Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File:                     8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier:          CqtNz5ZA21gQdHyk7WNU2XibnKaB8Y3IiEpTDHyHrFk=
Subject key identifier:   3F:BE:5C:EE:46:4E:17:12:85:B6:45:EA:70:D5:5F:F8:F0:BC:22:EF
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer:       /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial:       01962E990E5AB4AA006E7951EFE49CC07253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number:          093B
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: SkSbACa+8iHi+NwtiWAayC0KuTt6Qe02v81tRGf3hM4=)
                          2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0e:5a:b4:aa:00:6e:79:51:ef:e4:9c:c0:72:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=3fbe5cee464e171285b645ea70d55ff8f0bc22ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:3c:d6:f8:26:e2:97:88:42:04:15:d6:3d:
                    b4:2d:57:f7:72:4d:ae:6b:9f:b9:f7:27:af:1e:ca:
                    91:59:c8:d1:12:fc:4c:52:db:7f:c1:0c:c7:6f:b0:
                    53:eb:bc:65:dd:2c:ac:09:5e:9d:3b:9c:5d:cb:9f:
                    f7:92:9b:9c:a4:38:47:4e:cd:a8:b4:3f:2d:9f:12:
                    c6:62:57:2f:d6:8e:1e:9b:01:0c:b2:55:7f:f5:6b:
                    20:b7:eb:91:fb:ed:ce:85:65:30:32:89:78:8b:1f:
                    60:c4:e3:11:e8:28:7c:d5:07:df:61:18:5c:3e:53:
                    23:21:15:a8:14:46:5c:8c:b4:fd:23:29:f5:27:2c:
                    86:90:3a:16:d0:00:b5:c1:c9:af:e5:8d:79:6a:86:
                    52:e1:af:cc:70:81:8d:64:99:a0:14:1b:41:5d:2f:
                    ba:34:9e:c9:a4:50:17:9e:18:fb:5a:af:ac:6b:2b:
                    e7:af:b1:0a:1b:b4:8d:c3:50:f8:e3:0f:cc:8e:c5:
                    e3:0f:ad:7b:8b:8b:90:cf:56:6c:3f:f8:fa:ce:79:
                    06:de:24:4f:c3:44:80:71:81:c4:7e:26:45:1f:da:
                    ea:de:07:3f:e7:2d:79:68:e3:af:ef:a3:bf:6d:37:
                    56:02:16:64:ec:9d:51:a5:f8:ae:e8:d4:40:dc:67:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BE:5C:EE:46:4E:17:12:85:B6:45:EA:70:D5:5F:F8:F0:BC:22:EF
            X509v3 Authority Key Identifier:
                keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9e:09:fd:5e:22:9c:80:93:ab:43:ac:b2:8a:a1:96:5a:46:
         c1:b3:03:fa:82:79:cf:ea:41:93:51:d2:d3:7b:f7:b8:57:ba:
         9e:75:ff:1e:e0:47:77:49:c1:25:95:ed:db:e5:88:3c:e1:8c:
         47:2c:f0:d5:73:d1:f2:7d:3a:0f:72:f5:25:5f:ed:de:44:62:
         20:92:7e:8b:78:d2:4a:a4:7e:00:4e:10:79:6d:c0:e2:86:d2:
         7d:05:86:1b:99:f6:78:93:8b:81:fc:e7:d1:b8:dc:7b:cc:92:
         07:54:de:8f:ee:f3:30:74:28:58:12:19:a1:fd:b9:a8:eb:38:
         0f:68:10:12:48:5e:7e:4f:60:80:8f:30:4a:16:24:6d:5e:76:
         7a:8f:5a:18:60:d1:56:c8:6c:c5:f6:da:35:a6:f5:b9:9c:12:
         16:a3:65:38:13:2f:5a:de:26:d4:e6:43:70:67:69:66:36:5c:
         59:72:e5:c7:8c:09:aa:61:b8:c5:2d:07:26:95:12:57:ea:16:
         94:40:3c:ec:c4:d8:a9:49:42:fe:d9:74:4d:73:2e:77:b1:ac:
         10:fe:a2:d0:41:28:2c:94:f3:bb:57:ee:c5:a4:a4:a4:56:d0:
         dd:ee:63:ce:a9:ba:4e:88:3d:b7:bf:4a:2b:66:d4:97:91:17:
         4c:a1:13:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQ5atKoAbnlR7+ScwHJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGZhMWEyZTQ0OTE4OTFjMTliMGYxMGIwODZmNjU1OTg0
ZjU4NzkwHhcNMjUwNDEzMTAwMTQ0WhcNMjUwNDE0MTAwMTQ0WjAzMTEwLwYDVQQD
EygzZmJlNWNlZTQ2NGUxNzEyODViNjQ1ZWE3MGQ1NWZmOGYwYmMyMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wY81vgm4peIQgQV1j20LVf3ck2u
a5+59yevHsqRWcjREvxMUtt/wQzHb7BT67xl3SysCV6dO5xdy5/3kpucpDhHTs2o
tD8tnxLGYlcv1o4emwEMslV/9Wsgt+uR++3OhWUwMol4ix9gxOMR6Ch81QffYRhc
PlMjIRWoFEZcjLT9Iyn1JyyGkDoW0AC1wcmv5Y15aoZS4a/McIGNZJmgFBtBXS+6
NJ7JpFAXnhj7Wq+sayvnr7EKG7SNw1D44w/MjsXjD617i4uQz1ZsP/j6znkG3iRP
w0SAcYHEfiZFH9rq3gc/5y15aOOv76O/bTdWAhZk7J1Rpfiu6NRA3Gff8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD++XO5GThcShbZF6nDVX/jwvCLvMB8GA1UdIwQY
MBaAFPKPoaLkSRiRwZsPELCG9lWYT1h5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTIt
MzRhMTRhMmJiNDAxLzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTItMzRhMTRhMmJiNDAx
LzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ4J/V4i
nICTq0OssoqhllpGwbMD+oJ5z+pBk1HS03v3uFe6nnX/HuBHd0nBJZXt2+WIPOGM
Ryzw1XPR8n06D3L1JV/t3kRiIJJ+i3jSSqR+AE4QeW3A4obSfQWGG5n2eJOLgfzn
0bjce8ySB1Tej+7zMHQoWBIZof25qOs4D2gQEkhefk9ggI8wShYkbV52eo9aGGDR
VshsxfbaNab1uZwSFqNlOBMvWt4m1OZDcGdpZjZcWXLlx4wJqmG4xS0HJpUSV+oW
lEA87MTYqUlC/tl0TXMud7GsEP6i0EEoLJTzu1fuxaSkpFbQ3e5jzqm6Tog9t79K
K2bUl5EXTKETkg==
-----END CERTIFICATE-----