Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft
File:                     HeVgH-EiL4m7OqryZPD26nORwTg.mft (raw, json)
Hash identifier:          p79cfljxJn39hRdKv9DBh04MV1yetWKE5ofHubQKYKE=
Subject key identifier:   B2:86:65:BA:31:45:56:10:9B:CB:C7:DA:EC:C9:33:0A:7B:49:5D:87
Authority key identifier: 1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
Certificate issuer:       /CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Certificate serial:       01962E99BB68C8C4E84CFCB354310C7EE88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft
Manifest number:          07E0
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 1GUi9iA8Rgrr5GN4QB6VlqMrvms.roa (hash: s/MIypH3pMJ3iuiuGr8K68PmgQyO6HFRzwvdBy3o4FU=)
                          2: HeVgH-EiL4m7OqryZPD26nORwTg.crl (hash: TsiSxcYb/AMORPFruhr0IamfzLkVKoO94hqNMiEkFKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bb:68:c8:c4:e8:4c:fc:b3:54:31:0c:7e:e8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=b28665ba314556109bcbc7daecc9330a7b495d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:6b:11:a9:f1:e7:9f:78:9e:c0:7b:37:b2:
                    3c:22:03:9a:20:49:e6:30:b7:f1:7b:09:c4:f7:15:
                    93:3d:ca:a8:a7:d4:c9:55:0d:58:56:7d:f3:5f:93:
                    0f:e7:e6:2d:7f:9a:3e:ba:0c:af:cf:0d:05:28:33:
                    cc:c5:3c:1a:1e:2b:7b:1e:73:42:f1:02:4e:16:21:
                    c6:5c:c6:61:0f:d7:df:e1:ca:dd:43:a5:42:90:0f:
                    99:79:84:95:2f:70:1a:5f:2b:d3:f2:12:2e:52:3d:
                    9e:71:ad:82:02:8a:30:f7:4f:af:4d:28:af:50:6f:
                    82:92:71:f0:f9:51:20:3a:82:4a:2c:8f:28:e6:21:
                    ff:ee:50:5b:50:81:a1:69:5b:90:3e:dd:9d:bb:16:
                    37:0e:59:58:49:98:48:4e:c9:28:d7:5d:8c:21:1c:
                    48:cd:ed:16:e6:f1:54:49:b4:a4:8c:2e:5a:a2:82:
                    f7:b8:fe:c9:98:75:49:29:5e:1a:ab:19:f8:62:b9:
                    0c:66:b4:8c:68:7e:c6:b1:02:84:4b:00:10:73:c9:
                    f3:1b:cd:77:76:4c:47:e9:e6:eb:a1:71:e9:d1:64:
                    d7:ca:1e:e2:16:e3:63:40:69:9e:bc:ec:c0:6e:b0:
                    ab:c4:75:4e:f8:f1:36:1e:40:58:7d:76:ed:a6:14:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:65:BA:31:45:56:10:9B:CB:C7:DA:EC:C9:33:0A:7B:49:5D:87
            X509v3 Authority Key Identifier:
                keyid:1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:33:81:c5:8a:04:e0:f4:3c:59:d5:33:ae:43:02:75:79:6f:
         8c:4f:26:41:92:1d:da:40:09:08:fb:51:8e:61:39:80:43:47:
         ed:66:c8:7e:02:ca:b3:be:87:fd:40:20:c3:50:2b:3e:13:bc:
         f9:66:50:d6:28:95:2a:37:c0:8a:83:cb:7a:42:70:78:e6:5d:
         63:af:30:3f:bf:4a:d7:cd:ac:d2:19:5d:5e:71:45:df:76:71:
         5d:f6:89:73:11:e8:6a:4c:6e:32:e7:1e:87:de:1f:15:94:2c:
         58:6c:13:56:e2:38:99:5f:da:e9:12:cd:46:b0:0d:6f:59:d0:
         8d:9e:d6:f6:c2:15:05:75:27:9e:9d:df:b7:ad:e8:ec:9c:12:
         67:ab:af:b4:7d:69:cc:ce:43:c1:75:bd:c1:47:cc:c6:38:48:
         89:52:3b:0d:db:23:8e:19:6a:30:48:86:2c:33:42:ef:71:e8:
         5d:12:2e:c2:9e:b3:a9:4a:14:3f:d6:db:d7:61:4a:7c:2b:8e:
         c5:58:bb:ec:39:ff:cb:0d:49:0b:37:7c:26:20:43:3b:74:ef:
         80:ae:82:99:44:54:7d:40:cc:08:0b:77:da:9b:d6:3f:4a:98:
         91:ac:eb:ad:ae:c8:5b:b8:41:63:21:5e:04:da:01:5d:32:c5:
         b6:a1:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----