Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
File:                     hpNlUyawRyyGbFyZMC4rLXjL3fc.mft (raw, json)
Hash identifier:          jiRlLY3kjgnmIB/e09q2fgmXjIMYvP0DyTr6ZjHXHqw=
Subject key identifier:   EF:0F:F4:C6:0C:47:EE:92:8F:9F:7D:C7:E6:39:B4:CE:A1:BF:17:D1
Authority key identifier: 86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
Certificate issuer:       /CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Certificate serial:       01962E2AEA9624D0D2FAA729279F04FC4EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
Manifest number:          0DC1
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: hpNlUyawRyyGbFyZMC4rLXjL3fc.crl (hash: lpZDv/XvJvd5TjeLGGDrSiAQmG8EtpyC1KAZgQIlHX0=)
                          2: z8Qgne-FkfA3KYq3e01ob5TLZp0.roa (hash: 7fco4lzAt1GZtpXkjpIq4UVmOihkqjl0I1nfOSI77gY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ea:96:24:d0:d2:fa:a7:29:27:9f:04:fc:4e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8693655326b0472c866c5c99302e2b2d78cbddf7
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=ef0ff4c60c47ee928f9f7dc7e639b4cea1bf17d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:62:17:cc:9c:61:67:9f:0f:cf:8b:aa:10:ca:
                    5a:04:2e:a9:23:a6:d4:63:57:5f:59:06:c3:60:70:
                    dd:25:a5:6e:f1:b9:ed:c9:b2:7d:f6:93:2a:91:6c:
                    9a:82:5a:24:7f:75:da:8a:52:55:14:c1:b6:db:3b:
                    df:50:9c:46:65:ac:c7:c3:f5:57:8b:39:9a:ab:7b:
                    db:cb:e4:85:28:31:cf:a8:c7:91:ea:60:60:fc:d4:
                    c9:3c:11:f1:25:f8:cf:8a:21:81:1d:55:f4:a4:27:
                    a1:fe:11:9b:50:2a:7b:1f:2d:60:de:5d:4e:58:8b:
                    c0:ab:5f:65:d7:3a:51:e5:14:fb:8b:43:5d:39:b8:
                    f7:39:35:70:d6:2e:f7:75:38:31:f9:2d:36:24:b5:
                    2c:42:5f:53:93:33:26:ff:42:53:70:0f:c6:c8:1d:
                    ad:a3:7d:c4:12:16:5d:c6:7b:b5:28:83:19:ad:3b:
                    02:f1:5e:ba:e1:7b:3d:5f:82:0f:c4:2d:25:ff:94:
                    01:3b:b2:65:c3:9e:26:aa:9c:ae:eb:9c:22:2b:1d:
                    e6:19:85:b2:d7:c7:a3:ff:35:58:cd:7b:0f:39:79:
                    50:a0:b2:20:87:67:2c:6c:c2:57:82:a7:95:c3:44:
                    97:39:15:28:64:9b:5f:73:5f:f2:75:6c:fb:24:bf:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0F:F4:C6:0C:47:EE:92:8F:9F:7D:C7:E6:39:B4:CE:A1:BF:17:D1
            X509v3 Authority Key Identifier:
                keyid:86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:cc:71:fd:5d:2f:dd:79:d9:bc:09:1d:b2:b0:38:53:11:
         eb:af:11:96:64:76:db:10:cd:67:12:0f:3e:3d:7f:8b:43:46:
         5d:74:24:b6:30:f9:13:00:7f:9e:52:b7:da:7e:64:08:d1:8a:
         cb:7b:fa:80:a6:ef:d0:9e:90:92:b3:50:be:6f:ef:a6:b2:d0:
         f8:17:b0:1f:1d:d7:db:69:ef:59:72:db:c6:13:11:2c:83:3a:
         4f:ee:a2:b1:60:bb:01:18:52:72:54:50:04:69:21:0e:66:cf:
         4f:a4:f8:bb:87:71:88:65:13:f1:34:31:e3:1e:42:64:7f:8f:
         f8:a4:8b:98:9e:5c:7c:f6:97:d3:b6:0d:6b:c9:e0:8c:3c:91:
         d0:47:25:e6:f2:7d:0e:81:11:f2:fa:34:1a:15:93:78:81:57:
         3f:a5:9f:32:8f:27:78:d9:e9:6b:1a:8c:cc:ce:64:af:a8:37:
         98:ca:72:92:b9:e5:8e:24:09:77:2f:fc:72:5d:97:03:3a:8c:
         6b:72:3f:60:79:eb:3a:ea:42:56:2b:d6:b4:06:5d:ed:78:20:
         b7:18:a2:36:4c:ed:c1:bb:89:66:b0:b0:51:b0:88:c0:c7:38:
         93:8d:86:b5:a3:54:80:8d:a5:28:cc:e8:e9:21:cd:f6:46:cf:
         76:6a:f5:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuqWJNDS+qcpJ58E/E7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTM2NTUzMjZiMDQ3MmM4NjZjNWM5OTMwMmUyYjJkNzhj
YmRkZjcwHhcNMjUwNDEzMDgwMTI2WhcNMjUwNDE0MDgwMTI2WjAzMTEwLwYDVQQD
EyhlZjBmZjRjNjBjNDdlZTkyOGY5ZjdkYzdlNjM5YjRjZWExYmYxN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WIXzJxhZ58Pz4uqEMpaBC6pI6bU
Y1dfWQbDYHDdJaVu8bntybJ99pMqkWyaglokf3XailJVFMG22zvfUJxGZazHw/VX
izmaq3vby+SFKDHPqMeR6mBg/NTJPBHxJfjPiiGBHVX0pCeh/hGbUCp7Hy1g3l1O
WIvAq19l1zpR5RT7i0NdObj3OTVw1i73dTgx+S02JLUsQl9TkzMm/0JTcA/GyB2t
o33EEhZdxnu1KIMZrTsC8V664Xs9X4IPxC0l/5QBO7Jlw54mqpyu65wiKx3mGYWy
18ej/zVYzXsPOXlQoLIgh2csbMJXgqeVw0SXORUoZJtfc1/ydWz7JL8NVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8P9MYMR+6Sj599x+Y5tM6hvxfRMB8GA1UdIwQY
MBaAFIaTZVMmsEcshmxcmTAuKy14y933MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBObFV5YXdSeXlHYkZ5Wk1DNHJMWGpMM2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYWMzMzctODA3OS00M2JmLTlmZTEt
OWU2NzcyZWQzOWE2LzEvaHBObFV5YXdSeXlHYkZ5Wk1DNHJMWGpMM2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kYWMzMzctODA3OS00M2JmLTlmZTEtOWU2NzcyZWQzOWE2
LzEvaHBObFV5YXdSeXlHYkZ5Wk1DNHJMWGpMM2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblPMcf1d
L9152bwJHbKwOFMR668RlmR22xDNZxIPPj1/i0NGXXQktjD5EwB/nlK32n5kCNGK
y3v6gKbv0J6QkrNQvm/vprLQ+BewHx3X22nvWXLbxhMRLIM6T+6isWC7ARhSclRQ
BGkhDmbPT6T4u4dxiGUT8TQx4x5CZH+P+KSLmJ5cfPaX07YNa8ngjDyR0Ecl5vJ9
DoER8vo0GhWTeIFXP6WfMo8neNnpaxqMzM5kr6g3mMpykrnljiQJdy/8cl2XAzqM
a3I/YHnrOupCVivWtAZd7XggtxiiNkztwbuJZrCwUbCIwMc4k42GtaNUgI2lKMzo
6SHN9kbPdmr1Ug==
-----END CERTIFICATE-----