Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
File:                     rhexu-eM5Aqh7G0neLweTqKVFn4.mft (raw, json)
Hash identifier:          pSjrI3Qr0+0kn+3HmZKunUkxZkSx4ubziy/sUL6iYfE=
Subject key identifier:   96:82:E4:51:AF:61:DC:49:93:95:D5:7A:9C:70:16:17:C8:1F:6E:CE
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Certificate issuer:       /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial:       01962DF3D6257900BA1ABD874D85748A18E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: QVia0R-C1R2OtBKefX55cNuuXdw.roa (hash: 5hYta4LOp/wluPpRpLQ0dqF8+c0Z+WJxjmlf/9qWqq0=)
                          2: rhexu-eM5Aqh7G0neLweTqKVFn4.crl (hash: 7Vh13N3Tkz1cK/j0OL2vx9qUY3Q6WOGwT4ebgjJNi/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:25:79:00:ba:1a:bd:87:4d:85:74:8a:18:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=9682e451af61dc499395d57a9c701617c81f6ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ac:69:87:f8:aa:13:36:a2:8d:30:84:fe:e5:
                    cb:1e:fd:9d:49:72:f3:33:a7:91:6c:cc:72:a6:ef:
                    69:1a:27:36:35:0f:05:0c:41:7e:18:82:12:30:af:
                    b4:11:11:fd:eb:7f:99:4b:4c:46:b3:f9:b4:29:b5:
                    da:c3:a0:ed:71:f3:0b:fa:9b:5f:4d:d9:7c:22:46:
                    15:d0:d5:c6:b6:51:52:71:e8:37:dd:f9:a6:8c:44:
                    dc:49:6b:5e:54:0f:00:85:12:7a:62:57:11:cf:79:
                    b6:01:46:fb:bb:d0:c4:e5:28:38:e7:e0:f4:99:96:
                    95:5e:6d:cf:15:bb:e1:33:ad:54:ed:48:04:2e:36:
                    c1:0d:a6:ba:a0:e0:dc:29:33:85:33:c1:27:9c:23:
                    00:ba:85:a9:ce:67:d6:60:13:24:5f:31:5a:d9:cf:
                    08:ca:a5:e1:e8:2d:1b:85:5a:52:fb:be:12:14:f8:
                    63:58:b4:c5:73:ac:34:60:ee:cc:81:8e:0b:87:44:
                    8d:08:93:b6:05:fe:f1:17:cb:bc:8c:b8:ec:96:ee:
                    1e:00:e8:29:3a:df:91:d0:be:be:06:83:0a:6d:e6:
                    61:3c:38:f5:bf:9e:86:c3:35:54:2d:56:67:ff:f1:
                    65:41:4c:ae:cb:cc:80:07:bd:37:73:c7:52:06:41:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:E4:51:AF:61:DC:49:93:95:D5:7A:9C:70:16:17:C8:1F:6E:CE
            X509v3 Authority Key Identifier:
                keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:53:ff:81:e4:98:bb:9a:c3:22:5f:5c:73:f6:c0:e1:1e:
         9c:83:a4:53:9d:96:3d:7b:6f:08:44:b7:e4:81:22:3c:be:0d:
         e8:70:f7:88:1e:62:b7:b4:2c:32:84:b1:69:f8:91:4f:9e:87:
         10:2e:b0:a1:58:08:1c:67:97:f5:a5:6a:81:c0:98:d1:47:90:
         b6:30:97:86:28:77:91:3e:47:44:af:7a:0e:4c:9b:db:08:d1:
         ad:be:85:cd:9f:22:e6:50:2b:7c:20:60:7e:96:dc:5d:17:2a:
         23:4d:63:c6:5b:1a:3c:4a:71:4c:1c:bd:f5:33:05:8e:8a:cf:
         c4:c8:6c:23:50:b8:be:85:59:5f:00:ab:b1:1c:61:b3:34:48:
         36:2a:ad:1c:b9:76:d9:f3:62:3f:db:d9:ad:1d:5d:5f:5b:2b:
         c3:74:09:0f:4e:a2:b1:75:4d:8f:ed:c0:bc:41:01:99:e7:e4:
         51:97:f7:d4:74:f0:f4:d6:f3:8e:6d:be:fa:fd:e5:e6:c9:99:
         45:31:70:90:8a:5f:8b:d0:77:c5:e1:ca:9e:ff:0e:8f:0e:f8:
         b4:35:d4:ee:5a:bd:ec:70:a1:36:38:85:3f:53:a0:27:ea:35:
         0c:6c:3c:12:c0:9b:b6:2e:4b:95:8d:33:33:b4:9c:f4:c6:2b:
         79:2c:0d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89YleQC6Gr2HTYV0ihjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMTdiMWJiZTc4Y2U0MGFhMWVjNmQyNzc4YmMxZTRlYTI5
NTE2N2UwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
Eyg5NjgyZTQ1MWFmNjFkYzQ5OTM5NWQ1N2E5YzcwMTYxN2M4MWY2ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqxph/iqEzaijTCE/uXLHv2dSXLz
M6eRbMxypu9pGic2NQ8FDEF+GIISMK+0ERH963+ZS0xGs/m0KbXaw6DtcfML+ptf
Tdl8IkYV0NXGtlFSceg33fmmjETcSWteVA8AhRJ6YlcRz3m2AUb7u9DE5Sg45+D0
mZaVXm3PFbvhM61U7UgELjbBDaa6oODcKTOFM8EnnCMAuoWpzmfWYBMkXzFa2c8I
yqXh6C0bhVpS+74SFPhjWLTFc6w0YO7MgY4Lh0SNCJO2Bf7xF8u8jLjslu4eAOgp
Ot+R0L6+BoMKbeZhPDj1v56GwzVULVZn//FlQUyuy8yAB703c8dSBkEt4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaC5FGvYdxJk5XVepxwFhfIH27OMB8GA1UdIwQY
MBaAFK4XsbvnjOQKoextJ3i8Hk6ilRZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmhleHUtZU01QXFoN0cwbmVMd2VUcUtWRm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NDg1YmUtZDc3OS00MWY1LWE1NTgt
ZTZhYzliNmEyMTllLzEvcmhleHUtZU01QXFoN0cwbmVMd2VUcUtWRm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80NDg1YmUtZDc3OS00MWY1LWE1NTgtZTZhYzliNmEyMTll
LzEvcmhleHUtZU01QXFoN0cwbmVMd2VUcUtWRm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdRT/4Hk
mLuawyJfXHP2wOEenIOkU52WPXtvCES35IEiPL4N6HD3iB5it7QsMoSxafiRT56H
EC6woVgIHGeX9aVqgcCY0UeQtjCXhih3kT5HRK96Dkyb2wjRrb6FzZ8i5lArfCBg
fpbcXRcqI01jxlsaPEpxTBy99TMFjorPxMhsI1C4voVZXwCrsRxhszRINiqtHLl2
2fNiP9vZrR1dX1srw3QJD06isXVNj+3AvEEBmefkUZf31HTw9Nbzjm2++v3l5smZ
RTFwkIpfi9B3xeHKnv8Ojw74tDXU7lq97HChNjiFP1OgJ+o1DGw8EsCbti5LlY0z
M7Sc9MYreSwNAQ==
-----END CERTIFICATE-----