Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File:                     HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier:          CxlDSg3MgzF/ZvWtiFQGh0Z9nleMEYtKl2iYkUoSUvc=
Subject key identifier:   23:BB:EE:0A:F4:96:B7:73:8D:0F:89:65:9C:2E:9B:0C:00:6B:50:A9
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer:       /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial:       01962E989AD7C482D5BF5FE95E8B9E7EF60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number:          1016
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
                          2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
                          3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: vmlw2xRaP7jdNMazhTHoRxHpTojLPXIYcpN1iKopvuc=)
                          4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9a:d7:c4:82:d5:bf:5f:e9:5e:8b:9e:7e:f6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=23bbee0af496b7738d0f89659c2e9b0c006b50a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:65:a7:83:fe:39:3a:6c:b3:22:7e:93:e4:
                    ae:58:6e:26:8b:d4:9f:b4:25:c0:08:9d:c6:f6:43:
                    e3:6d:e1:c5:f6:2c:16:b0:bb:a2:a9:82:44:dd:6a:
                    d3:61:c3:04:5d:f8:49:6b:7b:c4:76:f6:26:c5:a2:
                    a6:ec:b6:bf:de:e3:26:4d:18:38:c3:c6:3f:52:0b:
                    00:a6:ac:3d:62:c4:6f:4a:47:fd:40:78:bf:5f:3f:
                    ec:71:c7:62:03:a5:61:91:12:e3:40:df:89:50:bd:
                    0b:05:d7:75:15:cd:30:91:d9:36:26:65:8f:6d:4f:
                    21:9a:91:95:02:59:b9:b3:c7:b9:d8:93:83:7f:47:
                    4b:63:48:27:4f:a7:37:9c:55:54:8e:f3:71:2f:4f:
                    3a:81:88:40:29:40:fc:6f:4b:9a:22:68:2e:47:14:
                    75:1f:23:4d:f2:db:02:43:24:77:d1:63:c5:0c:5e:
                    ed:e6:9b:ac:20:c5:6f:9b:64:9f:97:d2:9e:49:40:
                    49:ef:c4:eb:70:e7:49:e8:32:d3:9a:da:cd:a5:cc:
                    f3:a8:85:b5:f1:b3:27:23:ab:fc:5a:28:78:c3:42:
                    3e:38:04:cf:39:ec:b9:17:d9:10:fe:c4:09:77:96:
                    f0:d8:27:d6:9f:68:f8:5c:7b:e0:2d:f1:1e:97:8d:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BB:EE:0A:F4:96:B7:73:8D:0F:89:65:9C:2E:9B:0C:00:6B:50:A9
            X509v3 Authority Key Identifier:
                keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:9a:c9:3c:40:2b:c5:33:76:0e:41:ad:27:cf:67:38:b7:
         2d:1f:1c:e1:28:1c:79:e4:ab:ec:19:73:d9:1b:06:67:f8:56:
         b3:9c:c8:aa:5a:ca:47:0e:43:1f:b3:0d:3e:6f:68:10:18:8c:
         e0:f7:ca:5a:0a:01:1e:05:1d:58:7f:5b:02:23:d6:7e:fb:1c:
         7a:35:77:db:65:49:26:c4:8e:68:2f:80:3f:cc:d3:84:dd:76:
         3f:78:c4:5a:e8:83:f7:d6:57:ba:85:f1:b0:bf:4f:a7:d6:24:
         61:29:e4:70:6b:a4:50:e1:cd:3b:ea:bb:50:de:be:10:06:0c:
         32:68:2a:00:d1:b7:df:e0:81:78:38:70:bc:f2:03:9a:a6:e2:
         33:e2:dd:e3:5b:9d:09:2a:41:01:57:fa:31:71:d6:da:cc:38:
         3e:04:0e:43:8b:92:41:ef:f6:dd:5f:51:30:08:36:d0:86:45:
         c7:2c:2e:64:2c:26:14:d5:30:7e:d9:82:d4:6f:91:4e:56:fa:
         96:41:88:61:31:d7:ea:6d:c5:77:41:03:4b:4c:da:00:8a:b7:
         6d:c7:9c:8e:63:2e:50:be:91:f4:cd:31:33:2c:8f:6e:c2:d1:
         5d:f6:58:88:6a:cd:19:1f:a3:8d:52:f4:66:45:d5:68:c8:5b:
         ff:b8:e5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJrXxILVv1/pXouefvYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2
ZDlkNmUwHhcNMjUwNDEzMTAwMTE1WhcNMjUwNDE0MTAwMTE1WjAzMTEwLwYDVQQD
EygyM2JiZWUwYWY0OTZiNzczOGQwZjg5NjU5YzJlOWIwYzAwNmI1MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd1lp4P+OTpssyJ+k+SuWG4mi9Sf
tCXACJ3G9kPjbeHF9iwWsLuiqYJE3WrTYcMEXfhJa3vEdvYmxaKm7La/3uMmTRg4
w8Y/UgsApqw9YsRvSkf9QHi/Xz/sccdiA6VhkRLjQN+JUL0LBdd1Fc0wkdk2JmWP
bU8hmpGVAlm5s8e52JODf0dLY0gnT6c3nFVUjvNxL086gYhAKUD8b0uaImguRxR1
HyNN8tsCQyR30WPFDF7t5pusIMVvm2Sfl9KeSUBJ78TrcOdJ6DLTmtrNpczzqIW1
8bMnI6v8Wih4w0I+OATPOey5F9kQ/sQJd5bw2CfWn2j4XHvgLfEel43AWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO77gr0lrdzjQ+JZZwumwwAa1CpMB8GA1UdIwQY
MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt
NWM2OTA0NDdiYTg5LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5
LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu2ayTxA
K8Uzdg5BrSfPZzi3LR8c4SgceeSr7Blz2RsGZ/hWs5zIqlrKRw5DH7MNPm9oEBiM
4PfKWgoBHgUdWH9bAiPWfvscejV322VJJsSOaC+AP8zThN12P3jEWuiD99ZXuoXx
sL9Pp9YkYSnkcGukUOHNO+q7UN6+EAYMMmgqANG33+CBeDhwvPIDmqbiM+Ld41ud
CSpBAVf6MXHW2sw4PgQOQ4uSQe/23V9RMAg20IZFxywuZCwmFNUwftmC1G+RTlb6
lkGIYTHX6m3Fd0EDS0zaAIq3bcecjmMuUL6R9M0xMyyPbsLRXfZYiGrNGR+jjVL0
ZkXVaMhb/7jl6g==
-----END CERTIFICATE-----