Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File:                     hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier:          ncHTT8g762G3zXoI3hp7jxWw04II92JsyKUdW8OCK+s=
Subject key identifier:   A4:74:44:E8:9F:05:0D:F7:2D:77:3B:E4:77:8E:DC:02:C4:1E:5D:1C
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer:       /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial:       01962E2B063D3BB8E395AA29B9DD484B5BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number:          06FD
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
                          2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
                          3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: FFjsM02M+Vyay7XpCG0WV9lIgOszelUJMTzHJAbrHfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:06:3d:3b:b8:e3:95:aa:29:b9:dd:48:4b:5b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=a47444e89f050df72d773be4778edc02c41e5d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:08:46:93:df:17:ee:e3:43:9b:a9:aa:ba:
                    09:38:e0:ba:91:26:fe:99:5a:a0:3f:db:97:19:9d:
                    7b:d4:ff:5c:63:2e:d4:6c:01:5e:19:95:73:1a:5c:
                    9a:f6:67:9a:c5:85:85:ae:e3:ef:a0:a0:bb:74:3d:
                    e8:0e:91:ef:f8:4f:0c:1a:f9:84:ce:50:b1:85:73:
                    06:d3:be:f0:d2:5e:d9:c1:f9:c6:e7:96:cc:3c:bf:
                    af:b1:bc:c9:ca:a0:62:be:36:07:a5:5b:6d:b0:f4:
                    7f:e1:a6:24:a3:4e:86:e9:b6:1b:6a:37:1f:34:36:
                    0a:48:73:b9:ca:b2:3d:f2:c5:17:7d:ca:5d:42:55:
                    31:17:ed:a8:a7:85:a9:95:e6:80:d3:1e:17:13:07:
                    89:95:58:ce:c3:a1:91:9c:8b:7c:40:e3:3e:68:ea:
                    92:73:02:c0:e6:ce:1f:e6:4a:77:58:de:5f:5a:a3:
                    bc:77:fd:88:2d:bc:db:d0:e3:98:b7:99:8e:68:03:
                    66:3c:45:5f:25:00:3c:01:e5:ee:eb:ad:52:2b:be:
                    6c:97:30:7b:7a:39:3b:cf:9c:36:39:86:f9:cc:5d:
                    e4:be:61:4f:c6:65:16:09:61:b2:5b:0e:54:a1:db:
                    e5:5f:a0:a5:db:3e:93:d5:b3:1a:60:11:f6:9c:47:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:44:E8:9F:05:0D:F7:2D:77:3B:E4:77:8E:DC:02:C4:1E:5D:1C
            X509v3 Authority Key Identifier:
                keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:fb:5f:81:46:7e:b7:9d:2b:47:75:28:2d:8a:a2:d9:58:
         6f:aa:c4:e1:d1:f3:3d:17:9f:c6:bf:45:e2:ca:21:a4:ae:98:
         92:46:b2:82:f6:36:71:f4:07:8b:1e:82:01:21:1f:37:67:c3:
         a3:24:a6:dd:54:1c:f6:d4:82:f1:13:6e:39:00:74:36:d0:9c:
         ea:cd:40:cd:79:3d:f4:5e:67:84:d1:51:51:fe:f4:d2:25:02:
         d1:30:0f:12:be:e3:b5:20:a4:90:0b:e1:da:02:17:fd:cb:d1:
         ad:5e:b9:df:86:29:54:65:69:75:25:18:8f:62:ef:72:bd:e1:
         21:33:2a:c4:bf:8d:d1:6d:3e:e7:71:6f:96:94:bf:9f:f9:18:
         5b:9a:9b:6d:46:38:a8:36:8b:5f:c7:3a:e6:7c:91:48:6b:69:
         f1:5f:b3:09:38:08:eb:b8:05:9e:b6:74:e5:5a:2d:8f:ed:c2:
         9c:d2:c1:3d:0c:ee:46:14:a7:83:04:6f:90:c5:9e:73:7a:93:
         6f:95:c4:f7:84:98:b5:c9:69:85:dd:d4:ff:08:39:06:d1:16:
         74:c9:b8:3b:31:22:01:b6:68:c0:a8:14:09:cc:c0:3a:06:9e:
         53:28:13:67:7d:22:5e:51:b0:d6:67:12:66:30:a8:6f:04:2a:
         aa:59:57:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwY9O7jjlaopud1IS1upMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz
ZTY5MDQwHhcNMjUwNDEzMDgwMTMzWhcNMjUwNDE0MDgwMTMzWjAzMTEwLwYDVQQD
EyhhNDc0NDRlODlmMDUwZGY3MmQ3NzNiZTQ3NzhlZGMwMmM0MWU1ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU4IRpPfF+7jQ5upqroJOOC6kSb+
mVqgP9uXGZ171P9cYy7UbAFeGZVzGlya9meaxYWFruPvoKC7dD3oDpHv+E8MGvmE
zlCxhXMG077w0l7ZwfnG55bMPL+vsbzJyqBivjYHpVttsPR/4aYko06G6bYbajcf
NDYKSHO5yrI98sUXfcpdQlUxF+2op4WpleaA0x4XEweJlVjOw6GRnIt8QOM+aOqS
cwLA5s4f5kp3WN5fWqO8d/2ILbzb0OOYt5mOaANmPEVfJQA8AeXu661SK75slzB7
ejk7z5w2OYb5zF3kvmFPxmUWCWGyWw5UodvlX6Cl2z6T1bMaYBH2nEdBvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR0ROifBQ33LXc75HeO3ALEHl0cMB8GA1UdIwQY
MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt
MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw
LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpT7X4FG
fredK0d1KC2KotlYb6rE4dHzPRefxr9F4sohpK6YkkaygvY2cfQHix6CASEfN2fD
oySm3VQc9tSC8RNuOQB0NtCc6s1AzXk99F5nhNFRUf700iUC0TAPEr7jtSCkkAvh
2gIX/cvRrV6534YpVGVpdSUYj2Lvcr3hITMqxL+N0W0+53FvlpS/n/kYW5qbbUY4
qDaLX8c65nyRSGtp8V+zCTgI67gFnrZ05Votj+3CnNLBPQzuRhSngwRvkMWec3qT
b5XE94SYtclphd3U/wg5BtEWdMm4OzEiAbZowKgUCczAOgaeUygTZ30iXlGw1mcS
ZjCobwQqqllXZw==
-----END CERTIFICATE-----