Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
File:                     h1bSd2jhHZSgu837P7zXQNRaAPQ.mft (raw, json)
Hash identifier:          BzXq1A0/6aCQaDXq0M0rNoZE4l+4jI3r+DUUZ/KG6FM=
Subject key identifier:   EA:51:DD:D5:59:FF:DA:85:D6:EE:74:4E:1E:DA:8E:5F:55:94:F6:B8
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Certificate issuer:       /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial:       01962E98C734D9B1F8995F78FA1C88AF8FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
Manifest number:          0FCC
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: b2XsYiMu1xHQndcNQ0ucXkzeN7E.roa (hash: uYxfaCmhcw362gqaEMF6PdCZbjIYOfXpyFCpshaBqpM=)
                          2: h1bSd2jhHZSgu837P7zXQNRaAPQ.crl (hash: HxKYWI+UHGumJUVXCDVvAuX7KBmKOu7uSWULnbaPgKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:34:d9:b1:f8:99:5f:78:fa:1c:88:af:8f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=ea51ddd559ffda85d6ee744e1eda8e5f5594f6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:29:90:3f:ff:94:ac:11:86:92:90:49:c2:
                    73:70:20:01:2a:19:1f:d8:5e:81:db:34:e4:89:f8:
                    f4:9c:a9:f2:9f:f9:e2:81:df:56:c2:7b:91:12:dd:
                    ba:71:40:61:dd:20:18:4b:47:77:7c:f7:96:c0:3e:
                    60:6f:ae:97:51:3d:5f:da:14:eb:64:63:fa:0e:c5:
                    61:7f:1e:26:08:10:39:8e:0a:2b:ff:a4:9c:7e:d4:
                    c6:4e:dd:00:3c:ef:e7:16:bb:30:80:5f:a0:8b:3d:
                    a4:f8:ff:7f:7e:8c:d1:56:0e:ea:82:20:ed:01:5f:
                    1e:14:38:22:1f:01:b7:54:e4:60:c3:d3:fc:2c:9e:
                    af:7c:5d:cd:a6:8b:79:92:f3:25:4c:e9:ee:c9:01:
                    61:f8:50:89:05:da:73:22:b2:8a:17:af:ee:69:8b:
                    3d:2b:0b:98:27:4d:5e:83:f5:18:98:5f:49:50:79:
                    b5:33:0f:6e:e8:54:d8:05:70:77:a8:91:21:83:d0:
                    92:ee:43:1a:50:b9:de:ac:67:81:dd:31:65:04:35:
                    b0:ed:75:d6:2d:81:e7:a6:b7:5c:fa:d7:f8:1c:6e:
                    bf:70:96:f9:dd:be:11:2b:c8:71:0c:9f:8b:66:27:
                    c1:dd:4b:4f:15:02:47:8a:18:02:6d:23:a7:a1:39:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:DD:D5:59:FF:DA:85:D6:EE:74:4E:1E:DA:8E:5F:55:94:F6:B8
            X509v3 Authority Key Identifier:
                keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:28:f9:04:b2:9c:c6:15:6c:6a:16:03:ef:ab:dd:42:0e:
         d7:57:28:28:7c:29:19:74:f5:36:9f:d6:68:c9:b9:54:3c:6a:
         64:cc:06:f0:a6:58:b5:07:6b:9e:03:c5:20:f6:ab:30:e7:fd:
         a6:0e:c1:74:06:6f:d3:3a:2a:32:72:2d:df:6b:71:65:cb:e5:
         81:8f:4c:2e:e6:8d:a2:5d:fc:ec:26:42:9f:e3:b6:72:7c:5a:
         d0:0d:d8:4b:bb:44:f2:7e:d4:e6:9d:cc:f2:2f:63:64:ea:dd:
         7d:fc:56:08:27:15:66:7d:d9:25:17:f6:db:e5:90:ae:f9:3a:
         29:bf:03:ea:15:06:e1:e2:5e:bb:58:40:e6:55:cd:3d:91:27:
         a2:43:a3:01:4a:76:eb:35:22:e5:b0:ef:a2:4e:ae:6a:62:50:
         c5:4a:16:af:e5:c1:65:8f:80:8f:a2:c7:1b:bf:4d:84:28:39:
         ad:d1:19:1a:dc:f4:ec:f3:da:41:88:11:31:85:65:90:65:46:
         94:56:30:29:34:96:3f:37:2d:7e:3b:53:69:fd:34:98:3f:4b:
         d7:6b:c6:ac:f3:70:2a:f3:c9:0d:56:e1:69:4c:b9:7c:df:54:
         24:be:95:38:50:20:fc:05:53:8b:0b:91:72:c5:b0:69:a7:ab:
         a8:71:ca:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMc02bH4mV94+hyIr4+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NTZkMjc3NjhlMTFkOTRhMGJiY2RmYjNmYmNkNzQwZDQ1
YTAwZjQwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
EyhlYTUxZGRkNTU5ZmZkYTg1ZDZlZTc0NGUxZWRhOGU1ZjU1OTRmNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEwpkD//lKwRhpKQScJzcCABKhkf
2F6B2zTkifj0nKnyn/nigd9WwnuREt26cUBh3SAYS0d3fPeWwD5gb66XUT1f2hTr
ZGP6DsVhfx4mCBA5jgor/6ScftTGTt0APO/nFrswgF+giz2k+P9/fozRVg7qgiDt
AV8eFDgiHwG3VORgw9P8LJ6vfF3Npot5kvMlTOnuyQFh+FCJBdpzIrKKF6/uaYs9
KwuYJ01eg/UYmF9JUHm1Mw9u6FTYBXB3qJEhg9CS7kMaULnerGeB3TFlBDWw7XXW
LYHnprdc+tf4HG6/cJb53b4RK8hxDJ+LZifB3UtPFQJHihgCbSOnoTk4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpR3dVZ/9qF1u50Th7ajl9VlPa4MB8GA1UdIwQY
MBaAFIdW0ndo4R2UoLvN+z+810DUWgD0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFiU2QyamhIWlNndTgzN1A3elhRTlJhQVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85NTdiYjMtMmRlNS00NWNmLWFjZjMt
YzNhMDJkN2MwNjk3LzEvaDFiU2QyamhIWlNndTgzN1A3elhRTlJhQVBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85NTdiYjMtMmRlNS00NWNmLWFjZjMtYzNhMDJkN2MwNjk3
LzEvaDFiU2QyamhIWlNndTgzN1A3elhRTlJhQVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMAo+QSy
nMYVbGoWA++r3UIO11coKHwpGXT1Np/WaMm5VDxqZMwG8KZYtQdrngPFIParMOf9
pg7BdAZv0zoqMnIt32txZcvlgY9MLuaNol387CZCn+O2cnxa0A3YS7tE8n7U5p3M
8i9jZOrdffxWCCcVZn3ZJRf22+WQrvk6Kb8D6hUG4eJeu1hA5lXNPZEnokOjAUp2
6zUi5bDvok6uamJQxUoWr+XBZY+Aj6LHG79NhCg5rdEZGtz07PPaQYgRMYVlkGVG
lFYwKTSWPzctfjtTaf00mD9L12vGrPNwKvPJDVbhaUy5fN9UJL6VOFAg/AVTiwuR
csWwaaerqHHKIw==
-----END CERTIFICATE-----