Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
File:                     HAaGYxPWaK_oeYb65f95QfkoBps.mft (raw, json)
Hash identifier:          XllhHfcOtp7hlRVWaqvf33iD9C4igbWLv/dDAcjsHRQ=
Subject key identifier:   49:25:80:6C:53:0B:73:19:73:38:FE:20:2A:38:A3:4E:82:0E:3B:44
Authority key identifier: 1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
Certificate issuer:       /CN=1c06866313d668afe87986fae5ff7941f928069b
Certificate serial:       01962F071C2CE69C6DADC70CDC4973266B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: HAaGYxPWaK_oeYb65f95QfkoBps.crl (hash: Z6Yz5t2PEXCmOh31+BTWN2dCe9+PGhg3OujanBAyObU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:2c:e6:9c:6d:ad:c7:0c:dc:49:73:26:6b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06866313d668afe87986fae5ff7941f928069b
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=4925806c530b73197338fe202a38a34e820e3b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:8c:73:bb:41:5c:b1:6f:6a:4d:fc:3d:40:
                    14:0c:dd:44:32:e8:58:58:d6:a2:f8:8a:44:c7:9c:
                    b2:37:75:68:5a:54:da:b6:5e:86:ab:1f:fc:cf:54:
                    6a:fd:6e:2b:93:d7:a2:d8:c7:0c:da:dc:e2:c7:2f:
                    1f:dd:9e:ef:e6:25:92:f7:ca:11:e5:5c:75:29:ac:
                    64:a0:a0:6d:d7:4d:81:8d:f5:d7:7e:6e:0f:38:ec:
                    00:f0:4a:b1:30:57:ba:66:81:66:a1:89:e1:3b:ca:
                    8f:b6:3c:87:ca:e9:74:89:7e:cd:e8:35:bf:85:51:
                    d4:8c:4f:6b:90:15:83:65:15:65:3b:48:50:89:83:
                    41:e1:09:87:80:b1:ce:7d:0e:51:23:fd:86:5e:98:
                    18:71:cf:62:d2:83:a4:8b:24:4d:35:92:4b:a4:97:
                    d0:21:2e:e1:ff:88:98:72:a8:e6:ba:44:d2:63:9b:
                    39:da:b6:a0:f7:db:b6:09:7a:35:6e:c1:b9:43:58:
                    f6:61:f8:1b:05:68:fe:a3:0f:b3:5c:1d:a0:cc:b5:
                    33:7f:21:67:5f:41:51:93:de:3f:59:11:61:28:46:
                    cb:7d:03:8f:ed:52:72:0e:d5:8c:17:5b:86:be:cd:
                    8e:f4:fb:41:c0:0c:1f:b5:14:4a:e3:14:01:51:ea:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:80:6C:53:0B:73:19:73:38:FE:20:2A:38:A3:4E:82:0E:3B:44
            X509v3 Authority Key Identifier:
                keyid:1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:2b:87:aa:a3:d4:9c:ed:61:49:40:ac:8e:bb:d1:1c:27:
         b9:c2:c6:5f:9d:73:ab:9f:2f:a8:5d:ee:43:3e:95:95:d9:78:
         10:b8:28:22:21:07:73:f3:63:f8:ba:3e:22:39:04:2f:fb:d5:
         f1:f2:02:fc:f4:ee:0b:48:3d:de:04:ad:7b:78:22:b0:c5:d4:
         4b:93:ed:0b:32:21:8f:7a:ae:45:32:ad:a4:41:c7:bf:b9:dc:
         c2:70:95:f1:67:de:85:5e:11:1f:cb:db:9f:b5:62:29:0a:a2:
         87:0d:5f:a7:91:8b:40:b0:19:8a:3f:64:a4:a0:40:d8:74:91:
         6e:76:3b:a4:1d:ab:04:06:10:3a:6b:9f:aa:25:9f:d6:5b:d0:
         c5:be:46:cf:39:52:15:18:51:9f:89:1b:c1:0a:9b:c4:13:e0:
         75:58:ab:05:8a:56:b9:0f:40:21:64:f4:ec:5a:20:44:83:e7:
         f7:44:36:5d:62:b0:be:0c:b1:36:b4:b5:d9:bf:66:2d:45:db:
         21:70:92:6e:d4:cd:72:0f:b6:1c:62:aa:3d:d8:5b:87:bf:e7:
         e1:fc:ff:1e:b4:d5:b6:84:16:c9:60:f8:ee:d3:d0:d0:52:1d:
         eb:96:3b:45:d0:f8:1a:b1:27:f4:29:4c:6b:bf:54:62:b4:17:
         0b:45:55:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxws5pxtrccM3ElzJmuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDY4NjYzMTNkNjY4YWZlODc5ODZmYWU1ZmY3OTQxZjky
ODA2OWIwHhcNMjUwNDEzMTIwMTU3WhcNMjUwNDE0MTIwMTU3WjAzMTEwLwYDVQQD
Eyg0OTI1ODA2YzUzMGI3MzE5NzMzOGZlMjAyYTM4YTM0ZTgyMGUzYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfKMc7tBXLFvak38PUAUDN1EMuhY
WNai+IpEx5yyN3VoWlTatl6Gqx/8z1Rq/W4rk9ei2McM2tzixy8f3Z7v5iWS98oR
5Vx1KaxkoKBt102BjfXXfm4POOwA8EqxMFe6ZoFmoYnhO8qPtjyHyul0iX7N6DW/
hVHUjE9rkBWDZRVlO0hQiYNB4QmHgLHOfQ5RI/2GXpgYcc9i0oOkiyRNNZJLpJfQ
IS7h/4iYcqjmukTSY5s52rag99u2CXo1bsG5Q1j2YfgbBWj+ow+zXB2gzLUzfyFn
X0FRk94/WRFhKEbLfQOP7VJyDtWMF1uGvs2O9PtBwAwftRRK4xQBUeqw7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEklgGxTC3MZczj+ICo4o06CDjtEMB8GA1UdIwQY
MBaAFBwGhmMT1miv6HmG+uX/eUH5KAabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhR1l4UFdhS19vZVliNjVmOTVRZmtvQnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8xY2VkZGQtOThkMS00N2ZkLWIzMGMt
NmFiOThkMzZkYWM2LzEvSEFhR1l4UFdhS19vZVliNjVmOTVRZmtvQnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8xY2VkZGQtOThkMS00N2ZkLWIzMGMtNmFiOThkMzZkYWM2
LzEvSEFhR1l4UFdhS19vZVliNjVmOTVRZmtvQnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj4rh6qj
1JztYUlArI670RwnucLGX51zq58vqF3uQz6Vldl4ELgoIiEHc/Nj+Lo+IjkEL/vV
8fIC/PTuC0g93gSte3gisMXUS5PtCzIhj3quRTKtpEHHv7ncwnCV8WfehV4RH8vb
n7ViKQqihw1fp5GLQLAZij9kpKBA2HSRbnY7pB2rBAYQOmufqiWf1lvQxb5GzzlS
FRhRn4kbwQqbxBPgdVirBYpWuQ9AIWT07FogRIPn90Q2XWKwvgyxNrS12b9mLUXb
IXCSbtTNcg+2HGKqPdhbh7/n4fz/HrTVtoQWyWD47tPQ0FId65Y7RdD4GrEn9ClM
a79UYrQXC0VVOw==
-----END CERTIFICATE-----