Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft
File:                     HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft (raw, json)
Hash identifier:          xzJhznTBsnUsdBxO2HiFIpd2Y62COuFTp55yHQkruIM=
Subject key identifier:   DA:9D:69:E2:CC:EA:18:EE:C3:AB:0E:63:7E:48:9A:D5:50:0B:81:26
Authority key identifier: 1D:0C:39:1E:DD:5C:BE:E1:A1:4E:0A:B3:F9:3D:83:4F:AE:51:1E:4D
Certificate issuer:       /CN=1d0c391edd5cbee1a14e0ab3f93d834fae511e4d
Certificate serial:       01962F3D96B83AD2B1C2ABC1BDBFA7C0FAAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQw5Ht1cvuGhTgqz-T2DT65RHk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft
Manifest number:          1237
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: HQw5Ht1cvuGhTgqz-T2DT65RHk0.crl (hash: 0fnhWOYZf/a2L9j/p4cH+gvQforROikVTY6e7Mnw9Kg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:96:b8:3a:d2:b1:c2:ab:c1:bd:bf:a7:c0:fa:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0c391edd5cbee1a14e0ab3f93d834fae511e4d
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=da9d69e2ccea18eec3ab0e637e489ad5500b8126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:78:54:d4:9c:47:f7:41:be:59:15:b0:e1:
                    4b:72:b1:ef:26:cb:c0:4b:dd:f9:63:c7:c0:bb:c5:
                    7e:bd:0d:0a:76:b7:03:1c:15:9b:bc:5a:c9:80:08:
                    33:95:56:e5:8d:64:64:48:b0:5f:16:6e:78:33:20:
                    e8:3b:dc:29:6b:63:d6:7c:52:ac:5f:fb:10:db:26:
                    e7:5f:af:3e:55:b9:d3:62:30:51:09:f8:5e:d6:4f:
                    f3:1a:a6:a5:3f:6b:bc:36:bd:83:42:0b:f7:f9:08:
                    ff:65:7b:48:10:5c:90:a9:a9:c5:14:b5:6d:00:ea:
                    75:66:01:2c:90:b6:bd:02:3e:6c:8a:ea:19:2c:19:
                    07:27:d2:01:3a:0b:bb:eb:20:11:95:db:a2:57:d5:
                    8e:5f:f1:79:ba:50:26:42:e0:8d:a3:a3:7d:d8:93:
                    e8:09:ee:b4:15:7a:b5:3a:1c:b5:34:50:77:99:d7:
                    5a:f3:7e:3b:3a:61:ae:fc:f4:df:ba:1f:64:1b:51:
                    7e:11:b2:1d:f1:a5:8b:5b:dd:a4:06:a9:44:fd:eb:
                    9c:49:53:39:34:e3:0c:77:08:bc:cc:0c:16:50:ad:
                    f8:63:f7:dc:3b:19:b7:62:40:84:f3:0a:16:9b:61:
                    36:a3:54:99:66:5c:8d:37:b2:12:53:bc:c1:af:6a:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9D:69:E2:CC:EA:18:EE:C3:AB:0E:63:7E:48:9A:D5:50:0B:81:26
            X509v3 Authority Key Identifier:
                keyid:1D:0C:39:1E:DD:5C:BE:E1:A1:4E:0A:B3:F9:3D:83:4F:AE:51:1E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQw5Ht1cvuGhTgqz-T2DT65RHk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:60:af:06:6b:9e:f4:e9:cf:2d:03:35:59:93:64:22:33:3b:
