Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File:                     HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier:          dgCo/e4pSKHpqVBsTBC4QPqhSo9hzJCGcAl1WkJYkRM=
Subject key identifier:   FE:0C:F4:BC:C2:55:E6:78:88:D9:D7:F9:B0:A3:9D:3C:00:23:67:45
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer:       /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial:       01962E620133FB0AFD2A2044AEDB14D5D5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number:          0C09
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
                          2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: ob6aloEmlI31fLRIrje/bVMIeSbBZdKucJcRHtgHA/c=)
                          3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:01:33:fb:0a:fd:2a:20:44:ae:db:14:d5:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=fe0cf4bcc255e67888d9d7f9b0a39d3c00236745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:14:50:5a:05:75:87:da:f1:f7:5e:c3:01:2b:
                    93:f2:4a:65:41:19:18:c9:a9:bf:e6:34:0e:b6:e2:
                    1a:26:83:35:61:d1:b3:55:9b:27:9d:8e:a5:75:fb:
                    60:95:ed:7d:12:80:e1:a6:b3:ed:9d:ad:4b:7a:92:
                    e6:6d:fc:ab:95:fd:df:83:9d:26:2c:41:97:1a:ec:
                    4f:72:7d:d3:48:b0:00:36:3f:97:26:3a:d6:8a:9f:
                    ab:de:12:ce:6c:d3:40:00:af:73:54:69:57:63:86:
                    74:a0:fb:11:c9:87:c7:5b:2c:f7:56:99:b1:f9:05:
                    29:d9:ee:46:6a:fd:d1:37:29:94:52:d8:56:ea:e4:
                    3b:0d:35:a1:77:9b:02:75:3f:a2:98:92:44:e7:a5:
                    4a:ae:28:0b:d3:07:09:c9:ab:41:76:ec:6e:a7:5d:
                    18:6a:a0:5a:06:a5:02:77:f2:e1:04:79:b1:66:a4:
                    00:a8:fb:58:1b:27:57:d1:4d:06:34:4c:5b:a0:9f:
                    f5:54:ad:ff:18:01:f3:1a:ca:41:f8:a3:94:08:82:
                    63:61:16:2f:ef:d9:c9:c4:9f:44:60:a7:ae:08:85:
                    c1:9a:4c:fb:0e:1f:ba:bd:73:2c:17:53:a8:60:30:
                    9a:13:64:79:41:6b:56:70:f4:21:17:13:27:8b:27:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0C:F4:BC:C2:55:E6:78:88:D9:D7:F9:B0:A3:9D:3C:00:23:67:45
            X509v3 Authority Key Identifier:
                keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:64:1f:75:72:62:80:ec:37:b6:46:6a:b6:9b:ff:e9:f9:
         6b:fa:43:63:a9:72:60:b2:e1:98:a0:03:ac:2c:d0:a0:e7:16:
         b1:c8:fb:94:14:d2:6e:72:b5:5d:3a:91:09:07:e7:24:42:dc:
         8d:b8:fa:d2:60:3b:fc:68:e3:23:58:88:3b:74:77:4c:bf:9c:
         5e:44:37:ca:7b:57:f8:b7:91:c9:22:1f:9f:7d:3b:80:87:da:
         ab:6e:68:78:d1:0f:71:c2:4a:62:bb:61:dd:b5:30:1d:37:3f:
         4f:9e:2e:6d:03:98:71:ef:3c:7c:b9:6d:1b:64:3e:b2:d1:5d:
         2d:25:eb:fe:53:d4:8c:68:de:aa:16:11:f0:4a:5f:a4:8b:10:
         f2:ae:9e:b3:6d:93:15:94:2f:f4:4f:91:d4:2c:28:04:82:bc:
         79:7b:13:2f:9f:15:6a:1c:17:60:e5:e8:a0:f8:94:7d:e5:e3:
         38:2b:c7:ad:a0:8a:ad:e1:b5:40:86:c5:3f:68:5b:2c:e9:c5:
         ae:42:70:c1:49:95:8e:68:09:03:89:24:2b:39:5a:f3:9a:c9:
         52:4e:12:a8:f6:70:c9:af:23:84:06:37:8f:e5:80:3a:63:d8:
         0f:de:c9:31:80:0a:c6:01:19:c1:fb:04:59:94:e7:e7:e4:04:
         83:24:a6:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgEz+wr9KiBErtsU1dX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2
OWIzZjUwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
EyhmZTBjZjRiY2MyNTVlNjc4ODhkOWQ3ZjliMGEzOWQzYzAwMjM2NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RRQWgV1h9rx917DASuT8kplQRkY
yam/5jQOtuIaJoM1YdGzVZsnnY6ldftgle19EoDhprPtna1LepLmbfyrlf3fg50m
LEGXGuxPcn3TSLAANj+XJjrWip+r3hLObNNAAK9zVGlXY4Z0oPsRyYfHWyz3Vpmx
+QUp2e5Gav3RNymUUthW6uQ7DTWhd5sCdT+imJJE56VKrigL0wcJyatBduxup10Y
aqBaBqUCd/LhBHmxZqQAqPtYGydX0U0GNExboJ/1VK3/GAHzGspB+KOUCIJjYRYv
79nJxJ9EYKeuCIXBmkz7Dh+6vXMsF1OoYDCaE2R5QWtWcPQhFxMniyfutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4M9LzCVeZ4iNnX+bCjnTwAI2dFMB8GA1UdIwQY
MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt
NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2
LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCRkH3Vy
YoDsN7ZGarab/+n5a/pDY6lyYLLhmKADrCzQoOcWscj7lBTSbnK1XTqRCQfnJELc
jbj60mA7/GjjI1iIO3R3TL+cXkQ3yntX+LeRySIfn307gIfaq25oeNEPccJKYrth
3bUwHTc/T54ubQOYce88fLltG2Q+stFdLSXr/lPUjGjeqhYR8EpfpIsQ8q6es22T
FZQv9E+R1CwoBIK8eXsTL58VahwXYOXooPiUfeXjOCvHraCKreG1QIbFP2hbLOnF
rkJwwUmVjmgJA4kkKzla85rJUk4SqPZwya8jhAY3j+WAOmPYD97JMYAKxgEZwfsE
WZTn5+QEgySmmg==
-----END CERTIFICATE-----