Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File:                     4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier:          pgSq8rsNbvQJmaKT8gWEmTSPVh4yBUyRTBDgziJzdno=
Subject key identifier:   B5:D6:60:C3:51:42:58:5D:E0:46:7F:CC:89:AC:C3:66:DC:ED:F9:B9
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer:       /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial:       01962E995A12F4C826F6302F9DBF889BD91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number:          0213
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: xJDQQjaUnnOPRgb8AJ120TAnzcjw6tGWqYkifwTTMJ8=)
                          2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5a:12:f4:c8:26:f6:30:2f:9d:bf:88:9b:d9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=b5d660c35142585de0467fcc89acc366dcedf9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:82:3e:35:83:3c:52:44:93:5e:d0:1c:e5:
                    82:a4:5c:40:11:15:57:ce:6f:cb:c3:b1:73:38:64:
                    51:b9:bf:11:ae:8c:4a:ad:c1:44:fb:97:22:80:94:
                    f8:fa:81:13:c6:70:21:57:c0:57:ea:40:ff:29:4b:
                    a9:02:31:fa:87:c9:be:39:1d:55:c2:57:ca:7e:4c:
                    b9:06:69:94:6a:5e:29:ee:89:e3:af:06:8f:6e:d4:
                    96:1d:5f:5b:58:c0:4f:7a:fa:51:67:72:ae:50:51:
                    2a:d5:5e:d8:8b:d8:55:f8:0a:bc:32:9a:f4:36:88:
                    d7:aa:5b:6e:d8:0b:9e:9e:e2:9c:7c:40:9e:d3:ab:
                    81:f6:e5:8c:7f:19:eb:91:dc:21:2c:d8:78:eb:4a:
                    2a:1a:30:5d:4e:1a:ed:d7:8d:7e:97:e0:50:99:c0:
                    47:0c:01:8e:fb:36:1d:a0:3c:5c:4c:9f:9f:9f:0a:
                    5f:67:40:e6:60:c5:e9:86:b6:e0:75:5f:8a:6c:88:
                    db:8f:0c:56:f1:4f:4a:57:77:d8:b0:8f:4b:cd:08:
                    00:ed:60:19:b4:e9:b8:51:2d:7d:34:69:8e:17:51:
                    41:f5:b7:21:42:e4:38:bb:c2:38:6a:34:e7:17:51:
                    f3:eb:7b:1f:22:88:e2:f8:9b:74:92:c3:3b:ec:c2:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D6:60:C3:51:42:58:5D:E0:46:7F:CC:89:AC:C3:66:DC:ED:F9:B9
            X509v3 Authority Key Identifier:
                keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:86:24:18:9c:20:ac:3f:78:15:4a:bd:a8:96:f3:e4:68:1e:
         3a:69:a9:23:bb:bc:b8:f5:f0:20:67:ed:a3:94:b9:80:f7:98:
         19:c7:de:11:63:b8:c8:ac:c1:11:1b:60:e7:b1:c0:a5:d0:e1:
         bd:23:f3:22:6c:13:59:93:d7:a7:ec:2f:97:20:1d:31:b9:ba:
         33:b7:52:64:af:24:79:4f:e4:5c:3e:9e:f4:62:23:f8:0d:f4:
         7e:c7:6f:68:10:33:34:2e:41:bb:f5:77:30:97:f3:ba:5f:5f:
         42:e8:72:c6:81:de:ab:45:2a:20:f6:83:cc:1a:4c:a6:c1:b6:
         b8:dd:d4:8c:2e:4a:21:34:fe:f0:47:53:27:49:f8:bf:e6:7d:
         71:d8:7b:0b:fd:e4:42:10:a6:a7:9d:75:71:5f:bb:5a:c9:1f:
         d8:50:f2:4e:b7:4a:86:72:82:08:51:e4:63:3f:e3:97:56:f0:
         54:95:3a:1c:cc:cb:d3:c7:3c:90:a3:17:e5:68:33:e1:e6:53:
         aa:62:41:e9:78:4d:e2:21:5b:e4:e2:92:15:51:01:84:28:84:
         bf:86:1f:a5:44:f5:23:92:f6:73:b5:19:75:df:59:fc:6e:31:
         0c:5c:f6:e9:a7:77:44:be:c0:1f:fd:e8:0f:e9:14:26:13:4b:
         59:49:4b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVoS9Mgm9jAvnb+Im9kcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzFiOWVmNDFhNTM4Mjg1OGNkOWVlZjk4YTdmYjlkMTI2
YWE0YWUwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhiNWQ2NjBjMzUxNDI1ODVkZTA0NjdmY2M4OWFjYzM2NmRjZWRmOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD2CPjWDPFJEk17QHOWCpFxAERVX
zm/Lw7FzOGRRub8RroxKrcFE+5cigJT4+oETxnAhV8BX6kD/KUupAjH6h8m+OR1V
wlfKfky5BmmUal4p7onjrwaPbtSWHV9bWMBPevpRZ3KuUFEq1V7Yi9hV+Aq8Mpr0
NojXqltu2AuenuKcfECe06uB9uWMfxnrkdwhLNh460oqGjBdThrt141+l+BQmcBH
DAGO+zYdoDxcTJ+fnwpfZ0DmYMXphrbgdV+KbIjbjwxW8U9KV3fYsI9LzQgA7WAZ
tOm4US19NGmOF1FB9bchQuQ4u8I4ajTnF1Hz63sfIoji+Jt0ksM77MLTpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXWYMNRQlhd4EZ/zImsw2bc7fm5MB8GA1UdIwQY
MBaAFOBxue9BpTgoWM2e75in+50SaqSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWIt
YmIzODBiY2FiZDI4LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWItYmIzODBiY2FiZDI4
LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoYkGJwg
rD94FUq9qJbz5GgeOmmpI7u8uPXwIGfto5S5gPeYGcfeEWO4yKzBERtg57HApdDh
vSPzImwTWZPXp+wvlyAdMbm6M7dSZK8keU/kXD6e9GIj+A30fsdvaBAzNC5Bu/V3
MJfzul9fQuhyxoHeq0UqIPaDzBpMpsG2uN3UjC5KITT+8EdTJ0n4v+Z9cdh7C/3k
QhCmp511cV+7Wskf2FDyTrdKhnKCCFHkYz/jl1bwVJU6HMzL08c8kKMX5Wgz4eZT
qmJB6XhN4iFb5OKSFVEBhCiEv4YfpUT1I5L2c7UZdd9Z/G4xDFz26ad3RL7AH/3o
D+kUJhNLWUlL3g==
-----END CERTIFICATE-----