Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File:                     Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier:          M3LDYLSvarfEfzwc/7psuJNiEv4VNlGORHRUneSqWbc=
Subject key identifier:   05:83:16:C6:A3:E3:3E:3E:85:43:F2:02:D4:FB:45:B7:84:BC:A6:23
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer:       /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial:       01962FAB1A1D1F98266170CD07FF8FB299D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number:          021C
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: Eq0LS6FT37mTC07K1z4c5HsJoLDMC1GyfCy66ipDH+M=)
                          2: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (hash: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:1d:1f:98:26:61:70:cd:07:ff:8f:b2:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=058316c6a3e33e3e8543f202d4fb45b784bca623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:d8:9c:d1:f5:4d:64:bc:2c:79:68:7b:ca:
                    c1:af:4c:55:91:04:3e:fc:57:9f:7b:ea:ce:df:e4:
                    f2:30:ba:ad:eb:f0:08:a6:0e:04:8a:8b:7c:c4:7c:
                    86:24:51:56:5d:e9:86:6e:73:a5:a9:9f:23:1e:f2:
                    f4:52:e8:d9:5d:2e:3a:4e:13:86:20:61:16:7e:7b:
                    58:51:c3:ca:9b:1d:8e:58:23:b1:1c:25:aa:42:9b:
                    17:9f:06:dd:b3:9c:34:62:86:9d:ef:d0:cc:c6:7d:
                    de:f5:bf:ca:07:76:30:06:3b:d4:ab:59:2b:dd:59:
                    9f:f7:e7:79:af:a0:64:59:5b:1f:49:59:4d:c7:48:
                    5c:37:10:50:8a:61:48:d2:63:e5:c5:c3:cd:65:80:
                    20:7c:17:68:d1:31:c7:a6:87:b1:b8:d0:fb:38:b9:
                    5e:8c:c9:8b:e0:4c:4b:a6:7e:c5:a7:c1:ce:29:5f:
                    45:16:59:e9:98:c8:b1:c5:da:9c:31:ed:38:ec:38:
                    3c:0b:e2:bb:26:e1:3d:e6:08:fe:7d:29:f8:21:43:
                    0e:c5:33:08:66:c6:7d:59:7c:b7:ec:cd:4d:1a:5b:
                    6a:3c:f2:40:ee:d1:87:49:d7:d3:57:42:32:95:79:
                    cf:ef:66:12:9e:45:29:35:9f:a4:cb:39:cc:24:a7:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:83:16:C6:A3:E3:3E:3E:85:43:F2:02:D4:FB:45:B7:84:BC:A6:23
            X509v3 Authority Key Identifier:
                keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:99:4f:e6:e2:6d:10:31:f0:81:3a:5d:06:e7:00:0b:00:
         ea:59:96:1f:b8:16:bf:ea:26:d2:1c:66:c3:d1:43:5a:c0:c0:
         ed:2a:61:41:62:c4:df:1a:a7:a1:dc:51:7b:a0:74:77:0b:d8:
         5b:4c:4f:54:bb:3e:3a:91:03:06:1a:54:f4:0d:90:0d:67:b1:
         3c:27:ea:f9:d4:77:07:f1:d2:55:ed:20:7f:ac:ca:cb:f4:86:
         f1:87:7a:4d:c8:e3:a6:82:72:df:79:95:ba:e2:b3:f4:6f:88:
         5d:8b:aa:49:28:d4:2e:4b:94:47:ab:d4:bd:28:da:40:5e:7f:
         75:a5:f4:6e:09:ff:a6:b5:62:f0:c8:b6:10:1f:78:d8:de:ad:
         b7:34:69:53:41:e8:d2:5c:77:8a:2e:27:8b:62:7c:31:1b:61:
         37:ba:15:c9:75:bf:3e:66:1d:4b:0a:4f:e6:c8:4d:26:ca:36:
         68:9c:7e:2e:04:c4:00:b4:e2:05:69:7e:a4:c7:98:c6:78:01:
         35:30:53:29:9a:1f:7e:46:d3:82:2d:b5:86:66:4f:53:7a:fc:
         c8:0d:68:6e:3b:a0:52:85:cf:c4:8a:48:c2:4e:3f:ee:32:b3:
         0b:44:52:5d:08:0f:18:3f:9c:7d:1a:79:a4:73:85:b5:d3:37:
         b9:35:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----