Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File:                     hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier:          hjM83E/mcPczPbptASVZf0kjh7WV4yXT3EHkoOSlKJ4=
Subject key identifier:   3D:78:90:95:E0:3A:41:2C:21:4B:82:A5:BA:6E:10:BF:DE:5D:9C:2A
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer:       /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial:       01962ECFA760F302BB7B805D3D70D8598A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number:          7A
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: avtyo94YR/k0lEQ7Vi19Z64XGlvdWfI05bnIdQoxPpw=)
                          2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:60:f3:02:bb:7b:80:5d:3d:70:d8:59:8a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=3d789095e03a412c214b82a5ba6e10bfde5d9c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:69:61:d3:fd:62:b9:64:04:ab:0f:2f:1d:
                    02:e2:e3:1c:8f:43:64:28:0d:b7:9d:76:69:fc:8c:
                    37:0b:07:15:86:20:12:d8:45:8a:b7:e3:1d:6c:59:
                    9d:95:b1:d7:78:bd:90:f1:38:6c:f3:e8:c0:a5:2d:
                    0e:b1:f2:80:8b:6d:58:7e:49:39:90:e6:87:c0:dd:
                    c9:61:6d:6f:03:16:10:4f:29:ec:78:e6:4b:04:17:
                    68:15:82:40:7e:af:02:0d:ab:11:94:27:27:dd:96:
                    3b:c6:c1:b3:0a:d5:66:15:0c:d2:c8:66:65:dd:84:
                    ea:a0:96:0e:59:fd:e7:f9:a9:64:de:cb:d6:e8:38:
                    cd:eb:30:1a:dc:af:4d:7a:cf:00:9f:47:a7:49:2e:
                    1d:45:9b:87:92:e7:12:06:09:8b:bf:b3:c8:1c:04:
                    aa:ec:0f:e2:ba:6e:bc:5f:05:18:15:bf:4c:07:77:
                    17:c8:98:cb:0b:c8:4c:ee:ab:3b:d5:13:0c:47:62:
                    29:b5:79:ed:77:91:cc:bc:fe:ce:6c:fb:16:2f:f5:
                    ba:67:82:ab:23:22:8b:f8:72:38:4f:d5:c7:91:7a:
                    68:d8:85:43:65:ae:c2:97:8e:9e:f9:0a:7e:d0:fb:
                    9a:1f:18:ff:c4:9a:d5:0a:55:59:6c:80:db:2c:a9:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:90:95:E0:3A:41:2C:21:4B:82:A5:BA:6E:10:BF:DE:5D:9C:2A
            X509v3 Authority Key Identifier:
                keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:18:1e:e8:6b:61:ae:2e:25:7a:2b:a7:d8:0b:8f:d1:e3:
         36:36:a3:c6:d5:b9:c6:7d:e8:ea:d6:49:35:f5:d1:b9:f6:12:
         f4:54:3c:dd:a3:24:01:22:b5:fe:3b:e4:9a:78:ab:f4:5f:99:
         ac:1b:2f:63:f5:c5:04:27:5b:e1:7d:7a:68:81:47:0c:9a:5b:
         5e:17:01:94:e6:08:5a:d6:b4:85:a3:21:94:51:a2:96:1c:ee:
         ec:f1:4e:d4:aa:57:85:91:7a:61:41:b9:cc:85:2e:37:1b:b6:
         62:65:f9:63:79:e4:53:95:15:14:b4:5e:9f:e5:d4:b9:65:4c:
         97:ba:1a:ad:41:02:bf:6a:f3:b9:6d:b1:f5:79:bc:03:6a:a7:
         03:0f:ae:26:62:86:84:66:e3:b5:7d:b0:f1:7a:1e:37:91:19:
         08:98:3e:14:7e:82:6f:d1:69:ca:92:ba:13:23:b3:b4:a7:4f:
         90:1c:8f:00:dd:1f:c9:9d:62:4d:e2:ec:fb:2b:c8:4a:c6:2f:
         9d:1f:9c:19:98:fd:59:a2:33:f7:8d:de:1b:d9:22:27:d1:e8:
         58:f3:3f:72:3f:bf:74:b6:a1:37:71:d4:2c:80:a4:17:f6:a6:
         2b:a0:8d:5f:e3:94:6d:36:8b:68:84:f9:e8:6a:f8:77:82:35:
         26:52:da:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6dg8wK7e4BdPXDYWYpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YzYyYzY5NjJlYTMzMDI5YjQ4MDI2MDk4OWUxODUxYzMy
NTIxNzEwHhcNMjUwNDEzMTEwMTIyWhcNMjUwNDE0MTEwMTIyWjAzMTEwLwYDVQQD
EygzZDc4OTA5NWUwM2E0MTJjMjE0YjgyYTViYTZlMTBiZmRlNWQ5YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJpYdP9YrlkBKsPLx0C4uMcj0Nk
KA23nXZp/Iw3CwcVhiAS2EWKt+MdbFmdlbHXeL2Q8Ths8+jApS0OsfKAi21Yfkk5
kOaHwN3JYW1vAxYQTynseOZLBBdoFYJAfq8CDasRlCcn3ZY7xsGzCtVmFQzSyGZl
3YTqoJYOWf3n+alk3svW6DjN6zAa3K9Nes8An0enSS4dRZuHkucSBgmLv7PIHASq
7A/ium68XwUYFb9MB3cXyJjLC8hM7qs71RMMR2IptXntd5HMvP7ObPsWL/W6Z4Kr
IyKL+HI4T9XHkXpo2IVDZa7Cl46e+Qp+0PuaHxj/xJrVClVZbIDbLKmyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD14kJXgOkEsIUuCpbpuEL/eXZwqMB8GA1UdIwQY
MBaAFIbGLGli6jMCm0gCYJieGFHDJSFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHNZc2FXTHFNd0tiU0FKZ21KNFlVY01sSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zNzVmMDQtM2ViMi00ZDliLTkwZmQt
MjQ5YmI0NjFiYTViLzEvaHNZc2FXTHFNd0tiU0FKZ21KNFlVY01sSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zNzVmMDQtM2ViMi00ZDliLTkwZmQtMjQ5YmI0NjFiYTVi
LzEvaHNZc2FXTHFNd0tiU0FKZ21KNFlVY01sSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9kYHuhr
Ya4uJXorp9gLj9HjNjajxtW5xn3o6tZJNfXRufYS9FQ83aMkASK1/jvkmnir9F+Z
rBsvY/XFBCdb4X16aIFHDJpbXhcBlOYIWta0haMhlFGilhzu7PFO1KpXhZF6YUG5
zIUuNxu2YmX5Y3nkU5UVFLRen+XUuWVMl7oarUECv2rzuW2x9Xm8A2qnAw+uJmKG
hGbjtX2w8XoeN5EZCJg+FH6Cb9FpypK6EyOztKdPkByPAN0fyZ1iTeLs+yvISsYv
nR+cGZj9WaIz943eG9kiJ9HoWPM/cj+/dLahN3HULICkF/amK6CNX+OUbTaLaIT5
6Gr4d4I1JlLajA==
-----END CERTIFICATE-----