Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File:                     he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier:          KWGvUpIR3Hko6+0VSWXzmzhMvBTHhauRJpz4RTx3joc=
Subject key identifier:   D9:DC:8B:E8:90:12:32:F2:2E:B0:31:6D:39:CF:9F:75:F8:30:C5:E0
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer:       /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial:       01962E2B0B8E605B403090E940FDF6DEB04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: NNPxjd666IqldYHAaE6vlryK3hzYGpkOetcBv99aFY8=)
                          2: vNgalWxKyCFGqWuDm-_4-hQvAN8.roa (hash: dwnMTxgyRJ4mgwfPlrMhwXTTLitc5c5TREsY1/YmwBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0b:8e:60:5b:40:30:90:e9:40:fd:f6:de:b0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=d9dc8be8901232f22eb0316d39cf9f75f830c5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:81:e0:7d:a5:c6:fd:81:8f:d5:45:f9:5c:
                    b6:78:d6:ab:72:09:b6:61:f6:f9:3d:ea:c1:d6:31:
                    82:69:e9:2e:a6:e4:31:4b:81:e2:ab:c1:e8:af:63:
                    b2:47:60:c0:ce:36:14:49:00:e5:be:84:fa:6e:45:
                    2a:c1:e6:01:a1:09:fd:92:55:36:f9:c1:73:af:f8:
                    ad:a9:fa:a8:5a:8a:27:78:51:41:af:ad:48:d6:bb:
                    e4:03:c9:ef:74:89:ff:32:c0:49:92:81:db:a9:3e:
                    9f:24:d5:fb:69:be:98:b3:8b:2c:aa:73:80:cf:ba:
                    cd:8b:64:23:b8:8f:65:7e:e9:04:a9:5c:2c:10:e9:
                    e2:eb:4f:6b:9e:af:05:5f:6d:fc:9c:81:65:14:e1:
                    34:28:e7:9e:dd:bd:b5:74:96:5c:5b:6f:62:2d:e0:
                    7e:7b:bc:dc:ba:69:84:b3:9d:0f:87:ff:4d:66:e9:
                    bf:7d:8a:df:b4:26:99:70:c2:02:ad:91:17:0c:be:
                    21:db:1a:05:8e:fc:5c:5e:4d:3b:3a:92:d2:c8:76:
                    32:d8:aa:f6:fc:31:5f:6a:97:8a:cc:dd:3b:44:ae:
                    da:21:a6:5c:f3:6c:4c:39:39:b9:70:ce:75:8f:20:
                    6d:6e:d8:95:e7:6b:f3:97:e2:f2:29:2c:93:8c:63:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:8B:E8:90:12:32:F2:2E:B0:31:6D:39:CF:9F:75:F8:30:C5:E0
            X509v3 Authority Key Identifier:
                keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:1f:96:92:40:6f:7d:27:67:35:4f:0f:68:d2:84:f8:70:
         d9:52:f3:fa:4f:f3:e8:fc:91:2c:65:15:3b:07:1e:6e:19:fb:
         52:1f:f7:e1:cb:40:50:de:2e:8a:de:ef:87:8c:12:8c:43:06:
         a2:b0:86:8b:39:68:dd:cf:c8:41:6c:37:07:f7:e0:4b:17:65:
         d4:b9:61:18:0d:82:62:6d:de:a7:c5:9a:6e:27:31:e7:ff:99:
         3c:60:52:79:32:46:a8:1e:5b:fc:34:c8:be:58:ac:ed:af:86:
         67:6c:e7:09:e6:02:22:ca:3b:ea:c7:44:a6:f8:99:26:60:08:
         01:dd:7b:fa:02:2d:d2:e4:7f:e4:1b:97:72:63:b9:9e:f7:bf:
         03:56:be:ea:be:74:18:0d:7e:1b:d6:3e:f6:d1:74:9a:61:ec:
         f7:d1:a0:4c:eb:a4:fe:f1:76:fc:f7:2b:33:71:3c:4f:ca:66:
         ce:b0:7b:69:81:86:7f:1b:2f:05:84:58:c6:b2:fc:f6:4f:ad:
         91:27:f1:96:07:38:ff:65:ef:1b:0b:53:92:f9:47:83:f3:1c:
         bb:29:24:cf:fa:f7:90:66:53:9f:d7:00:d5:2b:b1:58:b7:d9:
         30:2a:54:32:66:0f:a6:0b:fc:c5:bb:52:9b:fb:35:2f:a6:95:
         ef:c3:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----