Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File:                     HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier:          NHvYnU/4OJ00rT6kzh33UzJbylyuKBF5J6sT3wkepfY=
Subject key identifier:   6D:4B:F8:1B:16:05:33:02:E1:11:C0:1D:88:3A:AB:DD:62:DC:59:35
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer:       /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial:       01962F070413A2A2E9C824A55AF6A457575D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number:          0FB7
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=)
                          2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=)
                          3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=)
                          4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=)
                          5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: Sj7Ky57vzxND8aoAnzqd9BSkzAVVoD5/6U2iIM9x8yE=)
                          6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=)
                          7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=)
                          8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=)
                          9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=)
                          10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:13:a2:a2:e9:c8:24:a5:5a:f6:a4:57:57:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=6d4bf81b16053302e111c01d883aabdd62dc5935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e2:70:e3:be:71:f2:c9:2e:50:a4:94:d8:c6:
                    9d:2f:c3:9e:76:31:2f:2a:e7:42:df:ad:15:d7:12:
                    3d:41:f1:1a:6f:68:fe:69:56:e0:61:68:31:20:a0:
                    08:cb:ef:ac:97:df:27:66:9f:bd:64:3d:c8:44:1b:
                    3f:13:c9:82:b3:52:37:91:a7:58:04:bf:cb:52:1f:
                    66:71:46:95:77:d2:07:17:bb:8c:c5:61:21:26:df:
                    16:62:60:09:3b:58:13:c1:53:ff:d0:e0:be:bf:fa:
                    58:ca:3e:b0:67:f1:0c:f1:b5:44:48:20:75:4a:f8:
                    e5:ec:e1:dc:12:fd:c0:4d:52:e0:b6:ec:81:73:fd:
                    d6:be:1a:50:a0:2a:6c:ee:93:2b:c4:5e:0f:26:ed:
                    81:da:d2:0b:0b:af:9d:80:ee:4c:ad:1a:a2:7c:86:
                    38:66:76:7a:d4:e3:d3:3b:a3:aa:5b:a3:d1:c4:53:
                    50:c8:18:8e:98:f1:17:ed:99:4a:09:8d:d7:3a:30:
                    cf:2b:2f:ef:0e:72:e1:fd:33:6a:d9:1c:cf:81:c4:
                    83:66:58:08:c0:29:3d:64:8b:3f:a4:4a:f1:8a:a1:
                    e5:2f:ae:ca:41:f1:32:ff:b0:20:17:3e:4a:3d:ee:
                    64:ea:54:05:36:fb:19:c0:4c:8b:bd:10:9f:73:62:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4B:F8:1B:16:05:33:02:E1:11:C0:1D:88:3A:AB:DD:62:DC:59:35
            X509v3 Authority Key Identifier:
                keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:29:7f:2e:9f:32:ad:b5:3e:8e:8c:6f:86:35:f5:c7:b6:60:
         94:87:ff:12:04:fe:02:4b:d2:a6:3c:01:a2:1d:f6:bf:12:e4:
         40:25:13:91:76:e0:3f:08:46:29:c0:c0:6f:d8:bb:54:c7:f1:
         79:e4:13:0a:6f:d7:5c:d5:2f:af:5d:fc:0f:94:c8:06:44:5f:
         7a:ba:64:a2:34:87:28:51:0e:03:6a:b8:0b:64:8e:27:1a:1e:
         cc:15:0f:ee:cf:f1:3b:b8:b1:5a:4c:fc:a9:e0:92:42:db:ce:
         a7:2b:ff:d4:d0:cb:27:67:ce:eb:80:31:e0:3a:01:21:b0:f8:
         a3:0e:81:ef:b0:74:67:de:e9:05:91:06:10:fc:b6:22:d1:92:
         6a:e2:3f:f1:43:5c:22:40:15:cc:ee:81:94:3e:06:b7:3c:16:
         60:88:44:9b:af:0a:08:d3:60:b1:f6:af:3c:bf:0c:ec:85:ca:
         6f:a2:0c:66:f8:43:ed:7f:9e:dd:9a:bf:64:69:d1:95:d0:46:
         a6:1d:54:21:9f:b3:32:39:87:d4:97:d6:88:b5:b6:0e:64:d4:
         df:bf:1c:bc:8b:2b:63:ec:21:be:b7:2c:ba:33:9c:d6:cb:35:
         79:6d:34:c1:00:30:e2:d0:a8:84:7e:5e:85:7f:b6:b9:b5:bb:
         6c:ec:aa:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwQToqLpyCSlWvakV1ddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2
ZDIwMzkwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
Eyg2ZDRiZjgxYjE2MDUzMzAyZTExMWMwMWQ4ODNhYWJkZDYyZGM1OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+Jw475x8skuUKSU2MadL8OedjEv
KudC360V1xI9QfEab2j+aVbgYWgxIKAIy++sl98nZp+9ZD3IRBs/E8mCs1I3kadY
BL/LUh9mcUaVd9IHF7uMxWEhJt8WYmAJO1gTwVP/0OC+v/pYyj6wZ/EM8bVESCB1
Svjl7OHcEv3ATVLgtuyBc/3WvhpQoCps7pMrxF4PJu2B2tILC6+dgO5MrRqifIY4
ZnZ61OPTO6OqW6PRxFNQyBiOmPEX7ZlKCY3XOjDPKy/vDnLh/TNq2RzPgcSDZlgI
wCk9ZIs/pErxiqHlL67KQfEy/7AgFz5KPe5k6lQFNvsZwEyLvRCfc2LukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1L+BsWBTMC4RHAHYg6q91i3Fk1MB8GA1UdIwQY
MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt
YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj
LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCl/Lp8y
rbU+joxvhjX1x7ZglIf/EgT+AkvSpjwBoh32vxLkQCUTkXbgPwhGKcDAb9i7VMfx
eeQTCm/XXNUvr138D5TIBkRferpkojSHKFEOA2q4C2SOJxoezBUP7s/xO7ixWkz8
qeCSQtvOpyv/1NDLJ2fO64Ax4DoBIbD4ow6B77B0Z97pBZEGEPy2ItGSauI/8UNc
IkAVzO6BlD4GtzwWYIhEm68KCNNgsfavPL8M7IXKb6IMZvhD7X+e3Zq/ZGnRldBG
ph1UIZ+zMjmH1JfWiLW2DmTU378cvIsrY+whvrcsujOc1ss1eW00wQAw4tCohH5e
hX+2ubW7bOyqaA==
-----END CERTIFICATE-----