         52:9b:c5:ca:3b:a5:e5:78:a6:16:7b:b5:41:d8:d5:bf:48:04:
         0b:13:43:f9:bb:54:c9:0c:89:3b:83:83:1e:bd:7f:28:61:e1:
         8a:90:91:0f:54:42:71:0a:1d:4d:ec:60:0c:91:de:33:20:5d:
         41:2d:1a:2a:fe:c6:45:cb:bb:87:42:f2:45:b0:16:66:62:3d:
         02:5d:d1:50:4c:6d:37:84:db:5d:47:1e:14:4f:cf:4a:02:07:
         c5:42:a9:31:7f:f8:49:a2:7c:1a:37:70:8c:38:f3:44:89:f1:
         2a:06:2c:ea:b2:1e:e5:b9:c0:44:eb:78:58:d7:dd:57:23:97:
         5a:64:b7:65:2e:46:e6:94:07:f6:55:ab:9a:ba:a0:75:bd:0c:
         ef:45:d8:4e:be:46:b4:04:3d:ec:49:b8:9a:0b:a0:7e:aa:01:
         c8:3b:46:d6:76:3b:6a:49:0d:3c:d8:48:ed:00:f3:b1:c3:51:
         07:b3:df:53:1f:1a:e8:70:fb:4d:5f:35:cb:ed:f5:cc:0b:06:
         bc:6a:b9:21:f4:01:69:09:79:ac:e6:72:a9:5d:2a:a3:37:55:
         70:1a:12:31:90:7a:c2:99:3c:82:ce:96:60:1f:62:14:f3:49:
         b7:7a:a9:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZa4OtKxwqvBvb+nwPqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGMzOTFlZGQ1Y2JlZTFhMTRlMGFiM2Y5M2Q4MzRmYWU1
MTFlNGQwHhcNMjUwNDEzMTMwMTI3WhcNMjUwNDE0MTMwMTI3WjAzMTEwLwYDVQQD
EyhkYTlkNjllMmNjZWExOGVlYzNhYjBlNjM3ZTQ4OWFkNTUwMGI4MTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxV4VNScR/dBvlkVsOFLcrHvJsvA
S935Y8fAu8V+vQ0KdrcDHBWbvFrJgAgzlVbljWRkSLBfFm54MyDoO9wpa2PWfFKs
X/sQ2ybnX68+VbnTYjBRCfhe1k/zGqalP2u8Nr2DQgv3+Qj/ZXtIEFyQqanFFLVt
AOp1ZgEskLa9Aj5siuoZLBkHJ9IBOgu76yARlduiV9WOX/F5ulAmQuCNo6N92JPo
Ce60FXq1Ohy1NFB3mdda8347OmGu/PTfuh9kG1F+EbId8aWLW92kBqlE/eucSVM5
NOMMdwi8zAwWUK34Y/fcOxm3YkCE8woWm2E2o1SZZlyNN7ISU7zBr2r0nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqdaeLM6hjuw6sOY35ImtVQC4EmMB8GA1UdIwQY
MBaAFB0MOR7dXL7hoU4Ks/k9g0+uUR5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF3NUh0MWN2dUdoVGdxei1UMkRUNjVSSGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yYWM2MzMtNDBlYy00MDI3LWFmMmQt
MGY4OTllMGMyMGNkLzEvSFF3NUh0MWN2dUdoVGdxei1UMkRUNjVSSGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yYWM2MzMtNDBlYy00MDI3LWFmMmQtMGY4OTllMGMyMGNk
LzEvSFF3NUh0MWN2dUdoVGdxei1UMkRUNjVSSGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmCvBmue
9OnPLQM1WZNkIjM7UpvFyjul5XimFnu1QdjVv0gECxND+btUyQyJO4ODHr1/KGHh
ipCRD1RCcQodTexgDJHeMyBdQS0aKv7GRcu7h0LyRbAWZmI9Al3RUExtN4TbXUce
FE/PSgIHxUKpMX/4SaJ8GjdwjDjzRInxKgYs6rIe5bnAROt4WNfdVyOXWmS3ZS5G
5pQH9lWrmrqgdb0M70XYTr5GtAQ97Em4mgugfqoByDtG1nY7akkNPNhI7QDzscNR
B7PfUx8a6HD7TV81y+31zAsGvGq5IfQBaQl5rOZyqV0qozdVcBoSMZB6wpk8gs6W
YB9iFPNJt3qpBg==
-----END CERTIFICATE-----