Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File:                     Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier:          fkQ34TYE+quO/cRmXUrHRwU+o1tYkAb7RosnJ/uqjIo=
Subject key identifier:   AF:FA:B9:77:DD:36:B9:48:A6:65:6E:F4:A0:85:6E:78:D1:B5:39:5A
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer:       /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial:       01962E2AEF2A122828D083227F61FC883A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number:          122B
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: zZGgJ4/QXO1bVhJUPfWuv7mukl4Rd73lXG/qiQPZh2w=)
                          2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:2a:12:28:28:d0:83:22:7f:61:fc:88:3a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=affab977dd36b948a6656ef4a0856e78d1b5395a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:1c:af:06:63:42:86:63:36:ec:04:3c:de:
                    cb:4e:12:85:ea:2b:24:4b:83:02:c9:4c:8f:5a:fc:
                    f4:e8:bf:e7:c5:1d:6c:6a:35:52:15:53:ff:0b:79:
                    27:18:44:75:37:0f:cf:7b:b4:4e:83:48:7e:13:4d:
                    c1:94:83:99:c4:de:c5:0d:cd:32:1a:bd:49:ae:de:
                    3d:c3:7b:64:14:5c:6e:f8:0b:98:77:d0:86:5b:f1:
                    f2:29:dd:2e:51:e1:2a:7e:49:a7:05:08:66:bc:cd:
                    ea:1e:9b:9e:01:ef:38:2c:54:63:8d:51:e5:02:c9:
                    e9:2b:ea:8d:4d:25:e8:ed:ce:27:54:fd:44:b8:aa:
                    00:88:16:e6:82:03:e8:b1:bb:e8:2c:9a:e8:97:1d:
                    89:7d:31:d6:d6:8e:2d:00:9f:6b:4f:86:ca:13:c7:
                    ef:65:c2:bb:ff:2d:16:9c:99:d1:f4:1c:72:2f:45:
                    ed:a6:15:df:ae:c8:31:1c:f2:ee:32:64:1d:b1:6b:
                    9e:41:35:7f:f1:05:cb:6f:85:9e:21:28:ad:a9:39:
                    c7:25:05:d1:6a:66:60:43:df:47:e5:af:c7:8e:aa:
                    81:57:45:54:8d:44:b5:64:44:2c:94:25:43:aa:0e:
                    c9:89:e9:14:cb:65:2a:2f:8d:8c:57:72:cb:df:d5:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FA:B9:77:DD:36:B9:48:A6:65:6E:F4:A0:85:6E:78:D1:B5:39:5A
            X509v3 Authority Key Identifier:
                keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:38:b5:8d:35:f3:eb:89:f4:7b:30:b5:18:c0:cc:5b:02:f0:
         5c:86:a8:96:f1:5c:be:51:81:36:ac:6b:aa:e1:36:69:d3:06:
         c1:39:35:08:72:53:11:85:10:cc:3a:35:b6:9e:30:13:bd:3c:
         e6:80:12:96:2b:c2:9b:6f:05:6a:e2:11:38:6c:6e:66:05:12:
         55:5b:8d:e5:66:96:97:4c:e6:1a:7b:03:f3:ba:e8:6f:15:36:
         c4:a7:3e:00:ad:7c:32:f6:00:d2:22:24:41:18:73:fe:51:17:
         79:ef:6f:8d:c0:2d:f7:45:5c:00:e6:6e:09:bb:d0:0f:93:95:
         9d:e3:b4:a2:0d:a1:24:30:e4:d9:01:be:f2:6c:9a:1d:ee:82:
         84:18:d2:9f:c0:2b:75:0f:65:d7:88:31:3a:d4:a8:69:d9:c0:
         5b:29:5e:59:62:3c:5a:a8:68:35:11:43:2c:cf:21:13:6c:f1:
         56:a0:52:b5:fb:d7:4f:8e:2c:4c:31:f0:57:00:a0:aa:8b:25:
         de:d4:d4:9c:b4:e5:a6:3f:c7:1e:21:8d:d7:b2:96:6f:d7:b5:
         62:b6:d9:80:ed:76:f2:e1:90:a8:f9:a6:da:ae:0a:3e:79:3a:
         68:25:e8:ec:7e:d5:db:37:5e:3a:0f:be:c8:5e:99:02:9f:c1:
         ba:b0:d3:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu8qEigo0IMif2H8iDouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
EyhhZmZhYjk3N2RkMzZiOTQ4YTY2NTZlZjRhMDg1NmU3OGQxYjUzOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM8crwZjQoZjNuwEPN7LThKF6isk
S4MCyUyPWvz06L/nxR1sajVSFVP/C3knGER1Nw/Pe7ROg0h+E03BlIOZxN7FDc0y
Gr1Jrt49w3tkFFxu+AuYd9CGW/HyKd0uUeEqfkmnBQhmvM3qHpueAe84LFRjjVHl
AsnpK+qNTSXo7c4nVP1EuKoAiBbmggPosbvoLJrolx2JfTHW1o4tAJ9rT4bKE8fv
ZcK7/y0WnJnR9BxyL0XtphXfrsgxHPLuMmQdsWueQTV/8QXLb4WeISitqTnHJQXR
amZgQ99H5a/HjqqBV0VUjUS1ZEQslCVDqg7JiekUy2UqL42MV3LL39WGqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/6uXfdNrlIpmVu9KCFbnjRtTlaMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzi1jTXz
64n0ezC1GMDMWwLwXIaolvFcvlGBNqxrquE2adMGwTk1CHJTEYUQzDo1tp4wE708
5oASlivCm28FauIROGxuZgUSVVuN5WaWl0zmGnsD87robxU2xKc+AK18MvYA0iIk
QRhz/lEXee9vjcAt90VcAOZuCbvQD5OVneO0og2hJDDk2QG+8myaHe6ChBjSn8Ar
dQ9l14gxOtSoadnAWyleWWI8WqhoNRFDLM8hE2zxVqBStfvXT44sTDHwVwCgqosl
3tTUnLTlpj/HHiGN17KWb9e1YrbZgO128uGQqPmm2q4KPnk6aCXo7H7V2zdeOg++
yF6ZAp/BurDTJg==
-----END CERTIFICATE-----