Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File:                     Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier:          p2IxrpgVkYNdkILDB0WOPK4HeicE76X80enfdmmE7zs=
Subject key identifier:   55:81:A4:57:73:3B:F8:09:41:19:EB:3B:CA:C9:E4:3D:15:FA:84:7C
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer:       /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial:       01962ECF6D3CC3EAD55CEBE86B2C66FC11CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number:          0E2D
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: NQFNfuPBHnZ4pPGxIlOYHFLya20LB3qN3ukgVItFCyg=)
                          2: SAqPRmB-G6msTnaXyr7m6jyG5Ko.roa (hash: 2YxDfMO4o3RvNMQXIEtYRv7ty5CdsK9saG6EToUsNdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6d:3c:c3:ea:d5:5c:eb:e8:6b:2c:66:fc:11:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=5581a457733bf8094119eb3bcac9e43d15fa847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:a6:11:33:a2:2d:45:77:21:67:af:f4:db:
                    69:c5:62:3c:fd:10:ea:6b:77:17:fa:4e:f1:e3:43:
                    55:48:06:8f:d1:f4:dd:c1:d2:b5:66:cf:02:2f:6b:
                    e5:d3:ea:95:f2:aa:a2:0f:0d:db:76:f0:ae:22:48:
                    23:1f:f9:c0:93:f9:30:ca:6c:95:c4:03:d9:5d:13:
                    13:4f:ba:f7:f2:7a:cb:ab:73:07:fa:8c:8f:07:1d:
                    cd:12:1e:51:a6:b2:b4:9c:57:ce:95:c5:18:76:b1:
                    75:dd:56:2a:1f:a9:e5:dc:d7:e5:02:c8:a3:e5:8c:
                    be:13:0e:01:07:cd:3b:71:14:f1:3f:54:0e:79:6d:
                    6c:0d:0a:51:20:6f:0c:29:9e:14:9b:9a:c4:30:c2:
                    2b:ed:10:43:da:a9:7c:bb:d7:f8:bd:d4:dd:54:29:
                    47:b8:14:ad:4b:b3:0a:ec:aa:8a:39:7a:95:d7:6c:
                    c9:a1:59:16:3a:21:39:da:6b:b2:bd:b4:3c:0c:80:
                    b5:fa:7d:96:9b:ae:f7:8f:2b:17:62:f0:50:72:b4:
                    aa:10:dd:29:5a:78:9d:c0:9a:b3:a4:91:5a:f3:f1:
                    a6:23:42:44:7e:44:91:da:c1:15:c2:aa:67:3d:1a:
                    48:e6:aa:b4:90:a4:8a:70:58:d0:46:34:0c:91:ca:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:A4:57:73:3B:F8:09:41:19:EB:3B:CA:C9:E4:3D:15:FA:84:7C
            X509v3 Authority Key Identifier:
                keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:32:8a:ee:7d:8e:c3:ca:4e:b5:89:17:2f:35:68:15:3d:
         6c:4f:f2:b2:2a:e0:df:aa:f7:a3:1e:65:df:a2:66:00:84:c2:
         34:ae:fc:41:6e:ac:2f:32:98:bc:e1:02:7f:f6:28:e1:b2:ac:
         44:05:7b:2b:0c:1f:50:3f:7b:3b:81:80:40:74:6a:61:f4:15:
         81:96:ec:16:f3:ea:e0:d4:aa:47:64:0a:56:49:d3:17:9c:ee:
         2b:61:62:ec:5c:c0:2c:c9:a8:89:fe:71:73:33:88:1a:9b:74:
         c4:11:c2:72:66:e9:b9:f1:96:e1:72:5c:4d:29:47:bc:57:a8:
         ce:62:ca:c1:26:9e:39:bc:67:5f:5e:22:87:8a:f4:e9:c1:78:
         d5:b5:3c:39:34:dd:e9:1b:49:87:9d:a3:b0:0a:e2:e4:35:31:
         3b:3c:c6:e6:5a:2f:b5:c0:56:ba:fa:ac:5f:cd:d3:a8:a9:08:
         29:3d:f0:09:09:c4:f7:3b:a0:ac:5a:55:33:dd:20:d6:89:23:
         b1:57:49:68:5e:3f:1c:b1:1c:18:9e:1a:9d:1b:af:38:f9:48:
         72:ad:c4:ae:6c:36:7f:9e:21:1e:f7:b5:f0:06:ff:7c:0d:ea:
         1a:73:71:4d:c0:d8:ad:3f:a6:9b:4c:af:dc:65:b9:d2:df:e0:
         b5:4b:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----