Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File:                     hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier:          b0w583e4ev7SLFimBQ8rYONIMkbmr5ddp4jxiHBPr48=
Subject key identifier:   A5:7F:CA:67:73:12:28:8C:C5:0B:CD:F2:90:57:A0:67:EA:2A:6C:78
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer:       /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial:       01962DF41D45EFF4992E59F853F417565CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number:          0DBD
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: VG9r975YrMhI2Fq63180IcslypHSUOk1JoNc1zC8svU=)
                          2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:45:ef:f4:99:2e:59:f8:53:f4:17:56:5c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=a57fca677312288cc50bcdf29057a067ea2a6c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:b6:68:a9:90:c0:86:4a:f9:8e:a0:50:b9:
                    5e:fb:17:fa:2a:51:e3:1e:fa:34:ba:30:e2:58:1c:
                    22:03:ac:d0:79:1c:15:c3:70:9c:33:cc:40:bb:88:
                    b0:1e:e2:22:b3:d9:09:96:cc:54:00:45:ee:10:44:
                    1c:0f:53:d5:d6:ed:c3:6d:9e:5d:a9:05:38:bc:68:
                    17:4e:49:b1:bb:ab:16:b6:79:5b:8d:fc:e2:be:af:
                    a1:42:6a:63:07:03:12:e5:89:45:53:55:fe:e0:cc:
                    dc:ed:40:71:b0:d3:40:b6:45:3e:cb:56:d1:36:31:
                    40:37:ce:2e:8f:8f:11:8b:10:9b:92:65:8b:35:1d:
                    ca:a2:47:22:5e:a4:b0:f0:0e:52:27:8f:d7:d6:d0:
                    98:b5:d9:ef:9f:69:37:cf:a7:a4:49:f4:a4:fa:4f:
                    a6:07:48:d3:c0:d8:dc:0d:24:0d:f8:91:b4:fa:c6:
                    df:5c:b8:36:d3:62:23:c5:ed:e9:fa:11:aa:b7:2a:
                    23:87:89:c3:29:c9:74:ff:50:91:af:68:c2:cc:dc:
                    19:b8:27:86:8b:99:bc:81:54:88:be:ba:f7:40:eb:
                    d9:3b:ce:ec:d3:12:55:6c:42:7b:65:cc:10:61:69:
                    a3:2f:ac:b2:43:5a:36:76:42:18:f0:1e:ed:7f:00:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:CA:67:73:12:28:8C:C5:0B:CD:F2:90:57:A0:67:EA:2A:6C:78
            X509v3 Authority Key Identifier:
                keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:f6:4f:e6:ca:db:8b:98:7d:60:58:57:3f:e6:74:4f:fb:
         89:f1:cd:0a:ed:7b:92:e0:91:62:63:cd:c4:87:03:a4:ae:8a:
         f5:0c:15:55:d9:21:fe:f8:e7:3e:dc:ae:77:b5:b3:6f:b5:da:
         40:99:bb:29:73:f5:e4:ea:cb:70:f3:c9:8b:2e:76:27:c7:d6:
         8a:0e:5e:6c:c4:c3:9e:ba:7f:b0:6f:fc:50:f1:cb:04:1b:13:
         bc:0b:3b:d9:9d:a6:fc:4b:49:3c:79:4e:3c:c1:7c:df:af:4d:
         f8:8e:c8:a9:ec:90:b2:e1:74:36:4a:2a:ba:1e:b2:eb:47:09:
         01:03:74:e7:02:f8:82:c0:de:00:cc:4c:81:f2:8f:69:bd:e9:
         6a:0c:98:e4:fb:37:f7:d4:c6:c9:20:99:06:ae:a9:2f:9d:11:
         65:23:3a:73:6a:f8:ac:cc:49:bf:f5:4f:09:cc:69:d3:eb:7e:
         df:0d:5e:0f:29:0a:7b:88:6e:82:b1:a9:dc:a4:80:31:26:7b:
         40:45:31:87:f1:5c:00:ef:ef:e9:f1:af:33:b8:0e:f7:7d:d3:
         83:e3:8a:c1:d0:43:a0:8b:c2:56:72:05:c0:52:e5:16:88:77:
         f8:cd:d1:7f:bf:36:bb:2f:c8:c1:d9:0f:0e:0f:b7:5d:22:a8:
         99:ae:74:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B1F7/SZLln4U/QXVlzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDBhYWYxM2Q0ZGU5Yzk1YjYzNzU5YWQxODYzNmFiYzhl
MjYzNzYwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
EyhhNTdmY2E2NzczMTIyODhjYzUwYmNkZjI5MDU3YTA2N2VhMmE2Yzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorK2aKmQwIZK+Y6gULle+xf6KlHj
Hvo0ujDiWBwiA6zQeRwVw3CcM8xAu4iwHuIis9kJlsxUAEXuEEQcD1PV1u3DbZ5d
qQU4vGgXTkmxu6sWtnlbjfzivq+hQmpjBwMS5YlFU1X+4Mzc7UBxsNNAtkU+y1bR
NjFAN84uj48RixCbkmWLNR3KokciXqSw8A5SJ4/X1tCYtdnvn2k3z6ekSfSk+k+m
B0jTwNjcDSQN+JG0+sbfXLg202Ijxe3p+hGqtyojh4nDKcl0/1CRr2jCzNwZuCeG
i5m8gVSIvrr3QOvZO87s0xJVbEJ7ZcwQYWmjL6yyQ1o2dkIY8B7tfwCgTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV/ymdzEiiMxQvN8pBXoGfqKmx4MB8GA1UdIwQY
MBaAFIYAqvE9TenJW2N1mtGGNqvI4mN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgt
MjI0NGZkNjE4NWQzLzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgtMjI0NGZkNjE4NWQz
LzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7/2T+bK
24uYfWBYVz/mdE/7ifHNCu17kuCRYmPNxIcDpK6K9QwVVdkh/vjnPtyud7Wzb7Xa
QJm7KXP15OrLcPPJiy52J8fWig5ebMTDnrp/sG/8UPHLBBsTvAs72Z2m/EtJPHlO
PMF8369N+I7IqeyQsuF0Nkoquh6y60cJAQN05wL4gsDeAMxMgfKPab3pagyY5Ps3
99TGySCZBq6pL50RZSM6c2r4rMxJv/VPCcxp0+t+3w1eDykKe4hugrGp3KSAMSZ7
QEUxh/FcAO/v6fGvM7gO933Tg+OKwdBDoIvCVnIFwFLlFoh3+M3Rf782uy/IwdkP
Dg+3XSKoma50dw==
-----END CERTIFICATE-----