Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
File:                     hkCo0qJ0maklfW7UZjoLMNob_jM.mft (raw, json)
Hash identifier:          LMKnjds0sYtDSD92P89Xi0xaZLkl5Gvtl8E3dAubTqc=
Subject key identifier:   21:56:7C:13:46:24:27:4E:BF:20:DE:AB:71:42:5F:67:8A:FB:3D:F9
Authority key identifier: 86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
Certificate issuer:       /CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Certificate serial:       01962F070F38C9DA3BAC476314C204E6F1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
Manifest number:          0891
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: hkCo0qJ0maklfW7UZjoLMNob_jM.crl (hash: 9Pk4xuI1kWU63Hmb1X+ja2b+2sjct4d9sx+I0aJo6RU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0f:38:c9:da:3b:ac:47:63:14:c2:04:e6:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=21567c134624274ebf20deab71425f678afb3df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:18:7e:17:3c:a9:4d:55:26:e6:1d:c1:0a:
                    0e:53:d3:9d:48:f3:1f:82:24:46:7c:50:0c:44:5f:
                    8e:9f:5f:05:6c:42:f8:dd:66:2b:df:07:b0:55:ae:
                    2a:28:e1:fa:99:ab:65:04:be:c5:10:2e:18:73:4c:
                    e1:ca:ec:6a:ac:12:98:8a:d6:a3:f6:86:34:3b:09:
                    54:3e:c5:bc:35:32:89:7b:91:f2:87:71:3c:d4:e0:
                    9d:5d:a3:20:72:a5:86:60:36:17:04:26:31:e8:5e:
                    ac:d1:e5:6e:d5:18:00:68:d6:7a:90:15:a8:a7:5e:
                    f3:92:fe:50:d6:b9:9f:5e:af:6f:29:21:1b:0e:36:
                    3c:b6:8d:0e:0c:22:53:fd:8d:f0:ad:e3:dd:e2:69:
                    d9:dd:2f:8e:93:56:31:1c:0b:d4:ff:6e:8b:f4:37:
                    02:29:ad:c5:08:58:22:64:fe:3c:d1:96:29:80:b7:
                    ff:45:4c:c6:38:46:d2:d1:f2:1d:48:6a:59:3e:77:
                    de:89:17:12:d2:48:84:2f:ff:7d:1f:ec:fd:0d:27:
                    e4:38:11:d0:43:f4:57:b6:48:52:fe:45:86:cb:17:
                    00:54:ea:68:95:3c:61:6f:86:a8:a4:8c:ea:70:8e:
                    4c:04:6a:fe:ea:20:14:8f:b1:68:b1:46:b1:1f:ef:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:7C:13:46:24:27:4E:BF:20:DE:AB:71:42:5F:67:8A:FB:3D:F9
            X509v3 Authority Key Identifier:
                keyid:86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:32:c2:02:5d:d4:ff:d1:ac:5a:2a:27:c3:41:d6:e7:ad:
         7c:24:20:13:ab:31:b5:16:41:8a:3e:86:5f:65:71:8a:d1:d5:
         39:11:b6:35:0d:4c:1a:f8:75:14:67:b9:19:8f:00:f7:45:e7:
         49:01:a6:17:3e:a8:7e:df:a3:98:ab:7f:5a:c1:ad:c3:35:4a:
         eb:fc:b2:b4:93:e2:6c:e5:22:3d:04:72:da:f1:04:e3:04:d8:
         fe:99:1c:06:f8:0b:01:6d:4d:2a:95:e8:ff:3b:f0:c5:55:d7:
         b3:f0:3c:16:bc:da:76:61:bf:b5:1a:11:45:fe:1a:78:7a:e9:
         21:77:b0:82:89:da:88:c4:ef:04:45:13:9a:fa:24:55:11:96:
         3d:93:c1:0c:0f:09:e0:1c:b5:c5:ca:3d:af:a5:30:51:e9:53:
         17:f7:24:47:c6:dc:26:6d:7e:04:27:5c:db:63:4d:8a:5e:41:
         f2:e4:29:3f:2a:aa:b6:80:0d:a8:b0:88:5e:9b:ef:73:55:16:
         0e:c6:d4:f9:c5:66:e6:c8:35:50:69:19:f0:2d:88:90:ce:9f:
         d5:c3:36:f5:71:df:01:e1:b3:04:a7:d2:e0:c0:bc:ad:92:ad:
         c8:8b:a6:3a:d6:71:a4:1a:69:68:c7:a1:2f:07:3a:1e:63:ac:
         c0:91:92:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBw84ydo7rEdjFMIE5vGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDBhOGQyYTI3NDk5YTkyNTdkNmVkNDY2M2EwYjMwZGEx
YmZlMzMwHhcNMjUwNDEzMTIwMTUzWhcNMjUwNDE0MTIwMTUzWjAzMTEwLwYDVQQD
EygyMTU2N2MxMzQ2MjQyNzRlYmYyMGRlYWI3MTQyNWY2NzhhZmIzZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhEYfhc8qU1VJuYdwQoOU9OdSPMf
giRGfFAMRF+On18FbEL43WYr3wewVa4qKOH6matlBL7FEC4Yc0zhyuxqrBKYitaj
9oY0OwlUPsW8NTKJe5Hyh3E81OCdXaMgcqWGYDYXBCYx6F6s0eVu1RgAaNZ6kBWo
p17zkv5Q1rmfXq9vKSEbDjY8to0ODCJT/Y3wrePd4mnZ3S+Ok1YxHAvU/26L9DcC
Ka3FCFgiZP480ZYpgLf/RUzGOEbS0fIdSGpZPnfeiRcS0kiEL/99H+z9DSfkOBHQ
Q/RXtkhS/kWGyxcAVOpolTxhb4aopIzqcI5MBGr+6iAUj7FosUaxH+/mrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFWfBNGJCdOvyDeq3FCX2eK+z35MB8GA1UdIwQY
MBaAFIZAqNKidJmpJX1u1GY6CzDaG/4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtDbzBxSjBtYWtsZlc3VVpqb0xNTm9iX2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85MDlkYzEtYzA0OC00ZmI0LTg5OGEt
MDcxMDc0N2EyZTkxLzEvaGtDbzBxSjBtYWtsZlc3VVpqb0xNTm9iX2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85MDlkYzEtYzA0OC00ZmI0LTg5OGEtMDcxMDc0N2EyZTkx
LzEvaGtDbzBxSjBtYWtsZlc3VVpqb0xNTm9iX2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrsywgJd
1P/RrFoqJ8NB1uetfCQgE6sxtRZBij6GX2VxitHVORG2NQ1MGvh1FGe5GY8A90Xn
SQGmFz6oft+jmKt/WsGtwzVK6/yytJPibOUiPQRy2vEE4wTY/pkcBvgLAW1NKpXo
/zvwxVXXs/A8FrzadmG/tRoRRf4aeHrpIXewgonaiMTvBEUTmvokVRGWPZPBDA8J
4By1xco9r6UwUelTF/ckR8bcJm1+BCdc22NNil5B8uQpPyqqtoANqLCIXpvvc1UW
DsbU+cVm5sg1UGkZ8C2IkM6f1cM29XHfAeGzBKfS4MC8rZKtyIumOtZxpBppaMeh
Lwc6HmOswJGSoA==
-----END CERTIFICATE-----