Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          mZgfu10r9IMpTa8iLXXoAOjuUsePubTo2qGxNa3DMwY=
Subject key identifier:   E3:98:DD:8B:D7:63:F8:FF:CC:3B:7A:35:8C:38:5C:B1:46:2F:3B:67
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       01962ECFAA130EADA308EC16858512A923D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
                          2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
                          3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
                          4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: T2vTJZ60RmQNFyqkl4PFgnMJpkhmvBuXGT1aeMlDchw=)
                          5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:aa:13:0e:ad:a3:08:ec:16:85:85:12:a9:23:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=e398dd8bd763f8ffcc3b7a358c385cb1462f3b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:40:07:92:c3:26:1f:b1:6e:6f:92:86:13:
                    18:b9:e8:56:6f:2a:e9:b9:03:ff:c7:e2:37:e8:23:
                    b6:61:76:6d:1e:d5:ae:08:5b:53:aa:93:8d:2d:92:
                    10:c2:47:06:44:a1:94:df:42:9f:c3:94:51:4f:0e:
                    f8:48:04:cb:95:fe:4b:7b:bf:97:60:5e:d2:07:c9:
                    fc:6d:af:5e:b4:bc:a5:67:9b:24:59:1d:87:ba:cd:
                    35:8e:4b:a4:8c:74:41:ea:8a:42:4d:16:8e:10:0d:
                    53:d9:e6:90:10:2d:c6:1f:5c:93:c1:87:c6:cd:ca:
                    6f:63:b2:9e:0b:90:44:84:c4:e6:9e:2f:8b:ab:01:
                    57:15:56:62:0d:67:1e:14:8a:6a:e4:03:74:97:47:
                    1d:75:60:df:25:96:5c:5c:a4:15:69:d9:2c:17:bd:
                    05:99:b5:0a:3e:64:22:a0:d3:94:3d:2e:bd:1f:2f:
                    a6:33:46:37:b5:e8:ce:e6:21:64:b3:7c:52:a2:a1:
                    7c:60:58:35:c7:a6:a2:2f:34:79:70:38:68:68:64:
                    f5:e2:07:1e:fa:27:f8:64:9e:d4:a5:1c:3b:92:41:
                    73:a2:25:f9:7a:62:d1:af:f3:fb:58:5e:6c:0d:b9:
                    12:1c:0b:ba:18:f5:04:9a:2e:5a:96:db:af:c3:08:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:DD:8B:D7:63:F8:FF:CC:3B:7A:35:8C:38:5C:B1:46:2F:3B:67
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:0e:0d:60:00:f1:2e:5e:c1:a3:8d:f6:36:82:4d:fd:dc:
         4c:34:aa:a1:d1:86:39:72:a0:f7:f7:ca:36:2e:68:64:d6:e8:
         65:14:49:72:19:8d:1e:a1:61:58:d7:03:d5:06:31:61:9e:3b:
         e9:c2:cd:85:1e:f8:cf:60:90:ba:9a:68:8a:c6:a9:8a:0e:12:
         ea:1f:d5:20:cd:69:51:95:6f:41:cd:79:e4:bc:b2:cf:75:9a:
         9a:a4:43:4e:df:c8:9c:7d:5b:23:46:77:7c:66:f1:1c:b9:bc:
         fd:39:59:f7:e6:3e:8a:6c:0a:ff:27:9d:42:10:51:79:4e:5d:
         ab:28:ca:15:18:dc:a3:cb:3e:9a:38:ad:65:7e:ba:b0:54:9c:
         95:ff:81:f7:a0:83:48:ac:48:1e:40:36:37:eb:2c:51:b0:d3:
         4a:6c:ca:5b:5d:71:32:12:89:b9:5f:33:98:ac:35:47:f1:f7:
         33:8a:37:63:5d:78:a6:04:e4:e0:38:0c:47:67:3f:1f:f4:f4:
         5d:c0:3a:00:19:86:74:f8:1c:fd:03:b9:14:b8:c4:b4:f2:66:
         02:d1:c7:62:18:f5:c1:12:82:e8:1b:f0:21:2c:a8:6e:97:74:
         a5:2d:8d:9c:f0:9d:c9:52:75:f7:bc:22:59:f1:94:b3:95:93:
         8c:e5:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----