Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File:                     H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier:          2dxK49TQhVbP0D60EOfk8MLdsQ/JUtedLhtBqN5fIiE=
Subject key identifier:   D3:FD:71:19:0F:58:A9:FF:49:6A:27:40:C8:BE:A1:D5:53:9F:52:E0
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer:       /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial:       01962E2B36C58E5099FA5A4EAD21F93BD41A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number:          0563
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: eSkODhG55KO6pKlshzQEiIPjr9ccLq+CaKUofV1/O+g=)
                          2: vNb5RJ1NWF9KAT0KbsLINglMmW4.roa (hash: jXTgKmQPGBZpjKgqqLkxLQhegQk4xAz/b6i4eexj5wk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:36:c5:8e:50:99:fa:5a:4e:ad:21:f9:3b:d4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=d3fd71190f58a9ff496a2740c8bea1d5539f52e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:e3:3a:76:c9:1b:fb:90:1c:fd:e0:f8:64:
                    4f:c3:75:e7:39:08:a9:ec:36:79:8b:dc:3b:6f:17:
                    df:cb:08:a8:ee:82:e4:02:41:1e:c1:20:d5:89:30:
                    0f:f8:7b:22:18:dd:6f:98:98:e8:56:b2:4f:96:c8:
                    4e:70:83:8f:7d:96:bb:fb:44:78:e8:d5:c2:19:b2:
                    99:c1:64:47:e6:86:20:5e:65:6b:45:f2:e6:e2:6f:
                    10:33:fd:c2:19:de:a9:36:02:9d:2f:13:9a:c0:0c:
                    59:bf:ff:60:ef:dd:5e:5b:37:64:fa:c6:ca:94:29:
                    9e:b6:4b:47:37:38:5e:23:78:8d:93:5b:59:5f:f3:
                    56:cc:da:33:60:56:c3:4b:e9:81:7b:cb:da:c4:eb:
                    9d:d8:a8:df:34:f7:3b:fa:70:3e:fa:bc:d4:c0:a3:
                    0a:7f:52:9c:42:8a:ec:75:82:49:4d:27:52:89:15:
                    34:87:26:3b:a0:e7:8c:20:12:a6:10:b8:33:1d:45:
                    67:ec:e3:0c:c2:77:d5:00:e6:f2:40:64:65:39:79:
                    3d:a4:9e:22:96:e8:88:64:c6:6f:ce:1d:1f:a4:1f:
                    f5:3b:3f:f5:1d:be:06:d0:d1:f0:f5:ca:aa:ca:bb:
                    59:45:5d:6a:68:60:ed:c2:85:18:d2:55:21:5a:24:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:71:19:0F:58:A9:FF:49:6A:27:40:C8:BE:A1:D5:53:9F:52:E0
            X509v3 Authority Key Identifier:
                keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:1a:f4:08:bb:d9:d9:ec:a0:a1:b9:28:f5:1d:ff:ae:80:
         37:ef:ae:d0:07:d4:3c:18:9f:fe:da:7c:28:20:1e:af:2c:df:
         5c:db:d7:58:7c:68:e6:36:0c:84:7d:2b:f1:4c:4b:b8:db:c9:
         8f:30:3a:56:3a:55:40:9f:02:66:84:8b:e3:f0:13:86:05:d2:
         fe:5c:3e:ff:4c:82:d5:16:a1:30:36:59:88:41:37:39:ec:32:
         2f:9c:af:57:88:70:a3:f7:31:1e:17:0c:0a:fc:e1:e9:81:6b:
         45:4a:f3:c8:61:0e:12:9a:8b:d4:0b:9f:0f:2e:70:ea:a4:af:
         b5:d1:0a:7f:ea:2d:e3:1e:e4:45:54:b3:ab:20:04:6c:e2:8d:
         09:d3:f5:ac:41:bf:dd:52:80:b6:ed:24:73:2f:0b:11:82:a1:
         33:9c:69:f8:c3:38:8a:05:68:29:82:bd:d2:be:14:85:fe:11:
         b4:a1:f1:bf:eb:e0:23:c0:e7:be:28:c0:8e:aa:29:e5:ab:ff:
         fe:19:a2:82:94:1f:8a:34:67:5f:08:d3:63:32:42:3b:3b:97:
         98:78:92:e1:72:e0:67:e7:72:2a:7c:af:9f:06:9f:01:9b:a0:
         c5:b4:22:28:43:92:30:aa:d9:ac:b5:4d:af:be:6a:13:b8:7a:
         a9:e4:3d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzbFjlCZ+lpOrSH5O9QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh
MDkzYzYwHhcNMjUwNDEzMDgwMTQ1WhcNMjUwNDE0MDgwMTQ1WjAzMTEwLwYDVQQD
EyhkM2ZkNzExOTBmNThhOWZmNDk2YTI3NDBjOGJlYTFkNTUzOWY1MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XLjOnbJG/uQHP3g+GRPw3XnOQip
7DZ5i9w7bxffywio7oLkAkEewSDViTAP+HsiGN1vmJjoVrJPlshOcIOPfZa7+0R4
6NXCGbKZwWRH5oYgXmVrRfLm4m8QM/3CGd6pNgKdLxOawAxZv/9g791eWzdk+sbK
lCmetktHNzheI3iNk1tZX/NWzNozYFbDS+mBe8vaxOud2KjfNPc7+nA++rzUwKMK
f1KcQorsdYJJTSdSiRU0hyY7oOeMIBKmELgzHUVn7OMMwnfVAObyQGRlOXk9pJ4i
luiIZMZvzh0fpB/1Oz/1Hb4G0NHw9cqqyrtZRV1qaGDtwoUY0lUhWiQhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP9cRkPWKn/SWonQMi+odVTn1LgMB8GA1UdIwQY
MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt
MmY4NzliNTc1NGUxLzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx
LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFoa9Ai7
2dnsoKG5KPUd/66AN++u0AfUPBif/tp8KCAeryzfXNvXWHxo5jYMhH0r8UxLuNvJ
jzA6VjpVQJ8CZoSL4/AThgXS/lw+/0yC1RahMDZZiEE3OewyL5yvV4hwo/cxHhcM
Cvzh6YFrRUrzyGEOEpqL1AufDy5w6qSvtdEKf+ot4x7kRVSzqyAEbOKNCdP1rEG/
3VKAtu0kcy8LEYKhM5xp+MM4igVoKYK90r4Uhf4RtKHxv+vgI8DnvijAjqop5av/
/hmigpQfijRnXwjTYzJCOzuXmHiS4XLgZ+dyKnyvnwafAZugxbQiKEOSMKrZrLVN
r75qE7h6qeQ9wQ==
-----END CERTIFICATE-----