Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File:                     hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier:          TJdQxq7ETsvBNt//45/sShySybp004xZzoz83+64KYk=
Subject key identifier:   23:E7:70:E7:8F:75:EF:B0:87:D6:48:05:4E:5B:9A:BA:02:5F:E6:D8
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer:       /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial:       01962E62079AAFC34A1A306F9537BE5779D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number:          0D75
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: WMhQhcMzxEVN6VZyIQS6Mur0qsNatPVPaK+5BNrpErI=)
                          2: s1k4VuonWOZZPAV_JNyFAmc3QSo.roa (hash: cR7PeQtOyIJC20HWqCOMhvmrx9KSgQEbtA0y8RtkXyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:07:9a:af:c3:4a:1a:30:6f:95:37:be:57:79:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=23e770e78f75efb087d648054e5b9aba025fe6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:71:4d:29:27:0e:e4:ec:65:63:ce:53:7c:
                    10:f6:0c:87:08:90:01:94:4a:c1:88:c1:5f:ce:e3:
                    6b:45:13:ab:d1:03:d0:84:01:30:be:81:47:09:e6:
                    31:60:b0:d5:3c:5c:10:bb:09:ed:ab:1d:12:17:3d:
                    cb:3c:a0:b9:fd:dc:25:90:14:7c:7c:d1:0b:b4:78:
                    e7:b7:e3:63:5b:c2:7f:01:be:64:a3:2a:dd:2d:47:
                    4d:f8:f7:3a:4c:b5:e1:f4:68:e3:fc:ab:d7:8c:9d:
                    15:56:8d:86:98:ff:da:c9:d1:d2:72:1f:bf:e8:f7:
                    be:f5:16:e8:96:76:59:13:ce:32:86:f1:d9:c9:7f:
                    c7:4e:7e:fa:0c:f7:9c:5a:08:45:7e:84:a5:3b:63:
                    f4:15:10:c1:03:e8:92:fd:48:2a:0d:c8:54:0c:c0:
                    43:2d:f8:a5:1e:13:cd:fa:aa:8f:a4:31:da:71:5f:
                    e1:46:aa:a7:c1:f7:28:91:d2:8c:33:37:9e:70:81:
                    5a:9f:ab:52:03:da:3b:8d:d8:89:b7:29:98:fc:b3:
                    f5:98:c0:6b:00:a2:7d:ef:ca:c9:1d:2c:e0:53:12:
                    29:58:e9:63:2d:82:ac:f7:bd:8f:08:2b:96:e4:5a:
                    1a:e6:82:c0:e8:00:cf:5a:b9:0e:df:64:3d:5c:50:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:70:E7:8F:75:EF:B0:87:D6:48:05:4E:5B:9A:BA:02:5F:E6:D8
            X509v3 Authority Key Identifier:
                keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:bc:88:cb:a5:73:ab:d7:3d:56:7a:ca:e0:f3:ca:84:b0:df:
         41:55:09:19:78:f6:8c:2a:dc:9a:b6:52:52:6b:a5:55:d3:c3:
         f5:59:2c:09:5b:e9:be:06:f4:72:e9:d8:48:56:af:f2:5c:f9:
         87:a5:4c:a8:95:a8:08:00:1c:c5:7e:3a:70:35:8e:2b:ca:83:
         65:95:f9:fb:7e:a4:31:47:19:19:45:99:26:7c:d1:78:d5:78:
         3d:a3:7c:5c:89:d5:db:c1:b1:6a:9b:e1:29:a8:b3:21:8e:05:
         6a:3c:15:9b:e2:ad:91:3d:10:91:c5:b3:47:c4:f2:26:cb:f8:
         dd:00:c9:4e:72:f2:a3:f6:2c:2d:93:4b:12:9a:dd:8d:bd:92:
         32:44:d6:19:28:ed:a6:5f:ba:69:a9:80:36:37:0d:1b:52:4e:
         6a:0d:da:ee:72:6e:98:2f:91:cd:5e:5c:3b:6e:97:30:1a:b7:
         12:1b:85:b0:7d:a2:4b:d7:01:92:63:43:af:41:1e:d2:69:f1:
         ec:e0:88:4d:8e:23:f7:89:87:0b:e7:21:c7:6a:2c:80:1f:8f:
         55:76:76:ce:b7:68:3c:f3:6e:50:74:87:59:85:6f:99:83:24:
         3f:3d:cb:66:70:01:c8:cd:f6:d0:2a:f0:6a:0f:67:08:ff:94:
         ff:4d:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----