Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File:                     hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier:          CeWjOP33dvpISgk03a3U/hW0dy0acsc2v/qGLI7Q4c4=
Subject key identifier:   E3:D2:9A:5F:43:1E:88:24:58:C4:EA:46:62:17:1C:E8:4F:35:5B:73
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer:       /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial:       01962FAB6C6B1355762E57835A9DAAC13C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: uZCpbfkbyl/TtlNBtgU9gxTZQzhqEqScEkDuu+nhRcg=)
                          2: iEKvPS8SPLhC7hkJanIn7-E66Ko.roa (hash: uTaTvTMzaWdAm9ayVhgfeDfN1emMfvXMmA8i6uXhGqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6c:6b:13:55:76:2e:57:83:5a:9d:aa:c1:3c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=e3d29a5f431e882458c4ea4662171ce84f355b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:14:e9:ca:d7:68:28:11:09:4f:03:a8:67:a5:
                    32:87:a3:79:d9:8f:74:e2:d1:d7:c6:ec:6d:ec:42:
                    63:15:a4:8a:e0:6d:df:81:b0:26:6f:89:9d:fc:d9:
                    5e:ce:06:ae:9d:82:e3:6d:fa:b6:14:a4:56:da:8d:
                    27:fa:ae:50:93:1d:17:40:b7:43:ed:a7:e4:76:1e:
                    ab:5f:c0:f4:66:61:77:10:e7:b8:fc:b8:bf:d1:99:
                    e8:95:50:e9:b3:23:63:48:b4:23:72:9a:e0:ec:c4:
                    33:d7:33:72:76:11:bb:e6:27:3a:6b:c1:fe:40:b0:
                    cf:68:13:83:6b:18:f6:b6:8a:29:b6:e0:0d:33:f7:
                    5f:fc:d9:1e:57:86:82:68:06:c9:26:18:6b:0d:52:
                    68:8b:cc:78:26:07:06:30:2c:2a:68:7c:00:e1:c8:
                    41:93:d6:14:75:ab:5d:2b:6e:03:fc:9a:83:01:60:
                    72:15:8f:cf:16:ca:d2:9e:d5:1c:c7:6a:91:55:a2:
                    c3:e9:fa:25:59:21:47:3d:1f:15:19:d9:5e:fd:4f:
                    8e:a8:a1:4d:33:4c:df:47:6b:74:94:00:68:b1:50:
                    f5:a3:b8:67:83:48:79:d9:da:47:c2:9b:3c:28:b3:
                    27:7e:04:c3:56:6a:17:5e:01:09:18:44:9c:94:64:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D2:9A:5F:43:1E:88:24:58:C4:EA:46:62:17:1C:E8:4F:35:5B:73
            X509v3 Authority Key Identifier:
                keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:f0:da:ab:8f:a6:34:6b:b7:75:1b:10:4a:58:31:f6:b5:
         75:2e:97:96:ea:10:7d:b4:30:3e:9e:b0:93:70:9e:dc:a5:e8:
         fc:e1:11:99:a0:2a:a2:33:09:7c:ef:33:c7:09:d4:5a:c8:e8:
         a8:85:24:9c:04:04:6f:5e:30:89:02:7a:f6:45:6b:51:e4:f0:
         03:14:fc:5a:41:f7:55:a1:af:0b:89:a4:07:24:38:25:df:43:
         11:cb:57:71:25:10:83:41:ae:7e:41:7a:ba:0e:14:e1:18:1b:
         9e:62:9f:0e:8a:ac:f6:0f:66:20:0f:e7:28:ec:5f:ca:d0:df:
         1f:d0:46:8a:d0:b4:45:09:82:50:84:fc:6e:a3:82:38:58:8c:
         ce:9b:5c:77:ae:79:a8:13:33:a2:fb:03:be:0f:e4:4c:55:27:
         9d:a3:a8:96:54:08:8f:6f:95:b6:2f:57:bb:15:73:27:88:bd:
         87:78:34:62:3c:3f:b2:71:f3:60:ff:b8:a3:4e:8d:0d:7f:ab:
         40:39:2a:a1:f9:51:8e:58:6d:ba:79:80:29:3e:aa:d0:fa:a4:
         be:77:7e:01:36:13:86:c5:63:c1:5b:eb:c5:60:2c:d7:c3:69:
         d0:a1:61:ce:bf:16:04:ef:10:69:00:f9:78:24:5b:e1:c6:cd:
         9c:1a:70:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2xrE1V2LleDWp2qwTw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3
OTc2YWMwHhcNMjUwNDEzMTUwMTI1WhcNMjUwNDE0MTUwMTI1WjAzMTEwLwYDVQQD
EyhlM2QyOWE1ZjQzMWU4ODI0NThjNGVhNDY2MjE3MWNlODRmMzU1YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBTpytdoKBEJTwOoZ6Uyh6N52Y90
4tHXxuxt7EJjFaSK4G3fgbAmb4md/NlezgaunYLjbfq2FKRW2o0n+q5Qkx0XQLdD
7afkdh6rX8D0ZmF3EOe4/Li/0ZnolVDpsyNjSLQjcprg7MQz1zNydhG75ic6a8H+
QLDPaBODaxj2tooptuANM/df/NkeV4aCaAbJJhhrDVJoi8x4JgcGMCwqaHwA4chB
k9YUdatdK24D/JqDAWByFY/PFsrSntUcx2qRVaLD6folWSFHPR8VGdle/U+OqKFN
M0zfR2t0lABosVD1o7hng0h52dpHwps8KLMnfgTDVmoXXgEJGESclGRvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPSml9DHogkWMTqRmIXHOhPNVtzMB8GA1UdIwQY
MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt
MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx
LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdnw2quP
pjRrt3UbEEpYMfa1dS6XluoQfbQwPp6wk3Ce3KXo/OERmaAqojMJfO8zxwnUWsjo
qIUknAQEb14wiQJ69kVrUeTwAxT8WkH3VaGvC4mkByQ4Jd9DEctXcSUQg0GufkF6
ug4U4RgbnmKfDoqs9g9mIA/nKOxfytDfH9BGitC0RQmCUIT8bqOCOFiMzptcd655
qBMzovsDvg/kTFUnnaOollQIj2+Vti9XuxVzJ4i9h3g0Yjw/snHzYP+4o06NDX+r
QDkqoflRjlhtunmAKT6q0Pqkvnd+ATYThsVjwVvrxWAs18Np0KFhzr8WBO8QaQD5
eCRb4cbNnBpw0Q==
-----END CERTIFICATE-----