8:40:52:35:51:fb:64:44:34:91:9b:a6:
         69:da:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----