Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File:                     HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier:          RfH5H62/SPVcn3kY5htXzQ1+b+q8Sbk2fRdnd7WePYs=
Subject key identifier:   FB:95:36:FC:C2:8F:2E:BA:0B:E1:76:E6:59:94:23:A5:84:92:AE:9E
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       0194BCA9F0975581F7C83091D6A1F42928A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 14:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:41 +0000
Files and hashes:         1: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: calViCJBZvdE5SB0Ri3woYeLxF6TEYvs+EdkRvf6CHI=)
                          2: HKyKcuG2QNZXVCZbzlsSYd8S3kw.roa (hash: WsComY/xpr7CRKjl1OS19nvkdUYgY57xLKmt+FoyLxs=)
                          3: NMYTYXjVSSW_zjS5UcL1_MJYMhw.roa (hash: sb8TB9OQXYjgHET+s0jEt1SW4MRtm0F3nj4wUyz73j8=)
                          4: OL6AoyvltIWrfared4b30q9zkxI.roa (hash: BCZJFaW2H8wcaghHXjKzyZLLD5xoj/h4op/UrSZpM4s=)
                          5: cdvkytGTuhzfI_n3jlQrgir1LVg.roa (hash: bDSSCJ1WplO8Ib0UIaI2qA5CZAt1v6VMlLCWW3FIaSk=)
                          6: jLAxUa8xvZ_xtGFLN3MZzH02ngY.roa (hash: 2KcY9b/rNpgICtwXDDn50o8m8wTGL/9zVFvIOuzYcZI=)
                          7: jwz6PrQFhFvB8Ouuwat3y2nONuA.roa (hash: TxTry85XsPky+PSHHeTZJCkAX90hbYBwkf2e2x38QSo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f0:97:55:81:f7:c8:30:91:d6:a1:f4:29:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Jan 31 14:00:41 2025 GMT
            Not After : Feb  1 14:00:41 2025 GMT
        Subject: CN=fb9536fcc28f2eba0be176e6599423a58492ae9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:d6:5c:5b:7e:62:0e:06:37:33:d6:3a:69:
                    30:c2:9f:01:c3:47:6b:27:76:85:11:2a:c8:64:e6:
                    19:b0:2c:84:34:24:55:ec:3b:d2:b6:a0:5d:67:d2:
                    9f:93:25:77:8d:81:a9:c4:6d:94:c2:eb:d6:3f:2e:
                    60:bb:cb:c5:7f:92:f9:60:1a:8b:63:99:58:b6:0f:
                    4a:c6:01:1e:7b:7e:40:d7:e7:e2:bf:c6:af:af:9d:
                    da:d5:f1:6c:d8:4f:82:40:cd:6f:86:10:7f:5a:ee:
                    38:90:ae:97:95:7e:c0:e3:62:c2:3c:50:b4:48:c8:
                    ec:8d:2a:68:69:82:34:cd:d8:66:3f:23:e7:2c:d7:
                    de:01:f2:a4:30:78:c7:23:91:e4:54:ee:00:ad:83:
                    ed:d3:54:26:a2:8e:a7:19:8c:6a:45:db:91:58:ef:
                    52:8d:62:ba:da:81:f8:6d:08:a0:d6:a1:67:07:d9:
                    91:03:e2:54:66:61:79:f3:2a:5a:a2:74:dd:0a:91:
                    b0:17:b5:d6:64:4d:cf:b8:1f:60:5f:4a:70:7f:13:
                    ec:ad:aa:88:49:a0:5b:9c:f4:49:33:68:2a:a1:e0:
                    11:67:b3:6a:de:50:5f:f2:bb:f0:4d:94:52:02:9a:
                    e9:28:e0:01:53:0d:75:d3:3d:6f:e9:67:f4:eb:3f:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:36:FC:C2:8F:2E:BA:0B:E1:76:E6:59:94:23:A5:84:92:AE:9E
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:b8:e1:70:48:a0:fc:13:b4:68:86:b3:b1:f6:10:1b:5c:
         b1:53:96:e2:a1:ba:d5:d7:5d:5f:7c:d3:3a:d4:70:f8:c6:7b:
         3a:b6:26:af:1d:6c:f3:22:67:18:83:f4:f4:8b:00:96:29:c0:
         35:f8:d1:83:62:40:c1:cf:d0:2c:30:05:1b:c7:6b:f2:fe:93:
         c8:0c:21:1a:c1:76:aa:66:dd:13:3f:61:8f:63:e2:04:a2:c9:
         4f:7a:aa:ab:54:1c:3f:08:4c:5b:b1:96:56:7e:27:1c:76:98:
         fd:41:b5:9e:38:d1:bf:75:d0:84:88:17:f8:56:3d:66:93:0e:
         dd:e5:ea:32:f4:70:ed:e8:d3:cd:c0:1b:a7:06:33:ed:a7:01:
         8e:cc:49:a2:68:bf:26:bc:15:07:14:56:01:e9:ea:59:ee:08:
         fd:b7:24:ee:52:21:30:9d:97:22:23:a9:fc:6e:96:81:4a:18:
         47:7b:a2:91:cb:32:4b:27:05:0d:be:5a:c0:a6:65:a0:f7:d1:
         bf:ba:f4:c4:ef:fa:db:c4:17:2e:a6:e0:cd:90:4e:58:20:80:
         b5:6c:ee:72:3b:44:1b:f6:88:ba:b1:52:d9:2e:1f:35:e9:11:
         d6:44:56:be:b7:63:bf:71:bc:bd:e5:04:92:96:8d:cd:fe:2b:
         fb:84:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----