Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File:                     Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier:          tvrENv0LTgu2YAqxEsakcQS8r933KKusyhFTkxwBfLw=
Subject key identifier:   A3:D8:48:F9:D7:04:3A:0D:EC:EB:D7:23:EF:27:47:57:29:17:EC:6E
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer:       /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial:       01962E9908A3D13CAD229237115C4DC8A7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number:          0BC5
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: TWjB7yZ6a+aYTHczFT2gsUQ29L4SClENzup6W/yVDCA=)
                          2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:08:a3:d1:3c:ad:22:92:37:11:5c:4d:c8:a7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=a3d848f9d7043a0decebd723ef2747572917ec6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:0b:e6:6e:3d:6c:e6:bb:64:0e:b2:6f:a7:
                    9d:73:ed:72:4f:a2:3a:19:b6:70:f0:60:2f:6f:0e:
                    94:f8:70:f4:67:d2:6a:a8:78:fc:d9:f5:f3:e2:ea:
                    e5:27:f8:25:f4:26:b1:43:b4:72:5e:11:c2:1e:0e:
                    5e:3d:97:c3:6d:35:60:21:7e:4f:82:b5:09:2a:f5:
                    d3:c5:da:00:07:6a:a1:f9:f2:71:8f:d5:7e:11:73:
                    a3:11:d4:ed:57:18:bd:21:72:0b:82:99:9e:3b:2f:
                    c2:32:b3:4f:f1:88:15:c9:e5:28:98:de:4a:e7:5d:
                    b2:4a:b9:86:7f:04:ad:d0:06:b5:95:81:03:df:80:
                    85:51:aa:0d:b7:79:01:9b:3b:d4:b8:49:c6:c4:56:
                    c4:8e:df:f8:b8:c1:a9:45:08:21:ec:e2:8f:1e:a4:
                    d0:ad:2e:95:cd:c6:c6:1e:27:b9:9d:4e:e1:ea:e7:
                    20:6c:ac:8c:f7:7c:b1:2b:b9:03:f6:f7:5b:b3:29:
                    d8:3a:04:cb:d1:ab:57:eb:ff:e8:0a:18:7a:e0:4c:
                    9b:3a:dc:e2:d9:8b:15:ad:01:56:a1:ec:c5:d0:02:
                    10:12:7c:5b:3b:ef:94:62:2c:22:5b:e1:de:aa:11:
                    d1:91:0a:5b:85:46:da:f9:7b:2b:31:11:92:98:0c:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:48:F9:D7:04:3A:0D:EC:EB:D7:23:EF:27:47:57:29:17:EC:6E
            X509v3 Authority Key Identifier:
                keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:85:37:24:82:73:85:96:d3:53:77:88:03:e1:f9:7b:fd:
         bb:15:46:d0:d0:71:04:36:55:8d:d3:a5:96:ab:e6:98:a7:86:
         4c:51:71:65:62:39:ab:7b:55:79:0a:5d:d3:82:1d:e6:c2:c3:
         c4:35:40:aa:ad:28:62:39:e4:c3:49:a9:dc:1f:7c:9f:15:d4:
         6f:e4:0b:26:cb:66:e5:49:38:10:6a:4f:eb:8a:3d:b4:85:15:
         e3:a7:f1:d1:70:60:17:41:1e:32:e0:66:ad:9c:8a:a9:f8:d9:
         7c:d3:0a:c4:32:d0:64:aa:bd:21:9d:bf:70:d4:6a:2e:d6:56:
         83:39:30:bb:37:1d:1d:10:b3:2b:84:5c:59:ed:50:cb:ba:c5:
         65:55:5e:89:12:96:36:0c:67:d4:dd:62:eb:6d:b1:71:7e:aa:
         09:bc:c4:a2:f2:8b:ce:7a:dc:43:a2:25:75:9b:96:b9:b0:79:
         ae:dc:99:c7:3d:b1:7d:bc:63:97:1a:b8:e5:3d:9d:78:42:55:
         48:03:93:3c:73:7c:e0:04:3c:39:66:cd:da:39:d9:05:40:97:
         06:85:57:3b:08:b4:15:ed:9c:1e:c0:3c:68:f0:65:6c:08:c8:
         d1:c2:e0:8e:2f:f8:a9:0a:78:fd:8d:1c:12:74:62:b2:48:56:
         6d:59:c6:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQij0TytIpI3EVxNyKerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwNDEzMTAwMTQzWhcNMjUwNDE0MTAwMTQzWjAzMTEwLwYDVQQD
EyhhM2Q4NDhmOWQ3MDQzYTBkZWNlYmQ3MjNlZjI3NDc1NzI5MTdlYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwEL5m49bOa7ZA6yb6edc+1yT6I6
GbZw8GAvbw6U+HD0Z9JqqHj82fXz4urlJ/gl9CaxQ7RyXhHCHg5ePZfDbTVgIX5P
grUJKvXTxdoAB2qh+fJxj9V+EXOjEdTtVxi9IXILgpmeOy/CMrNP8YgVyeUomN5K
512ySrmGfwSt0Aa1lYED34CFUaoNt3kBmzvUuEnGxFbEjt/4uMGpRQgh7OKPHqTQ
rS6VzcbGHie5nU7h6ucgbKyM93yxK7kD9vdbsynYOgTL0atX6//oChh64EybOtzi
2YsVrQFWoezF0AIQEnxbO++UYiwiW+HeqhHRkQpbhUba+XsrMRGSmAzvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPYSPnXBDoN7OvXI+8nR1cpF+xuMB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJOFNySC
c4WW01N3iAPh+Xv9uxVG0NBxBDZVjdOllqvmmKeGTFFxZWI5q3tVeQpd04Id5sLD
xDVAqq0oYjnkw0mp3B98nxXUb+QLJstm5Uk4EGpP64o9tIUV46fx0XBgF0EeMuBm
rZyKqfjZfNMKxDLQZKq9IZ2/cNRqLtZWgzkwuzcdHRCzK4RcWe1Qy7rFZVVeiRKW
Ngxn1N1i622xcX6qCbzEovKLznrcQ6IldZuWubB5rtyZxz2xfbxjlxq45T2deEJV
SAOTPHN84AQ8OWbN2jnZBUCXBoVXOwi0Fe2cHsA8aPBlbAjI0cLgji/4qQp4/Y0c
EnRiskhWbVnG9Q==
-----END CERTIFICATE-----