Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File:                     HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier:          tOYX0JhMeAXMIJNuo6Z5j6/K39KAkXUEiW/nbQOAvxI=
Subject key identifier:   0B:24:88:B1:68:40:97:F9:7E:E8:76:2D:D5:85:3B:4F:5D:79:7C:7A
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer:       /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial:       01962F74257279F0346958DA4459BDFBABE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number:          0C3F
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
                          2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: KfRPag/Urwrz9mrMJKH9IvT6Q+1uAinjo6DqjMyE0Dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:72:79:f0:34:69:58:da:44:59:bd:fb:ab:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=0b2488b1684097f97ee8762dd5853b4f5d797c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:41:87:a1:1b:99:d8:31:c6:c1:99:1d:41:
                    72:f4:d8:ce:0a:24:b3:33:96:52:68:29:94:4c:41:
                    f7:d5:31:ab:67:cb:92:d6:31:bf:83:35:39:f3:18:
                    95:47:66:85:ee:4c:99:dd:af:81:9f:33:8d:38:86:
                    79:f7:ee:1d:a9:0a:64:94:4a:38:cf:5f:21:22:0c:
                    86:49:ff:89:41:77:26:05:0a:f7:36:7f:cf:50:46:
                    fd:51:3b:83:e8:87:76:00:f5:25:a9:04:e1:28:59:
                    ae:2a:38:6a:4c:09:6f:9b:a7:b2:d3:fc:4d:60:5d:
                    1c:47:31:7e:ef:77:33:6b:59:d1:38:00:c1:8a:12:
                    8a:20:51:db:71:31:6f:c7:fb:4e:e5:f2:99:56:6c:
                    84:dc:b9:98:82:8e:4d:41:30:53:78:93:6f:4f:0f:
                    e9:ac:8a:53:09:0a:88:ac:c6:23:67:e5:e3:f3:a8:
                    3c:8b:ea:ae:8c:a4:28:1f:d1:18:1c:f4:c2:b4:fc:
                    58:76:f7:b5:a9:6e:ff:65:8e:6b:1e:01:25:a3:f3:
                    1d:2c:d9:64:c1:27:5e:09:29:a4:a9:33:37:12:b2:
                    cc:83:f0:02:de:52:ad:1f:f9:62:cd:b9:57:c7:0b:
                    e9:3d:89:e7:e6:79:6a:a2:db:b5:7a:d5:31:0f:5f:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:24:88:B1:68:40:97:F9:7E:E8:76:2D:D5:85:3B:4F:5D:79:7C:7A
            X509v3 Authority Key Identifier:
                keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:0e:7e:f5:1d:02:2d:39:bb:47:fc:0d:fb:76:d0:44:ce:
         80:4e:e0:f2:ec:d6:80:e4:4b:7b:e9:19:54:1d:4f:ce:93:6a:
         ac:82:e2:4e:bc:27:62:40:ab:45:fb:b7:4c:c2:30:79:72:69:
         89:39:a4:15:4e:cf:70:34:ef:7e:4a:8b:ed:ac:2a:18:e4:27:
         75:b7:7e:04:09:4f:74:4c:14:f7:58:1f:db:d3:bd:8d:4a:7a:
         cc:e9:e3:84:75:4f:f2:0f:89:f0:7d:4b:a5:5f:6f:a5:d3:fe:
         c5:a5:74:25:d3:e4:a4:a6:ce:84:6f:e9:52:51:66:35:79:50:
         77:f3:22:d1:a6:ec:cf:5e:f0:6e:b1:80:68:f4:06:be:b8:f4:
         6e:68:b1:25:00:5f:04:59:0d:92:be:d6:56:f5:37:e1:60:43:
         70:af:4d:f6:ea:27:e7:ca:0b:37:ea:d6:f8:9d:96:95:d4:b7:
         6b:4c:72:85:fa:98:10:50:a6:09:35:72:de:61:56:ad:1d:44:
         ba:64:c7:2e:77:b9:56:81:cc:06:84:7a:02:e7:8c:e2:7c:a2:
         35:27:fe:8a:58:51:ff:66:8e:5f:fc:38:0a:cb:e2:5a:94:95:
         16:bb:3a:a5:2b:08:c0:0e:9c:51:b9:c2:e9:82:78:f3:6b:64:
         b2:51:e9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCVyefA0aVjaRFm9+6viMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODBjNWE3MGEyMzYzODQwNTRmMzU4NDkxNTA5MmM0MTcx
NGVlZDcwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
EygwYjI0ODhiMTY4NDA5N2Y5N2VlODc2MmRkNTg1M2I0ZjVkNzk3YzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqBBh6EbmdgxxsGZHUFy9NjOCiSz
M5ZSaCmUTEH31TGrZ8uS1jG/gzU58xiVR2aF7kyZ3a+BnzONOIZ59+4dqQpklEo4
z18hIgyGSf+JQXcmBQr3Nn/PUEb9UTuD6Id2APUlqQThKFmuKjhqTAlvm6ey0/xN
YF0cRzF+73cza1nROADBihKKIFHbcTFvx/tO5fKZVmyE3LmYgo5NQTBTeJNvTw/p
rIpTCQqIrMYjZ+Xj86g8i+qujKQoH9EYHPTCtPxYdve1qW7/ZY5rHgElo/MdLNlk
wSdeCSmkqTM3ErLMg/AC3lKtH/lizblXxwvpPYnn5nlqotu1etUxD18oXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAskiLFoQJf5fuh2LdWFO09deXx6MB8GA1UdIwQY
MBaAFB6AxacKI2OEBU81hJFQksQXFO7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2Ut
NjYxNjMxYmJhOTUzLzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2UtNjYxNjMxYmJhOTUz
LzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9MOfvUd
Ai05u0f8Dft20ETOgE7g8uzWgORLe+kZVB1PzpNqrILiTrwnYkCrRfu3TMIweXJp
iTmkFU7PcDTvfkqL7awqGOQndbd+BAlPdEwU91gf29O9jUp6zOnjhHVP8g+J8H1L
pV9vpdP+xaV0JdPkpKbOhG/pUlFmNXlQd/Mi0absz17wbrGAaPQGvrj0bmixJQBf
BFkNkr7WVvU34WBDcK9N9uon58oLN+rW+J2WldS3a0xyhfqYEFCmCTVy3mFWrR1E
umTHLne5VoHMBoR6AueM4nyiNSf+ilhR/2aOX/w4CsviWpSVFrs6pSsIwA6cUbnC
6YJ482tkslHpZw==
-----END CERTIFICATE-----