Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File:                     hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier:          Ekk3eJFUUbUb1ghTPNJn7mYTuFpbIX+AY6m3koNkNMM=
Subject key identifier:   61:1D:74:56:68:44:22:EC:81:79:24:B7:2A:53:59:8D:1C:D2:38:1B
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer:       /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial:       01962E9982CF02F5EBB7B352776F442A3DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number:          10A1
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
                          2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
                          3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 8L31xmH4S35XwZW47Od4ibUxjiI/BdDiUBOVLKlEWb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:82:cf:02:f5:eb:b7:b3:52:77:6f:44:2a:3d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=611d7456684422ec817924b72a53598d1cd2381b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:f9:8d:b3:5f:e6:df:04:e9:d0:64:70:7d:
                    5d:8e:7d:8b:a2:f4:92:f1:6b:b4:87:85:bd:3b:7f:
                    4f:22:55:89:89:0f:c8:6c:eb:cb:ee:39:f4:72:dd:
                    cb:43:2d:94:cb:43:91:68:0e:a6:32:e3:54:32:61:
                    64:1b:ce:0a:0d:a7:9d:d8:6c:9d:24:de:4d:7a:60:
                    09:d9:fb:b6:88:9a:5c:52:7f:7b:5d:0a:c2:c6:3c:
                    72:db:22:67:08:8a:d8:63:36:e8:70:e3:7e:74:61:
                    17:13:20:54:ff:9b:d1:ab:bd:03:f5:62:42:91:1c:
                    d0:04:f5:b8:fe:9c:e6:3c:47:62:63:3f:62:c8:07:
                    cb:da:e9:ed:77:7c:35:fb:93:49:d1:90:1c:5f:fb:
                    43:f6:d8:66:c5:03:f7:1e:da:6b:4c:ec:bb:b9:0e:
                    df:bb:33:bc:b4:cd:70:3f:24:2d:01:5a:af:70:d5:
                    12:98:19:b2:87:02:96:cd:1a:33:81:52:56:cb:77:
                    f7:bd:02:7d:1d:0e:d6:ee:cd:30:33:1e:25:e0:8f:
                    27:7d:9b:53:c6:2b:ca:74:e0:42:44:19:4b:45:6c:
                    dd:5d:2b:a3:fd:0f:5d:f5:92:7c:49:8f:0d:40:5f:
                    bc:c9:3e:58:44:d3:14:3f:e1:bb:69:e5:e0:c0:63:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:74:56:68:44:22:EC:81:79:24:B7:2A:53:59:8D:1C:D2:38:1B
            X509v3 Authority Key Identifier:
                keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:23:17:ea:50:74:14:61:65:aa:04:11:a5:df:52:3c:f4:c9:
         d1:56:b9:af:18:d7:6a:8b:db:b7:c0:ec:23:04:58:b7:35:95:
         ca:12:e2:15:59:6a:a0:63:d8:81:ac:0e:6f:30:50:6d:8a:fb:
         65:15:a9:1d:50:b2:10:ee:c1:06:e2:44:f0:6a:ca:f1:06:45:
         99:3a:a5:3f:a5:b0:d1:0f:47:67:4d:98:f5:e7:ef:b3:45:40:
         bc:cb:bb:01:0d:6c:df:a9:66:13:7e:d6:9e:19:6c:bb:27:23:
         2c:40:51:92:e2:9c:8d:ab:f2:3b:f0:e5:0c:a4:4c:7b:0d:71:
         ec:f8:b5:ab:0f:6f:2f:51:92:b9:ef:1f:e4:f3:57:69:97:8f:
         b3:09:4c:6f:1e:25:be:e9:93:eb:a6:fe:af:fb:9b:04:03:7d:
         53:60:11:cd:41:ea:96:fb:b8:55:6d:a0:a4:a1:b6:9e:36:9b:
         e4:2b:bb:ea:be:19:c9:89:48:e2:64:5c:55:16:96:86:68:5a:
         78:4a:29:ae:38:0c:d3:57:c6:e4:44:83:4a:be:fd:28:51:81:
         39:33:b2:b9:2f:ec:10:d1:f0:a3:b2:12:f4:46:65:04:ab:41:
         7f:71:5b:32:8e:5f:24:bb:ee:4f:5f:17:cf:f5:d4:be:92:77:
         dd:e7:20:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYLPAvXrt7NSd29EKj34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl
NGJiNTIwHhcNMjUwNDEzMTAwMjE0WhcNMjUwNDE0MTAwMjE0WjAzMTEwLwYDVQQD
Eyg2MTFkNzQ1NjY4NDQyMmVjODE3OTI0YjcyYTUzNTk4ZDFjZDIzODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwr5jbNf5t8E6dBkcH1djn2LovSS
8Wu0h4W9O39PIlWJiQ/IbOvL7jn0ct3LQy2Uy0ORaA6mMuNUMmFkG84KDaed2Gyd
JN5NemAJ2fu2iJpcUn97XQrCxjxy2yJnCIrYYzbocON+dGEXEyBU/5vRq70D9WJC
kRzQBPW4/pzmPEdiYz9iyAfL2untd3w1+5NJ0ZAcX/tD9thmxQP3HtprTOy7uQ7f
uzO8tM1wPyQtAVqvcNUSmBmyhwKWzRozgVJWy3f3vQJ9HQ7W7s0wMx4l4I8nfZtT
xivKdOBCRBlLRWzdXSuj/Q9d9ZJ8SY8NQF+8yT5YRNMUP+G7aeXgwGN+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEddFZoRCLsgXkktypTWY0c0jgbMB8GA1UdIwQY
MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt
OWFkZTM5NmY3YzRjLzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj
LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyMX6lB0
FGFlqgQRpd9SPPTJ0Va5rxjXaovbt8DsIwRYtzWVyhLiFVlqoGPYgawObzBQbYr7
ZRWpHVCyEO7BBuJE8GrK8QZFmTqlP6Ww0Q9HZ02Y9efvs0VAvMu7AQ1s36lmE37W
nhlsuycjLEBRkuKcjavyO/DlDKRMew1x7Pi1qw9vL1GSue8f5PNXaZePswlMbx4l
vumT66b+r/ubBAN9U2ARzUHqlvu4VW2gpKG2njab5Cu76r4ZyYlI4mRcVRaWhmha
eEoprjgM01fG5ESDSr79KFGBOTOyuS/sENHwo7IS9EZlBKtBf3FbMo5fJLvuT18X
z/XUvpJ33ecgMw==
-----END CERTIFICATE-----