Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File:                     hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier:          hu4On7Mb901U4HtXhQE9dyeQLpuK3XGnlCwL/1WrUkQ=
Subject key identifier:   32:DB:3B:08:7F:4A:DA:8F:18:B1:D7:80:0C:25:D9:01:47:22:48:46
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer:       /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial:       01962DF3C62B84DEB49ABBA012C5D43D2C63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number:          10DB
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: hnyEXab9vgW4MYt+RXO2ZPYHTm6oc5Xcw3nX88aejio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:2b:84:de:b4:9a:bb:a0:12:c5:d4:3d:2c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=32db3b087f4ada8f18b1d7800c25d90147224846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:ed:0a:88:6f:d1:11:d2:d8:d7:28:c5:1b:
                    10:6f:10:01:dc:f8:f6:f8:c8:44:ef:27:d3:6a:0d:
                    e7:ea:f1:82:98:69:2d:09:a5:90:08:9c:5b:00:0e:
                    a8:fb:a4:d1:95:5a:47:67:51:e0:6d:23:b4:82:73:
                    77:b2:f4:07:46:ff:32:cf:8b:6e:e9:c3:4b:f8:3c:
                    47:90:f6:03:88:be:99:85:7e:3c:7f:33:d0:9e:0c:
                    2d:e9:bf:71:69:6c:b7:57:bf:e2:c5:53:2b:23:f3:
                    5a:23:b8:36:d4:97:2f:ab:3f:4d:0b:4c:2a:cb:e5:
                    4e:93:6f:ce:52:fb:a9:c3:46:fb:e6:4a:98:14:e3:
                    98:54:c3:b4:8c:7e:8c:79:9d:ef:1d:ce:19:89:d7:
                    a8:2f:83:b9:5d:c8:0f:39:d0:44:5d:b0:31:9a:fb:
                    c4:ac:86:6f:72:4f:59:0b:17:36:99:e3:ce:7a:f5:
                    dc:c8:0f:f2:26:97:ca:47:9d:c5:6b:01:38:f1:27:
                    79:50:e7:55:26:00:c2:09:38:85:9f:69:90:ea:63:
                    cf:a0:f8:b0:47:ca:c7:e7:01:29:da:54:06:56:10:
                    d9:b0:de:34:bc:3d:4e:e2:4b:29:0d:7f:f5:f5:8b:
                    91:a5:29:a7:7c:06:3c:7b:4b:04:bb:f0:dc:08:30:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:3B:08:7F:4A:DA:8F:18:B1:D7:80:0C:25:D9:01:47:22:48:46
            X509v3 Authority Key Identifier:
                keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:91:14:43:9c:50:2b:39:f3:fa:2d:5a:bc:b0:7a:dd:ca:b8:
         93:83:5e:7b:db:a3:e4:66:3f:6e:8a:78:3e:63:34:fc:d2:e1:
         9b:9e:c8:96:59:56:56:92:54:f0:6c:b0:0d:9a:6d:6f:37:57:
         62:f3:07:69:24:fa:1c:09:6f:0e:9a:ac:17:1d:a2:1d:a3:ae:
         09:02:cb:29:cf:6b:01:14:6b:7a:f5:27:97:fa:95:67:df:8b:
         b5:f2:22:d2:04:30:76:b1:c8:ce:f2:37:71:c1:34:5c:d3:a9:
         f7:bc:26:72:8a:9a:6f:7a:e6:06:df:b4:76:f4:16:b1:94:12:
         bb:58:2c:05:a9:fe:16:7b:a9:1d:b8:60:b3:e9:89:bd:70:4a:
         f0:e2:68:9d:7a:f9:44:07:73:31:a1:30:35:cd:73:ff:25:7d:
         01:51:bd:f1:52:d0:de:d0:89:d7:7f:2c:56:0f:ab:b3:23:48:
         9b:77:95:c7:db:63:14:59:d6:fb:d5:d1:7f:3b:c4:b3:c8:8f:
         83:b2:c6:8f:04:41:b5:1d:4d:7a:c6:e4:76:f8:1f:b6:95:f1:
         bb:68:ea:f9:36:97:68:6c:4e:ad:78:e7:03:1d:f2:02:76:df:
         7e:1e:b8:26:f0:4c:eb:6b:e9:0b:59:66:45:4d:2f:da:be:e0:
         a5:f8:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----