Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          r84e8DFuM8Q+GV97Oy60Cfj4h3Wsw2WXinNtTeai8ls=
Subject key identifier:   07:4A:9A:F3:E7:CE:46:DD:6D:9D:4F:65:6F:0F:90:21:F8:91:78:F0
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       01962F74CE0F43DF650C17B3668EE2361B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 1a8VrRBxuEM9gIitWA-MTYGiH6k.roa (hash: o75BqB590sV6r1bb5EcguY1B6QE3rDYfVkZNGdgh7Sw=)
                          2: 5xOfslnPq8-oHcDS47I_csGpD8Q.roa (hash: 4dFQELulj6P8yjTGdV2+DXhC0ieIeLQi8X9meQWips0=)
                          3: DCocrInE23WH5yhpx0FXxrNY7_Y.roa (hash: O6VU1JCrRAIS6a+yNeHmYk7E8wYytQ8Lu8b/Fc+fOqI=)
                          4: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: /0tLvCAqEvCzdW0bqrnTyRoSV8TnzkGsrAFKADoqZFQ=)
                          5: du6DBdKlb1Cr5Z5mqlctF2rW68k.roa (hash: XaoP28uRsMgk856VCX7c/74Lo2ezwg/z+6hQ43OafIc=)
                          6: gvR46ytTmKrRi4maCYGnQqf4WI8.roa (hash: ViNC6FNBy9cckM8WILnCXIRpeOOtSFGRhOo8i05WQf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ce:0f:43:df:65:0c:17:b3:66:8e:e2:36:1b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=074a9af3e7ce46dd6d9d4f656f0f9021f89178f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:76:43:51:76:85:95:50:7e:a0:84:96:24:
                    28:d9:49:e9:1e:cc:a1:a5:d8:11:a0:4d:4d:e8:6a:
                    53:ff:2d:52:27:39:d6:72:33:95:94:16:56:fa:42:
                    82:f8:a7:55:39:ec:41:d1:ae:5e:f1:3c:6d:89:a9:
                    a0:2f:f9:0e:eb:22:35:be:8b:97:4e:66:a1:52:9e:
                    76:c4:b8:84:f1:f2:53:73:24:ba:a6:ae:2c:15:e8:
                    9f:db:4f:32:a0:70:08:04:fc:5c:35:89:49:55:57:
                    08:26:d2:76:b1:15:8c:31:89:5d:13:1a:3d:cd:c4:
                    e1:66:36:79:8b:34:37:85:2a:9a:c3:32:39:95:9b:
                    9c:eb:56:ad:3a:a0:0a:2a:1c:a1:b1:4d:26:58:de:
                    9b:c5:15:41:8b:66:9d:aa:c3:70:0c:86:82:b4:1d:
                    ac:fb:c2:47:40:34:4e:19:da:bf:a2:d8:b2:29:86:
                    ab:71:a5:0a:8f:54:fd:45:25:61:e6:85:39:b1:8d:
                    d8:23:b1:76:da:58:aa:2c:34:db:4c:07:02:e7:1e:
                    b9:99:44:86:6b:81:f9:9d:58:69:01:f1:0e:0e:ed:
                    ef:58:16:dd:e3:02:12:df:31:10:e7:fc:fb:b9:ea:
                    51:62:06:46:2a:2f:72:3b:70:ea:0d:0f:cc:ed:d2:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4A:9A:F3:E7:CE:46:DD:6D:9D:4F:65:6F:0F:90:21:F8:91:78:F0
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:4a:a2:24:e5:9f:a1:53:52:22:c3:9f:2c:d2:f6:7c:4f:
         b4:ec:dc:21:e3:f9:b3:ea:32:46:6c:98:37:d3:c0:c2:96:51:
         c4:7c:55:08:fc:ba:1a:e4:0f:7e:08:ad:8b:bf:1a:07:a5:e6:
         d2:f3:dc:3b:73:ae:86:c8:3f:d2:4c:b7:e6:68:1d:c7:12:de:
         a5:83:df:0f:90:6e:e5:75:9b:ed:cc:78:84:7e:96:a4:87:e3:
         53:79:85:ca:a4:e0:7e:ab:77:4f:fd:9a:32:a7:ad:c7:9c:c8:
         78:58:53:22:63:8f:03:48:bd:a1:09:67:76:24:d5:5a:54:01:
         a1:2e:f7:5d:6e:a2:d6:fc:b6:0d:60:77:46:cd:ae:c0:1c:8e:
         fe:51:cb:df:2a:0e:f4:bb:c3:97:4e:30:05:81:e1:83:c8:08:
         2a:3b:ae:49:a0:61:8a:db:c2:8e:ce:f0:ee:64:7f:dd:45:16:
         5f:58:38:85:1c:d0:0e:5d:5f:d8:55:35:18:0f:fd:19:ff:71:
         a8:b1:c1:79:9a:7d:41:42:1c:25:44:70:5a:fd:b3:2a:41:ba:
         0e:a0:e4:5e:2c:37:e9:d5:4b:b1:68:22:09:80:b2:50:02:0d:
         fe:03:9e:63:28:d6:7c:9a:df:f5:6f:27:e9:9d:52:37:00:d0:
         cf:ef:d6:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdM4PQ99lDBezZo7iNhteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw
ZTVjMTQwHhcNMjUwNDEzMTQwMTQ2WhcNMjUwNDE0MTQwMTQ2WjAzMTEwLwYDVQQD
EygwNzRhOWFmM2U3Y2U0NmRkNmQ5ZDRmNjU2ZjBmOTAyMWY4OTE3OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx12Q1F2hZVQfqCEliQo2UnpHsyh
pdgRoE1N6GpT/y1SJznWcjOVlBZW+kKC+KdVOexB0a5e8TxtiamgL/kO6yI1vouX
TmahUp52xLiE8fJTcyS6pq4sFeif208yoHAIBPxcNYlJVVcIJtJ2sRWMMYldExo9
zcThZjZ5izQ3hSqawzI5lZuc61atOqAKKhyhsU0mWN6bxRVBi2adqsNwDIaCtB2s
+8JHQDROGdq/otiyKYarcaUKj1T9RSVh5oU5sY3YI7F22liqLDTbTAcC5x65mUSG
a4H5nVhpAfEODu3vWBbd4wIS3zEQ5/z7uepRYgZGKi9yO3DqDQ/M7dIKlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdKmvPnzkbdbZ1PZW8PkCH4kXjwMB8GA1UdIwQY
MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt
MGJmYmFkNDg0OWNkLzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk
LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUhKoiTl
n6FTUiLDnyzS9nxPtOzcIeP5s+oyRmyYN9PAwpZRxHxVCPy6GuQPfgiti78aB6Xm
0vPcO3Ouhsg/0ky35mgdxxLepYPfD5Bu5XWb7cx4hH6WpIfjU3mFyqTgfqt3T/2a
Mqetx5zIeFhTImOPA0i9oQlndiTVWlQBoS73XW6i1vy2DWB3Rs2uwByO/lHL3yoO
9LvDl04wBYHhg8gIKjuuSaBhitvCjs7w7mR/3UUWX1g4hRzQDl1f2FU1GA/9Gf9x
qLHBeZp9QUIcJURwWv2zKkG6DqDkXiw36dVLsWgiCYCyUAIN/gOeYyjWfJrf9W8n
6Z1SNwDQz+/WEA==
-----END CERTIFICATE-----