Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
File:                     hesz_RfSMvvmsq22bLCv4N7pA7A.mft (raw, json)
Hash identifier:          E87bDZB56nx4ijfZnJFz/6jHR/2nnUNoa2R/XDtH5gg=
Subject key identifier:   32:90:C3:0D:FC:BB:85:6F:8D:95:74:F1:04:7A:A7:5E:60:3D:98:68
Authority key identifier: 85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
Certificate issuer:       /CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0
Certificate serial:       01962F3DE277BDE5A93891223D2AF6DA0244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
Manifest number:          0377
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: hesz_RfSMvvmsq22bLCv4N7pA7A.crl (hash: bVYPd8FHorhqIo8Qwjhb3InN9MDaPOc2oq6PYY9NwUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e2:77:bd:e5:a9:38:91:22:3d:2a:f6:da:02:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=3290c30dfcbb856f8d9574f1047aa75e603d9868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:12:3e:2c:24:0f:4a:a1:9e:e7:2c:6d:97:
                    16:2c:3c:a1:71:37:49:c1:b6:0f:21:32:c9:72:21:
                    66:ff:e6:88:e4:d4:c0:c3:52:6a:0f:ca:c7:dd:1f:
                    32:23:95:a4:93:b7:10:00:9b:19:83:7a:f8:c3:6f:
                    13:d1:3a:f8:e6:27:89:0d:ae:b4:50:f5:3a:97:25:
                    24:83:f7:45:3b:e2:12:92:a3:75:67:58:19:57:55:
                    58:fd:71:72:67:bf:6e:b4:42:15:81:c9:7e:30:31:
                    18:3e:e9:bf:cc:b3:5d:72:9f:6f:7d:7a:2c:13:47:
                    e3:3f:85:c2:a3:ee:34:7a:14:55:6b:0e:fc:63:a9:
                    63:48:e1:bb:0d:d7:bc:f0:7a:97:cd:a2:14:06:11:
                    11:b7:af:7c:c2:6c:93:b9:23:aa:34:60:75:77:5b:
                    5e:9e:09:69:30:b7:41:99:e7:71:d5:a2:fb:4d:83:
                    4a:8d:d4:b8:52:20:d3:df:93:2b:10:68:63:d9:83:
                    d9:06:9a:99:2a:3a:f8:0d:98:15:3a:dc:cd:de:d0:
                    0a:65:cc:4f:06:bc:35:34:af:d1:43:d1:18:4e:07:
                    57:42:99:1f:2c:d2:24:72:3c:fe:0b:b4:cb:89:0e:
                    4d:bf:bc:5e:da:3b:94:7a:2e:b5:52:2e:5f:92:75:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:90:C3:0D:FC:BB:85:6F:8D:95:74:F1:04:7A:A7:5E:60:3D:98:68
            X509v3 Authority Key Identifier:
                keyid:85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:8a:8e:c0:c1:ea:8b:2b:8f:77:63:05:44:05:a3:94:d9:
         38:77:2c:a6:0a:95:66:2f:cf:b8:cb:46:93:3f:37:f6:1f:f6:
         40:4e:16:26:09:92:b6:52:f8:da:6b:7b:f4:bf:81:fe:b8:f5:
         8d:1f:42:2f:d8:84:9b:2c:0f:6a:03:b3:8f:31:63:ce:48:7d:
         40:3a:e3:6d:3b:c1:4b:20:da:3c:a9:4e:45:60:59:60:fd:a5:
         db:c3:f0:7b:64:0f:a2:1b:e2:bf:81:e9:19:63:ca:ef:30:1c:
         4b:3c:cb:37:1f:f6:04:b6:e5:d5:b5:14:7b:fe:be:53:0a:e5:
         13:80:5b:7f:5b:a6:0c:11:98:59:d0:22:1b:2e:51:48:86:31:
         af:28:2c:9c:05:33:24:50:40:66:37:fa:6c:43:4a:bd:2d:8e:
         77:61:ab:da:10:36:6b:5b:42:ff:e7:c6:aa:8e:c1:a0:6d:81:
         7e:73:aa:5a:fb:fc:08:db:04:46:29:e9:4f:74:59:15:d5:10:
         11:5c:f5:1f:77:a6:99:5b:52:aa:04:bc:0e:d1:55:1f:3c:cb:
         26:b4:fb:8b:a8:7a:e7:ed:ce:e0:c0:94:29:18:bd:33:6e:e8:
         eb:86:2d:2f:f1:d9:7a:d7:fb:ac:e2:67:03:3e:c1:e6:d4:37:
         ab:7a:f4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----