Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File:                     hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier:          WWx9VFivSGggaAYewR9wGKzW1gOVNAu7pHIcb8OaiA0=
Subject key identifier:   FE:B5:73:A0:10:7A:51:0B:BF:AB:98:30:94:7B:C1:2B:35:3B:94:56
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer:       /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial:       01962E2AF467EAA4C5BBE5784EA34DBCAF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number:          0599
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: Yn8A51JXhydA1w7EudMw20btWgg.roa (hash: 8RUIJ3RFWn4yzWXCDTrT+NipGbDk4lPsQLa6ndOWD40=)
                          2: ZiUU0LAQUdekvKrpQSjBY1Oftsg.roa (hash: eey2iwghFKFKbO9hPjwH1yrsZ5doRQuR4x7dcQ+lD9k=)
                          3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: /pTPky3BXz7LvJJTC+4PaPEXmJdCmjqV6JKdR+7w1ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:67:ea:a4:c5:bb:e5:78:4e:a3:4d:bc:af:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=feb573a0107a510bbfab9830947bc12b353b9456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:31:20:ac:ba:a9:3c:c3:3f:72:d9:df:82:
                    b9:ce:ec:56:15:0a:5e:95:50:21:c5:72:b4:8c:f9:
                    45:fc:49:c7:c2:2e:cc:a1:53:21:11:d5:d5:03:f2:
                    f7:64:1c:7c:7e:08:91:dc:44:98:06:8f:4f:59:82:
                    81:50:3c:c8:33:45:ec:6b:8b:b2:74:d1:4f:04:a9:
                    31:71:c5:b6:d5:92:6a:3f:14:bb:36:39:44:c7:fd:
                    7b:c6:58:dc:c8:21:04:f5:9c:4d:98:4f:1c:03:b1:
                    cf:de:55:28:82:26:af:72:78:6b:d3:af:51:8f:70:
                    bc:03:df:75:4f:68:af:27:1e:cd:b4:63:72:a5:75:
                    2a:ac:49:0f:08:e6:b7:b6:5a:17:af:80:e7:bf:33:
                    38:be:5e:72:6c:c9:fa:d6:96:c3:68:56:44:55:f7:
                    4e:84:64:fe:13:09:22:56:c2:8f:c5:d8:d6:5e:e2:
                    4f:00:0b:af:5b:43:f7:d7:44:d0:94:5f:94:19:7f:
                    88:17:c1:e1:e2:42:e2:3c:76:3b:6d:b6:56:0a:74:
                    19:6e:24:1c:cf:53:0d:4f:49:c7:60:91:05:ab:64:
                    95:b6:a0:cd:83:fc:35:74:7e:55:08:1e:7a:59:a0:
                    59:18:c2:47:c0:2b:38:c2:ed:ba:47:57:3c:f1:ec:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:73:A0:10:7A:51:0B:BF:AB:98:30:94:7B:C1:2B:35:3B:94:56
            X509v3 Authority Key Identifier:
                keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:2e:93:61:a8:1f:79:e6:01:81:e4:0a:1f:d9:c1:ec:24:
         00:32:5f:1c:73:74:79:86:4f:ad:6c:14:64:44:88:29:1b:d5:
         fb:31:5d:69:1d:d8:aa:8c:75:ef:9f:53:33:c3:bf:e9:e1:4a:
         19:47:9f:8b:c4:a8:44:a3:18:d6:0b:f6:2a:b1:61:37:52:ef:
         b8:d2:f3:13:77:0b:93:aa:a8:54:5c:26:5d:93:2f:b9:77:91:
         1d:7b:2e:9f:56:31:23:a5:89:22:d9:8c:85:1c:ba:72:a6:5a:
         4b:1b:d4:d7:da:d5:db:7a:11:7a:71:35:18:08:ee:30:ec:09:
         4f:63:4e:a6:d8:9a:66:59:0c:49:28:d8:0a:5d:c2:e7:86:e4:
         a3:5e:ec:ab:8b:6a:1e:50:85:fa:ec:6a:42:fd:ae:61:10:24:
         ea:66:28:94:c2:e3:df:69:32:7a:a2:88:6b:cb:30:c0:84:57:
         13:45:20:bd:db:7d:6c:a5:eb:67:48:fc:38:bb:83:75:fb:20:
         9b:b4:d7:23:be:28:6e:3b:e7:73:a6:8c:c2:41:3c:de:e0:74:
         85:a8:d0:c1:6c:8d:40:86:8c:ac:b0:2c:b0:c3:2a:02:9f:88:
         1a:26:01:d8:2b:78:b5:bc:6d:43:94:93:14:1c:1c:de:ac:4c:
         90:fc:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----