Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File:                     H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier:          pKBje0Pmv2dmfyDWZ9BMxay96bSRKi3fsYWI0tspTT4=
Subject key identifier:   E8:EA:F6:A3:A2:FE:2B:48:44:35:6C:8D:B1:0A:C1:6F:73:38:63:1F
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer:       /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial:       01962F3D332B30BB2AA193ED9B911051F4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number:          0335
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: sXr5ZLG+YrnT5osCB0Y9qloOTPBdTnR6ACkxTyHhaUc=)
                          2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:33:2b:30:bb:2a:a1:93:ed:9b:91:10:51:f4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=e8eaf6a3a2fe2b4844356c8db10ac16f7338631f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:45:5c:6b:00:59:79:41:aa:93:61:92:a7:
                    98:cb:10:58:62:67:3d:ad:b2:78:c2:2a:21:82:60:
                    94:7d:53:d6:67:98:37:f9:8f:65:06:a9:60:17:81:
                    f0:d6:2a:46:2c:80:d0:e0:da:3c:00:e2:c4:5e:be:
                    f4:40:23:c9:3c:e4:25:5f:e8:7c:3a:41:ce:72:bc:
                    33:b3:bd:ca:f8:00:95:34:bd:2f:cf:23:eb:8f:a5:
                    f1:b3:81:e0:bb:91:bf:f2:c7:7e:05:45:6b:68:00:
                    a4:be:8b:cf:66:22:40:41:22:a6:bd:fc:8c:4d:c6:
                    7f:e3:11:dd:ed:bc:63:18:7e:90:2c:d9:b3:4b:c7:
                    aa:db:98:5e:a3:5b:83:c8:34:0f:f9:94:db:61:03:
                    5c:53:7b:e5:96:ce:0b:83:f5:81:6b:89:fd:5d:a5:
                    dd:05:22:27:06:58:eb:3b:25:be:a9:3b:5d:5c:72:
                    73:42:25:ab:bf:a2:66:38:19:f1:4c:e8:73:80:d8:
                    b6:7e:45:07:a0:66:da:a6:67:66:82:07:2e:b2:3d:
                    85:6d:19:e1:96:0a:16:c7:90:0b:81:2d:22:f7:df:
                    ed:85:98:06:bd:e7:b8:94:65:96:98:93:57:8a:7b:
                    c8:25:ac:40:e0:0f:2f:18:13:5d:9e:f8:a7:8c:45:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EA:F6:A3:A2:FE:2B:48:44:35:6C:8D:B1:0A:C1:6F:73:38:63:1F
            X509v3 Authority Key Identifier:
                keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:21:31:8e:2a:1b:3e:6f:c4:e2:df:47:4b:bb:43:7f:5e:
         a6:8a:59:0b:ca:bb:37:93:ee:c7:e3:22:54:f6:e4:0a:92:c2:
         94:77:3d:f4:a4:02:0f:32:da:0d:3c:d9:21:a9:f3:d2:20:f3:
         38:50:21:a3:6a:34:e6:ee:f5:05:c3:d8:f2:58:a3:81:08:48:
         27:e3:58:9f:47:64:8e:3e:43:fa:18:15:15:19:5c:a9:e4:38:
         fc:41:f5:bd:d9:95:9c:d8:45:b4:8b:e6:66:31:e2:bc:63:50:
         b3:9d:a5:ff:ae:19:c0:b4:6f:2b:59:cf:55:15:5c:b4:d5:28:
         1c:eb:9a:b7:1b:2a:dc:0c:d3:d5:84:a3:88:bd:60:fb:da:07:
         17:20:f3:76:fa:64:20:92:4c:cc:54:d3:ba:33:1d:0d:2e:2f:
         df:ee:f8:a0:d6:4b:db:5e:3c:3a:45:18:9c:c8:3c:ce:14:92:
         bb:4d:9b:26:9b:03:06:b9:84:24:f0:c2:d9:2c:4c:cd:f5:54:
         77:7b:e1:90:38:b7:61:d9:12:51:45:c8:cc:5d:eb:6f:25:bf:
         4c:21:3c:79:1d:fb:d9:10:04:ad:7c:f6:2f:b8:88:b1:82:aa:
         46:53:33:f0:87:5c:89:9a:67:05:bd:1b:87:f1:36:91:b4:14:
         17:5b:08:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTMrMLsqoZPtm5EQUfTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDgyZTVlNDEyYzFkZWJiNzc2ZGVkZmFmNDVjMzMxNzRl
NzY0MmUwHhcNMjUwNDEzMTMwMTAxWhcNMjUwNDE0MTMwMTAxWjAzMTEwLwYDVQQD
EyhlOGVhZjZhM2EyZmUyYjQ4NDQzNTZjOGRiMTBhYzE2ZjczMzg2MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp15FXGsAWXlBqpNhkqeYyxBYYmc9
rbJ4wiohgmCUfVPWZ5g3+Y9lBqlgF4Hw1ipGLIDQ4No8AOLEXr70QCPJPOQlX+h8
OkHOcrwzs73K+ACVNL0vzyPrj6Xxs4Hgu5G/8sd+BUVraACkvovPZiJAQSKmvfyM
TcZ/4xHd7bxjGH6QLNmzS8eq25heo1uDyDQP+ZTbYQNcU3vlls4Lg/WBa4n9XaXd
BSInBljrOyW+qTtdXHJzQiWrv6JmOBnxTOhzgNi2fkUHoGbapmdmggcusj2FbRnh
lgoWx5ALgS0i99/thZgGvee4lGWWmJNXinvIJaxA4A8vGBNdnvinjEUBQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjq9qOi/itIRDVsjbEKwW9zOGMfMB8GA1UdIwQY
MBaAFB9ILl5BLB3rt3be369FwzF052QuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDIt
ZDJlMzM3MmFjMjljLzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDItZDJlMzM3MmFjMjlj
LzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+khMY4q
Gz5vxOLfR0u7Q39epopZC8q7N5Pux+MiVPbkCpLClHc99KQCDzLaDTzZIanz0iDz
OFAho2o05u71BcPY8lijgQhIJ+NYn0dkjj5D+hgVFRlcqeQ4/EH1vdmVnNhFtIvm
ZjHivGNQs52l/64ZwLRvK1nPVRVctNUoHOuatxsq3AzT1YSjiL1g+9oHFyDzdvpk
IJJMzFTTujMdDS4v3+74oNZL2148OkUYnMg8zhSSu02bJpsDBrmEJPDC2SxMzfVU
d3vhkDi3YdkSUUXIzF3rbyW/TCE8eR372RAErXz2L7iIsYKqRlMz8IdciZpnBb0b
h/E2kbQUF1sIQQ==
-----END CERTIFICATE-----