Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File:                     HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier:          uxAtE4och81AZjxJpvv8nPRvmFThbchc3xR9pgY32gg=
Subject key identifier:   82:BE:46:49:C7:35:8E:B7:AC:10:53:DB:2D:77:62:68:4E:0A:DE:E7
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer:       /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial:       01962E61C32B8B5AAA9FE0D4149302667DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number:          0A44
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: Bh5IC48JAR5FB63v2dnakNOTX34.roa (hash: FMLGNxpZDrf8rppZSMEnpJR9pt6oa5eJBxowJrkMq7o=)
                          2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: YjyXWLp0EL+tUfViB8h1OSs73KuLanOSFrma1A1LpAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:2b:8b:5a:aa:9f:e0:d4:14:93:02:66:7d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=82be4649c7358eb7ac1053db2d7762684e0adee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:14:5f:f0:a4:98:7b:b1:4d:54:b1:d0:9f:
                    37:19:a4:02:22:9a:eb:b2:94:9d:32:7a:f9:1d:70:
                    7c:97:16:4e:34:6e:c8:cc:b5:b5:95:7e:d7:07:f8:
                    90:e7:7f:c7:50:31:c7:b3:29:08:f9:4b:5c:3d:8c:
                    f7:7d:e2:43:f7:24:20:05:c2:2a:5e:9d:2e:fd:3c:
                    9b:9b:9b:c8:71:ef:87:b2:44:60:aa:3d:e1:fe:ed:
                    94:0a:b6:ad:93:f7:c5:90:34:aa:77:85:5c:fe:7c:
                    f8:7f:aa:e4:1a:c8:1c:b9:26:7a:12:1a:a9:33:ed:
                    9f:b2:f4:98:26:37:c4:80:f2:e7:96:d9:39:f3:c1:
                    0c:88:49:04:64:96:c6:eb:d8:f7:1d:7b:9a:66:93:
                    6a:4b:52:af:d0:4f:42:e3:86:1e:b6:34:ca:f7:d5:
                    0f:f2:7f:5d:da:7d:4b:a4:6a:e7:8c:34:74:3c:48:
                    ee:f1:aa:c8:e7:58:4e:56:cb:2a:06:0d:66:12:b7:
                    f9:17:4c:43:42:1d:f7:86:7c:47:5a:92:86:6e:aa:
                    da:11:50:5e:17:aa:85:77:7b:a5:2d:ca:ac:1b:5f:
                    09:7a:6f:b3:86:f3:47:98:78:d9:35:9f:2b:30:1e:
                    d8:de:a1:a0:b1:c9:d8:b9:56:7e:07:62:d4:12:d7:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:46:49:C7:35:8E:B7:AC:10:53:DB:2D:77:62:68:4E:0A:DE:E7
            X509v3 Authority Key Identifier:
                keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:88:99:c7:a4:fb:81:2e:0e:35:fc:85:03:8d:95:4c:c1:
         d8:6c:c5:0d:ce:23:fa:f0:e8:45:87:e9:2f:8d:d1:40:bf:d2:
         9f:67:17:60:26:7c:7c:a2:85:50:e7:7d:ec:80:d8:83:50:86:
         c3:7f:53:0b:5e:13:da:55:ad:40:e3:f5:25:7e:b5:c1:b5:7d:
         d6:2b:e1:a8:13:a4:9e:3d:cd:d1:55:9c:06:f6:d6:86:55:05:
         62:c0:b5:25:f0:18:5d:a5:8e:52:49:a3:f0:cd:5e:fd:bd:35:
         8d:77:5b:d7:b8:49:5e:50:ed:8e:18:44:d2:38:46:a5:8e:fc:
         f4:de:a2:d5:71:95:b5:99:57:3f:9a:0e:aa:49:85:79:b7:55:
         c2:73:05:e0:4f:91:37:e8:1a:1a:a9:4d:b5:dc:ba:01:33:7c:
         f3:b5:87:a3:47:f3:d4:71:f9:ea:93:2d:87:61:0f:2f:fa:52:
         2b:1d:b5:62:aa:4a:c9:0b:67:22:34:5b:e5:2a:44:f5:da:c4:
         47:7d:22:f6:71:60:36:b4:48:c8:df:4e:f9:10:a0:18:de:7a:
         e2:b5:cd:b0:71:b4:14:94:61:27:c0:2d:0c:8b:e7:94:09:b4:
         b2:8a:7c:3e:9c:0e:e9:16:d3:b0:21:cc:31:06:27:50:75:3d:
         ed:66:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----