Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File:                     HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier:          rIJcZ9l563wZcZ3qxXizoJQi+/Qo0EIOANAA6d4QmBA=
Subject key identifier:   AA:6A:5E:90:56:E3:9C:5C:0E:21:92:2E:D9:A2:A4:2A:66:7C:BD:5D
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer:       /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial:       01962FAB555B12FBF98A5DB12EBD0123D91B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number:          1177
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: J9POcvG3LXx8UKLr4L1S9aZnKfKQ1QBKAhJw4WgygLk=)
                          2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:5b:12:fb:f9:8a:5d:b1:2e:bd:01:23:d9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=aa6a5e9056e39c5c0e21922ed9a2a42a667cbd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:88:9e:79:83:c4:87:f0:69:e6:e3:7f:18:
                    c8:04:7c:20:57:b9:7f:ac:fe:45:59:f2:ba:e1:db:
                    b3:89:bc:98:d1:75:df:be:6b:b5:28:c7:f9:db:ae:
                    60:06:ad:af:3c:bd:fe:a3:42:1d:f7:d8:ce:d9:73:
                    15:21:1d:7d:e3:ed:11:a1:da:3a:dc:c5:d8:1a:6f:
                    f8:cc:b5:f3:20:1c:8b:42:99:54:34:19:99:6e:9a:
                    61:76:d6:eb:d8:3f:1d:95:03:92:f3:9c:07:71:f6:
                    c8:65:b5:73:41:32:35:58:17:67:cd:80:10:3b:4a:
                    bf:83:59:5a:8c:05:36:d5:08:fc:ff:aa:cf:f3:7e:
                    95:ca:6c:89:dd:23:13:27:e7:45:de:6a:eb:43:18:
                    61:f5:70:1b:1b:12:7b:0f:56:6e:dd:d1:c5:b0:60:
                    d7:d0:5a:b6:aa:33:48:8d:cf:0f:75:71:37:48:fa:
                    cf:69:ff:96:5d:77:d3:71:d7:01:f5:00:aa:21:cb:
                    f4:1b:2e:75:87:d0:97:08:cb:fa:4a:1c:b4:18:0c:
                    7b:97:64:8d:4f:2d:87:fc:04:7b:4a:f4:8a:3c:b7:
                    ef:4a:04:31:91:3c:64:8d:a4:7c:57:1e:07:af:a4:
                    bd:b6:92:be:c1:83:a2:cc:b5:25:88:86:ad:23:74:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:5E:90:56:E3:9C:5C:0E:21:92:2E:D9:A2:A4:2A:66:7C:BD:5D
            X509v3 Authority Key Identifier:
                keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:55:7d:bc:54:75:3b:0e:f1:ec:cd:59:8f:2b:c1:b5:09:
         8d:aa:1f:5f:b3:d1:b6:dc:c5:b4:a5:76:30:6f:f7:7d:16:b6:
         fd:f7:67:e9:11:8a:dc:01:6b:05:65:55:28:6c:5c:03:41:cf:
         79:e0:47:82:b7:f8:9c:bd:69:be:9e:1e:fa:0c:6a:b6:bb:73:
         1d:9e:bf:51:65:30:2c:a4:74:46:33:e9:e4:a4:00:ad:d6:44:
         3c:8b:fd:76:05:20:3f:30:ae:0a:a0:70:cb:c8:67:c4:a2:11:
         ff:b4:ca:7f:d8:9b:d4:dc:c4:f8:12:ca:ce:c6:e4:28:a9:fc:
         33:2c:17:b3:ff:03:6d:a5:0e:b4:13:22:16:3c:cc:4b:e9:44:
         c4:3f:ed:50:25:d6:4a:84:19:ce:41:cc:97:8e:1c:d2:b5:74:
         39:cf:28:14:8b:b5:cf:f1:c1:c6:6e:41:8f:75:bd:cb:f2:83:
         cb:91:e4:39:ef:9b:95:6c:f9:8c:25:32:ff:6c:a3:7d:8a:da:
         32:54:16:de:d9:a8:58:55:39:3e:18:ae:48:26:ae:f8:dc:c4:
         b0:c6:b7:13:57:ac:3e:79:fd:e5:e9:f0:00:7d:80:70:98:bd:
         9f:3c:0a:a0:ca:93:70:6f:16:47:ba:ae:31:aa:c1:d6:ff:9b:
         68:0e:2e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1VbEvv5il2xLr0BI9kbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz
OTM1MDAwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
EyhhYTZhNWU5MDU2ZTM5YzVjMGUyMTkyMmVkOWEyYTQyYTY2N2NiZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cKInnmDxIfwaebjfxjIBHwgV7l/
rP5FWfK64duzibyY0XXfvmu1KMf5265gBq2vPL3+o0Id99jO2XMVIR194+0Rodo6
3MXYGm/4zLXzIByLQplUNBmZbpphdtbr2D8dlQOS85wHcfbIZbVzQTI1WBdnzYAQ
O0q/g1lajAU21Qj8/6rP836VymyJ3SMTJ+dF3mrrQxhh9XAbGxJ7D1Zu3dHFsGDX
0Fq2qjNIjc8PdXE3SPrPaf+WXXfTcdcB9QCqIcv0Gy51h9CXCMv6Shy0GAx7l2SN
Ty2H/AR7SvSKPLfvSgQxkTxkjaR8Vx4Hr6S9tpK+wYOizLUliIatI3S/qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpqXpBW45xcDiGSLtmipCpmfL1dMB8GA1UdIwQY
MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt
ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0
LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsRVfbxU
dTsO8ezNWY8rwbUJjaofX7PRttzFtKV2MG/3fRa2/fdn6RGK3AFrBWVVKGxcA0HP
eeBHgrf4nL1pvp4e+gxqtrtzHZ6/UWUwLKR0RjPp5KQArdZEPIv9dgUgPzCuCqBw
y8hnxKIR/7TKf9ib1NzE+BLKzsbkKKn8MywXs/8DbaUOtBMiFjzMS+lExD/tUCXW
SoQZzkHMl44c0rV0Oc8oFIu1z/HBxm5Bj3W9y/KDy5HkOe+blWz5jCUy/2yjfYra
MlQW3tmoWFU5PhiuSCau+NzEsMa3E1esPnn95enwAH2AcJi9nzwKoMqTcG8WR7qu
MarB1v+baA4uQg==
-----END CERTIFICATE-----