Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File:                     hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier:          CpzgHESWkw51vJ3I0VdbIIZ6IPZTiwMPGUCShv+zzf8=
Subject key identifier:   04:2A:BF:43:D9:10:EF:E9:DF:27:F5:9F:1F:B5:72:75:76:7F:67:66
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer:       /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial:       01962DF3E40E55C154C828217CC886129435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number:          0C7A
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: IBxhOrZLEUQL4O5MUoSzxK16Wk/Mr1G1H56EzskaX0o=)
                          2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:0e:55:c1:54:c8:28:21:7c:c8:86:12:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=042abf43d910efe9df27f59f1fb57275767f6766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:c9:69:d3:b6:73:08:d2:85:e4:2a:d2:ef:
                    5e:57:f5:94:12:5d:28:a1:42:97:87:5c:6a:e4:6f:
                    ee:ae:ff:0f:9f:af:4f:4b:62:14:bd:dc:bf:00:73:
                    d9:83:37:35:73:78:61:10:4f:a8:53:1a:a4:f8:9b:
                    03:e9:a4:93:8f:86:3c:ad:71:79:b5:d8:2c:a6:b4:
                    a6:55:f8:17:ac:a0:9c:bf:45:6b:c0:82:2c:c0:4e:
                    11:78:4e:ce:4f:b9:14:aa:66:42:7a:40:8f:19:42:
                    b0:ce:78:c1:e9:dd:0e:e7:12:84:60:d6:61:b9:8d:
                    e4:83:aa:d9:bc:da:e0:da:1d:08:a2:8b:9f:d7:cd:
                    d1:69:d5:5d:c1:56:f6:b0:c0:29:96:c3:2b:87:fe:
                    01:5b:67:89:4a:69:f0:e3:c0:0e:c7:c7:16:4f:14:
                    ab:c7:be:45:1c:b9:2e:98:e6:4c:12:d2:8e:70:29:
                    5f:8a:a2:9a:ed:69:48:26:b6:3f:62:61:66:18:52:
                    1f:24:b2:07:26:63:81:6d:ab:38:8c:17:b9:7f:22:
                    38:e0:f5:64:fa:34:96:07:50:57:99:d7:4a:f4:f8:
                    6f:9e:dc:72:f7:3e:1d:6b:7f:64:c2:88:af:9c:30:
                    21:7a:92:2d:41:b2:35:f5:47:b8:69:b2:ea:3a:9a:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:BF:43:D9:10:EF:E9:DF:27:F5:9F:1F:B5:72:75:76:7F:67:66
            X509v3 Authority Key Identifier:
                keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:c4:9d:c3:c3:98:5c:0f:a1:d2:00:82:ad:1c:75:3c:88:
         24:25:ca:bb:a6:d1:7a:58:05:94:80:07:c1:39:70:e1:3b:5e:
         11:86:f7:52:9c:49:e4:13:20:ac:47:d3:ae:29:12:79:ed:30:
         f1:f8:76:db:f5:29:47:76:0d:cd:42:a0:ce:44:5c:1c:c2:14:
         d5:eb:f9:b3:8d:50:ea:cf:9a:7a:31:b1:aa:29:4a:7d:b4:b0:
         79:28:82:9a:03:7f:6a:e6:30:b9:77:c8:93:04:28:0f:78:ab:
         3d:9b:92:93:3e:44:e3:d7:91:2e:71:22:bf:ab:a4:86:b0:f9:
         64:61:11:f1:18:cb:64:73:7a:f3:8f:9a:23:45:8d:ed:fa:4f:
         ea:61:e4:ca:de:63:37:fe:21:49:c2:c5:92:7a:6f:0e:98:14:
         b5:dc:0b:df:6f:43:cb:14:12:e1:bc:4c:d9:5f:99:d1:a6:93:
         93:7e:40:3c:cb:ec:4d:54:6e:24:84:8e:3e:cf:ba:d8:33:e2:
         22:11:cc:ed:69:fb:61:b2:34:0e:2a:25:2b:e1:0e:dc:de:bd:
         63:b3:42:83:81:e0:c3:b8:58:75:8e:2e:ed:5c:e7:02:7a:f0:
         e4:90:8d:87:ee:9c:05:70:95:59:93:cc:05:16:ea:c3:82:f4:
         66:f5:50:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+QOVcFUyCghfMiGEpQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MmUxNzhhODVkNmMzMGI1NzJiMjAyNjFjNDRmOGU3YTRi
ZmMyNzIwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
EygwNDJhYmY0M2Q5MTBlZmU5ZGYyN2Y1OWYxZmI1NzI3NTc2N2Y2NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPfJadO2cwjSheQq0u9eV/WUEl0o
oUKXh1xq5G/urv8Pn69PS2IUvdy/AHPZgzc1c3hhEE+oUxqk+JsD6aSTj4Y8rXF5
tdgsprSmVfgXrKCcv0VrwIIswE4ReE7OT7kUqmZCekCPGUKwznjB6d0O5xKEYNZh
uY3kg6rZvNrg2h0Ioouf183RadVdwVb2sMAplsMrh/4BW2eJSmnw48AOx8cWTxSr
x75FHLkumOZMEtKOcClfiqKa7WlIJrY/YmFmGFIfJLIHJmOBbas4jBe5fyI44PVk
+jSWB1BXmddK9Phvntxy9z4da39kwoivnDAhepItQbI19Ue4abLqOpoB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQqv0PZEO/p3yf1nx+1cnV2f2dmMB8GA1UdIwQY
MBaAFIQuF4qF1sMLVysgJhxE+Oekv8JyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEt
ZTE4N2JlOWI2YzIzLzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEtZTE4N2JlOWI2YzIz
LzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADY7EncPD
mFwPodIAgq0cdTyIJCXKu6bRelgFlIAHwTlw4TteEYb3UpxJ5BMgrEfTrikSee0w
8fh22/UpR3YNzUKgzkRcHMIU1ev5s41Q6s+aejGxqilKfbSweSiCmgN/auYwuXfI
kwQoD3irPZuSkz5E49eRLnEiv6ukhrD5ZGER8RjLZHN684+aI0WN7fpP6mHkyt5j
N/4hScLFknpvDpgUtdwL329DyxQS4bxM2V+Z0aaTk35APMvsTVRuJISOPs+62DPi
IhHM7Wn7YbI0DiolK+EO3N69Y7NCg4Hgw7hYdY4u7VznAnrw5JCNh+6cBXCVWZPM
BRbqw4L0ZvVQfA==
-----END CERTIFICATE-----