Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File:                     hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier:          +StA9C6zv78tYhUfMXyEhrBE/mNcDBFLrqIVEMPDWlI=
Subject key identifier:   CD:FE:1B:9E:94:CA:97:7A:9A:3F:D2:AB:E4:10:FF:07:0D:48:6D:5F
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer:       /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial:       01962E2AF506D239FEE4F3CC6D24FE93DEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number:          0697
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
                          2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: NuzMDcOwmXLGX8eekbhL9TPVDfQMgh1YZlKJlZiJb04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:06:d2:39:fe:e4:f3:cc:6d:24:fe:93:de:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=cdfe1b9e94ca977a9a3fd2abe410ff070d486d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:e5:05:16:c6:48:b6:dd:96:d3:bf:9b:7c:
                    31:4e:a7:eb:69:fe:45:cc:12:c8:69:c9:dd:3d:2f:
                    ec:7e:00:76:12:b4:f9:bf:49:91:74:8a:2c:14:f9:
                    07:ca:fe:73:f0:95:7e:4a:c0:44:e6:d9:75:b3:a5:
                    a7:e1:14:b3:d5:c9:e0:03:a0:04:d4:2d:f4:da:69:
                    3a:bb:81:46:eb:4b:d8:1a:64:e6:70:df:0d:a7:cd:
                    92:ac:99:c0:8c:f9:5a:d2:a1:b0:84:bb:34:c7:5d:
                    5b:93:cb:e7:84:38:04:de:45:de:60:b5:68:67:ff:
                    f9:0d:20:a8:f0:c9:90:67:4b:74:b5:24:18:12:15:
                    f9:8b:8d:2c:13:2e:f9:e1:1f:65:0d:9d:68:69:04:
                    4b:11:ab:68:74:c6:38:41:c5:87:a2:e1:9f:0b:56:
                    09:e5:8e:6f:43:b4:f8:e2:78:76:c8:84:39:ae:6d:
                    fb:80:1c:58:6b:e4:49:87:51:c1:d8:21:24:46:df:
                    54:88:04:5c:4d:0b:86:6c:15:ac:21:2b:5b:6b:91:
                    b4:76:6a:c0:44:1b:5d:82:a3:3d:6e:f7:f9:54:9f:
                    f9:0e:31:3c:fd:a3:16:93:32:72:48:bd:54:9d:e4:
                    5a:92:67:80:60:53:96:33:8e:d1:3f:00:1e:df:53:
                    94:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FE:1B:9E:94:CA:97:7A:9A:3F:D2:AB:E4:10:FF:07:0D:48:6D:5F
            X509v3 Authority Key Identifier:
                keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:06:87:da:f3:6d:9d:86:58:b2:28:26:7b:23:eb:4f:73:8a:
         fc:42:c8:e9:15:df:00:85:3e:a9:9a:c3:60:e4:df:a4:6f:c2:
         52:27:b6:db:20:27:c3:b3:65:a2:64:70:a7:0e:ba:74:71:60:
         09:55:d6:a8:53:11:92:09:34:65:e9:74:61:80:58:69:a1:5a:
         52:14:3c:fb:1b:1b:57:24:15:f7:47:55:71:10:bc:ce:3f:17:
         c4:e1:81:ab:a0:da:e8:d2:d1:20:38:5d:9b:8b:c4:a6:22:5a:
         b9:10:74:60:f0:c6:f6:64:0e:54:e1:47:e7:06:a8:34:b3:ff:
         4c:0b:89:09:56:a9:fd:e1:81:f2:6b:1c:a8:cb:04:da:cc:de:
         50:25:00:a9:e6:d3:f7:81:6f:18:59:39:73:60:90:6b:f7:25:
         08:c4:d7:25:98:67:c4:1a:08:55:21:e7:e2:10:de:a8:74:a3:
         c2:81:57:87:d9:3f:10:db:19:2e:bf:88:7b:7b:f3:08:c2:83:
         04:05:3f:68:6a:83:ae:a2:f4:53:fd:ac:9d:05:7e:e8:b7:f5:
         8e:a4:d9:e1:92:cf:e5:d0:dd:b6:51:ed:52:52:e5:32:95:ba:
         84:74:02:06:b2:4b:15:b9:28:0e:59:9c:2f:15:e2:db:f0:51:
         c7:84:95:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvUG0jn+5PPMbST+k97JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTYzZDAwMzEzNGNjZGE1NmZlZGZlYjI3OGY3YTc2OGE3
ZjQwMmYwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
EyhjZGZlMWI5ZTk0Y2E5NzdhOWEzZmQyYWJlNDEwZmYwNzBkNDg2ZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPvlBRbGSLbdltO/m3wxTqfraf5F
zBLIacndPS/sfgB2ErT5v0mRdIosFPkHyv5z8JV+SsBE5tl1s6Wn4RSz1cngA6AE
1C302mk6u4FG60vYGmTmcN8Np82SrJnAjPla0qGwhLs0x11bk8vnhDgE3kXeYLVo
Z//5DSCo8MmQZ0t0tSQYEhX5i40sEy754R9lDZ1oaQRLEatodMY4QcWHouGfC1YJ
5Y5vQ7T44nh2yIQ5rm37gBxYa+RJh1HB2CEkRt9UiARcTQuGbBWsIStba5G0dmrA
RBtdgqM9bvf5VJ/5DjE8/aMWkzJySL1UneRakmeAYFOWM47RPwAe31OUBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3+G56Uypd6mj/Sq+QQ/wcNSG1fMB8GA1UdIwQY
MBaAFIaWPQAxNMzaVv7f6yePenaKf0AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQt
MTIxZDJjYmIyMWQ2LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQtMTIxZDJjYmIyMWQ2
LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQaH2vNt
nYZYsigmeyPrT3OK/ELI6RXfAIU+qZrDYOTfpG/CUie22yAnw7NlomRwpw66dHFg
CVXWqFMRkgk0Zel0YYBYaaFaUhQ8+xsbVyQV90dVcRC8zj8XxOGBq6Da6NLRIDhd
m4vEpiJauRB0YPDG9mQOVOFH5waoNLP/TAuJCVap/eGB8mscqMsE2szeUCUAqebT
94FvGFk5c2CQa/clCMTXJZhnxBoIVSHn4hDeqHSjwoFXh9k/ENsZLr+Ie3vzCMKD
BAU/aGqDrqL0U/2snQV+6Lf1jqTZ4ZLP5dDdtlHtUlLlMpW6hHQCBrJLFbkoDlmc
LxXi2/BRx4SVfQ==
-----END CERTIFICATE-----