Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File:                     Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier:          HcgD2pGSaarQsMm8LtmgOLRQj/u71IdysvJXO7D08+A=
Subject key identifier:   0C:34:B3:4E:DF:87:96:DE:88:61:0E:7D:A9:28:1D:51:ED:C8:C6:A7
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer:       /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial:       01962F06AA97B03C59E918CBC47D1726390E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number:          0738
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: KIR1F4K8uyC4mJbpuZe63JKW2Oxcts0eNyHQMQGtvac=)
                          2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:aa:97:b0:3c:59:e9:18:cb:c4:7d:17:26:39:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=0c34b34edf8796de88610e7da9281d51edc8c6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5e:ed:b5:7c:5d:0e:29:7c:91:29:d6:41:45:
                    e5:f9:ec:51:16:f1:6e:9b:41:d6:86:83:78:d5:0e:
                    83:bc:8f:fa:49:34:eb:a7:41:19:00:1f:09:ae:52:
                    64:2e:ed:74:27:e4:31:96:8b:0b:44:fc:8d:c6:d5:
                    16:a3:b8:0f:0b:99:f3:04:76:1e:60:8d:32:cf:01:
                    1f:72:d8:47:54:88:53:4d:0e:8c:3c:91:29:ed:17:
                    ba:8e:2f:0c:07:32:78:40:42:f8:b5:5a:78:bf:47:
                    b9:69:64:cb:62:6d:9f:eb:c7:77:2c:75:82:5f:5a:
                    a5:cc:67:da:3d:8d:7d:96:ba:ef:ca:02:0d:b3:ec:
                    72:5c:e3:fe:62:38:d0:f1:be:42:bb:60:a2:31:a7:
                    dd:68:f0:79:6e:ae:4c:5d:70:ec:00:dc:69:c4:60:
                    8a:fb:f1:af:a1:4b:15:bc:4f:86:fb:d1:e8:f5:33:
                    79:fb:8a:5a:20:ab:73:8f:93:68:cc:b1:fb:f3:43:
                    5f:db:50:be:de:26:5e:06:53:d9:0a:39:0c:f3:5a:
                    78:8f:6d:04:0b:bf:90:5e:f3:c7:bc:0b:21:f9:1c:
                    35:da:f3:a0:ca:ca:f6:09:7a:fa:e6:14:dc:ec:30:
                    7f:46:ff:15:5e:fe:ca:00:8b:28:35:11:7f:15:e7:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:34:B3:4E:DF:87:96:DE:88:61:0E:7D:A9:28:1D:51:ED:C8:C6:A7
            X509v3 Authority Key Identifier:
                keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:b6:5b:7c:02:6f:c3:34:c9:69:ea:ae:68:70:fa:43:17:
         f8:17:34:af:54:dd:c6:b3:25:aa:a9:95:14:89:df:a6:c6:24:
         2a:08:d3:11:3b:76:f5:63:71:b5:82:0c:bc:e4:92:ce:fd:db:
         73:1d:61:de:bd:48:34:32:ad:6c:a7:0e:bb:33:f1:4c:f1:91:
         e3:e1:c3:64:e2:91:5f:ad:3b:93:d4:56:a8:5d:2a:8c:83:b9:
         a9:6b:0e:d5:3a:bd:53:25:bc:6d:45:cb:47:ba:93:00:28:36:
         9d:92:78:ac:c7:37:6b:32:b5:5a:2f:74:e3:2f:6f:90:5b:d9:
         e1:ec:2d:cd:de:1f:fb:2a:f0:ae:67:10:ac:4f:a1:9c:d3:64:
         7d:c2:4e:40:39:77:1d:f0:85:46:4f:37:48:b4:c5:07:39:df:
         c1:4a:94:c1:34:cd:80:0c:bb:88:9b:2c:7f:03:38:8f:2d:44:
         1a:69:23:81:ff:87:b7:90:74:27:c6:fc:35:ed:94:da:62:bb:
         24:f5:5d:32:38:1a:35:75:f7:7a:9a:18:3a:f7:0b:73:e7:74:
         21:41:a7:7d:27:79:c9:01:c3:98:05:5b:a8:dc:fb:a5:66:8e:
         e0:f8:99:59:59:d5:59:7e:6c:23:f2:60:ad:e7:92:a9:5d:95:
         04:af:5b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqqXsDxZ6RjLxH0XJjkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWNiZGM3ZGM4NzRiZDhiZTIzMzZmNTY2N2NkZjc3YmQ5
ODBjNzcwHhcNMjUwNDEzMTIwMTI4WhcNMjUwNDE0MTIwMTI4WjAzMTEwLwYDVQQD
EygwYzM0YjM0ZWRmODc5NmRlODg2MTBlN2RhOTI4MWQ1MWVkYzhjNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V7ttXxdDil8kSnWQUXl+exRFvFu
m0HWhoN41Q6DvI/6STTrp0EZAB8JrlJkLu10J+QxlosLRPyNxtUWo7gPC5nzBHYe
YI0yzwEfcthHVIhTTQ6MPJEp7Re6ji8MBzJ4QEL4tVp4v0e5aWTLYm2f68d3LHWC
X1qlzGfaPY19lrrvygINs+xyXOP+YjjQ8b5Cu2CiMafdaPB5bq5MXXDsANxpxGCK
+/GvoUsVvE+G+9Ho9TN5+4paIKtzj5NozLH780Nf21C+3iZeBlPZCjkM81p4j20E
C7+QXvPHvAsh+Rw12vOgysr2CXr65hTc7DB/Rv8VXv7KAIsoNRF/FeehhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw0s07fh5beiGEOfakoHVHtyManMB8GA1UdIwQY
MBaAFB2svcfch0vYviM29WZ833e9mAx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTct
ZjcxYTIyMTQ1ZDRlLzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTctZjcxYTIyMTQ1ZDRl
LzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALg62W3wC
b8M0yWnqrmhw+kMX+Bc0r1TdxrMlqqmVFInfpsYkKgjTETt29WNxtYIMvOSSzv3b
cx1h3r1INDKtbKcOuzPxTPGR4+HDZOKRX607k9RWqF0qjIO5qWsO1Tq9UyW8bUXL
R7qTACg2nZJ4rMc3azK1Wi904y9vkFvZ4ewtzd4f+yrwrmcQrE+hnNNkfcJOQDl3
HfCFRk83SLTFBznfwUqUwTTNgAy7iJssfwM4jy1EGmkjgf+Ht5B0J8b8Ne2U2mK7
JPVdMjgaNXX3epoYOvcLc+d0IUGnfSd5yQHDmAVbqNz7pWaO4PiZWVnVWX5sI/Jg
reeSqV2VBK9bhg==
-----END CERTIFICATE-----