Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File:                     hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier:          xzoU00ShRLWAP9pqNWI1ntzXbSba91AQQrL0XC9s0aU=
Subject key identifier:   E0:60:21:35:BA:CE:58:2A:8F:5E:CB:B3:8E:50:D8:2B:A7:74:BF:92
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer:       /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial:       01962FAB9FC2ABEFACD35052BF8A320B6C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number:          056B
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: Kw49QnoalcUIwGD7L_UCEBnFzUk.roa (hash: 5nS3wTYqHyzRyVlDkHb3qPe9ElMZpDyRT50Au3dlMjE=)
                          2: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (hash: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=)
                          3: bAtdqWOn7XIMZb40RJnvw-dOPu0.roa (hash: ajLP5I+MW9lN2Pm4hOADp3bTpGVbkghpKs5apJzZVDw=)
                          4: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: IjDR6U49BS1LAha89GyBdoJOpJzB4UAFksJCut26i6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9f:c2:ab:ef:ac:d3:50:52:bf:8a:32:0b:6c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=e0602135bace582a8f5ecbb38e50d82ba774bf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:61:9e:90:cc:54:89:fc:70:6d:48:e1:b4:c5:
                    f9:60:f0:fb:d0:9b:ff:b1:69:df:b1:9c:f8:84:38:
                    ea:76:71:6a:96:68:78:7a:12:66:70:b4:30:01:91:
                    f1:75:09:9f:e8:c0:0b:aa:a9:4b:f8:7a:4e:a0:e1:
                    6d:62:3d:51:a6:86:e6:1a:cb:a4:8e:21:37:02:df:
                    5a:a4:49:30:43:ff:b0:a0:5d:76:9d:a5:62:29:1b:
                    95:3e:e2:f2:18:6d:63:e3:f8:44:60:cb:3f:0b:82:
                    10:ac:e9:d2:be:a3:3e:db:bc:0e:87:85:9c:7d:f6:
                    af:d4:d4:ba:37:f6:0c:7e:92:20:96:1d:4d:45:4b:
                    26:c7:67:b1:df:91:02:ff:76:6d:36:44:66:8d:a3:
                    1c:90:2c:76:8f:77:0e:9b:31:a9:62:e6:8b:cc:0d:
                    b2:28:e3:2a:19:f0:21:af:9b:59:a4:0b:6a:9d:63:
                    b4:bc:dc:60:ee:76:cb:03:45:f2:74:c8:7c:a8:8f:
                    5f:64:6d:6d:6c:d4:8c:44:33:cf:26:ce:77:d8:af:
                    a2:de:8c:ed:bb:a6:0e:28:15:58:79:ca:44:4d:7d:
                    a0:c4:48:5c:74:8b:44:2b:b0:61:30:5d:4d:af:11:
                    9f:99:7a:b0:6f:0f:3d:97:96:fd:cb:93:10:b5:19:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:21:35:BA:CE:58:2A:8F:5E:CB:B3:8E:50:D8:2B:A7:74:BF:92
            X509v3 Authority Key Identifier:
                keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:67:13:e6:53:5f:09:fd:00:da:3e:99:09:42:eb:3e:45:
         dd:cc:a4:b0:fa:da:19:fa:b0:f2:23:52:df:80:f6:1b:f6:80:
         fa:30:3e:bf:7d:ea:be:29:bd:50:0d:43:d1:5d:98:c7:11:24:
         90:ff:f9:9c:55:d5:9e:2a:45:6b:e4:1d:38:84:08:a1:af:24:
         88:fd:03:2a:f4:27:bf:29:3e:29:d7:85:dd:96:b4:d9:2a:5a:
         38:d9:92:25:31:6b:1b:5b:45:71:7a:b4:2e:c9:82:8f:cb:fe:
         86:5c:5d:a6:c8:e2:41:4d:b6:83:2a:59:cd:72:4c:25:09:7c:
         23:28:dc:8d:7b:ae:5e:f8:75:6e:02:b2:f5:fe:4a:4e:ae:c2:
         0d:eb:6c:e6:f2:a9:ea:f7:3e:a4:26:53:da:a4:3b:01:8e:6c:
         91:9a:c7:ed:83:e7:9b:53:7a:74:f4:98:bd:e3:b6:ea:4f:97:
         0e:a2:50:ba:41:83:3c:f2:2d:8e:ac:5e:5d:95:68:97:f1:fd:
         0c:2b:15:cf:11:05:a0:7d:2b:c3:12:c6:e9:35:11:e4:c4:dc:
         f3:be:b8:c3:43:76:3f:3f:b9:ec:2d:01:15:0e:bb:5f:b7:c1:
         73:9a:39:f2:7e:5d:0c:33:46:6b:3d:a0:95:df:d6:67:b4:a9:
         cc:44:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----