Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File:                     hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier:          NxvGN+M33R2WfI8XjWoE5g4wnuo+XW1s2ktGgU0ikSo=
Subject key identifier:   C7:7B:2F:6E:44:5E:AD:BA:0D:B6:3F:69:07:BF:5F:4C:B0:9D:37:7F
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer:       /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial:       01962F065F5A335AD060D0AF5E4150EAC315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number:          0489
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: QvXelSI/xWdazv8+EpwHk6tNAhmme4Je3BcAjPFcwyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5f:5a:33:5a:d0:60:d0:af:5e:41:50:ea:c3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=c77b2f6e445eadba0db63f6907bf5f4cb09d377f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:bb:1d:54:ef:2a:fe:27:e8:b4:c1:79:fd:
                    4f:2a:bf:01:d2:17:32:75:06:b5:17:99:7a:13:ca:
                    ca:b5:e9:e9:17:f9:93:62:d3:b7:14:12:03:34:0f:
                    9a:62:d5:c0:88:2f:8a:cf:7d:d8:e7:d7:7e:a0:a9:
                    4c:c6:9a:a1:38:bb:1a:84:15:6e:c7:07:45:50:5a:
                    8a:30:a9:ee:16:67:04:e3:b2:22:cc:92:62:da:fc:
                    53:4b:68:75:dd:a3:c6:df:dc:37:48:06:f8:85:87:
                    75:e9:e8:f7:f8:6a:12:0b:d0:34:f1:13:10:1c:c1:
                    c5:95:e6:18:2b:ba:f8:19:74:0b:2f:e7:71:8c:32:
                    0a:52:85:61:2b:40:cc:db:66:fb:b3:00:6c:33:a1:
                    5f:25:5d:ff:fb:e5:46:53:39:99:ec:3f:4c:a3:d6:
                    ae:a8:a5:b1:36:92:9a:4e:de:27:b3:93:39:04:57:
                    49:44:28:db:46:2b:7b:f1:d6:34:a2:0e:22:bd:23:
                    9b:44:66:2d:fc:38:60:f0:7d:d4:68:9d:83:31:b0:
                    da:97:17:d6:e9:44:b4:25:ba:e1:c9:7f:be:4f:e3:
                    64:44:8f:fb:a1:fc:e4:b6:ce:a6:24:31:8f:65:66:
                    f9:e7:03:9a:fd:89:86:1c:38:58:76:51:36:3d:1c:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:2F:6E:44:5E:AD:BA:0D:B6:3F:69:07:BF:5F:4C:B0:9D:37:7F
            X509v3 Authority Key Identifier:
                keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:52:61:b5:d8:ad:0f:e3:c7:af:6f:60:2b:67:90:63:87:2b:
         53:47:6f:b7:99:35:a2:0d:8b:37:b1:94:2e:b2:44:9c:09:94:
         2b:c6:eb:89:4d:c2:9a:61:68:30:47:de:c4:0c:e5:38:54:cc:
         01:67:7e:c2:76:23:ab:70:bf:21:8a:b1:78:9c:98:e0:8f:2c:
         82:4b:b2:e9:70:a3:7c:78:52:73:f3:fc:0a:99:3c:69:65:a5:
         6c:4c:59:4f:d7:ea:01:d9:25:5f:71:b4:e2:c0:fb:05:6c:d3:
         07:25:ac:d3:d6:eb:b4:2c:e7:00:06:51:b9:50:8e:7c:a0:8f:
         b5:d9:20:55:3a:70:55:eb:35:2a:82:70:bf:b5:cf:db:d4:9d:
         a1:1f:b6:4e:21:70:d2:c9:39:63:3d:34:78:b9:32:21:3a:7e:
         07:8f:bc:e5:66:e3:55:2a:15:1a:b1:57:10:3b:e8:ef:73:db:
         60:ac:f2:a8:0b:4c:df:3d:28:98:43:03:6b:fc:d4:af:b8:a6:
         0b:16:72:3b:ff:67:5f:5a:84:12:ed:7e:db:3d:52:08:bc:1f:
         b1:0a:c9:32:4a:5f:9f:25:ba:d3:e8:f8:69:a9:16:1c:71:27:
         a7:03:69:cb:0f:d5:c0:85:b4:87:2d:2c:4c:99:f6:e1:8c:3f:
         98:d2:ad:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBl9aM1rQYNCvXkFQ6sMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTg4NzJhYjlmYTJiYTAyY2IwMWE0NGNlOGViODc2NDEy
ODFjMWMwHhcNMjUwNDEzMTIwMTA4WhcNMjUwNDE0MTIwMTA4WjAzMTEwLwYDVQQD
EyhjNzdiMmY2ZTQ0NWVhZGJhMGRiNjNmNjkwN2JmNWY0Y2IwOWQzNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxe7HVTvKv4n6LTBef1PKr8B0hcy
dQa1F5l6E8rKtenpF/mTYtO3FBIDNA+aYtXAiC+Kz33Y59d+oKlMxpqhOLsahBVu
xwdFUFqKMKnuFmcE47IizJJi2vxTS2h13aPG39w3SAb4hYd16ej3+GoSC9A08RMQ
HMHFleYYK7r4GXQLL+dxjDIKUoVhK0DM22b7swBsM6FfJV3/++VGUzmZ7D9Mo9au
qKWxNpKaTt4ns5M5BFdJRCjbRit78dY0og4ivSObRGYt/Dhg8H3UaJ2DMbDalxfW
6US0JbrhyX++T+NkRI/7ofzkts6mJDGPZWb55wOa/YmGHDhYdlE2PRwrDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd7L25EXq26DbY/aQe/X0ywnTd/MB8GA1UdIwQY
MBaAFIYYhyq5+iugLLAaRM6OuHZBKBwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMt
YmQ2OWY1MjYxODFiLzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMtYmQ2OWY1MjYxODFi
LzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFJhtdit
D+PHr29gK2eQY4crU0dvt5k1og2LN7GULrJEnAmUK8briU3CmmFoMEfexAzlOFTM
AWd+wnYjq3C/IYqxeJyY4I8sgkuy6XCjfHhSc/P8Cpk8aWWlbExZT9fqAdklX3G0
4sD7BWzTByWs09brtCznAAZRuVCOfKCPtdkgVTpwVes1KoJwv7XP29SdoR+2TiFw
0sk5Yz00eLkyITp+B4+85WbjVSoVGrFXEDvo73PbYKzyqAtM3z0omEMDa/zUr7im
CxZyO/9nX1qEEu1+2z1SCLwfsQrJMkpfnyW60+j4aakWHHEnpwNpyw/VwIW0hy0s
TJn24Yw/mNKtAw==
-----END CERTIFICATE-----