Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File:                     CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier:          UnKS0DScL9y/5gFedv0/5zWTz6EaOXjxKsLvKYXAOg8=
Subject key identifier:   54:D7:CA:98:F2:2F:26:00:47:4E:4F:B7:1F:C4:E9:29:B7:0C:95:0B
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer:       /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial:       01962F3D9FB64EFF45B16208D82D6506B053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number:          0352
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: ZoKCAlZ1reN9V7XxOZZrSKwh7zLlmkqNrhCL4V4GiaQ=)
                          2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:b6:4e:ff:45:b1:62:08:d8:2d:65:06:b0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=54d7ca98f22f2600474e4fb71fc4e929b70c950b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:96:44:cd:15:67:59:41:f6:fd:1a:65:fa:
                    a0:88:50:32:69:37:49:31:5e:db:2d:6f:bd:3a:27:
                    44:ac:44:79:5d:8a:51:dd:c6:e3:d9:30:10:c0:9f:
                    a8:eb:74:bd:81:14:01:bd:79:06:95:06:2b:28:e3:
                    ca:46:98:6d:e7:c1:61:fc:b8:3a:11:31:e2:47:63:
                    16:b3:71:b6:6e:ff:17:c3:28:62:4a:ff:0a:2c:cf:
                    35:29:11:e6:63:0c:54:8e:dd:b1:10:a6:3f:32:7a:
                    c7:06:22:27:c8:9c:3d:db:6b:c5:ff:03:49:12:1b:
                    23:c7:58:1e:05:75:71:40:35:a9:19:74:73:d3:65:
                    2c:ed:9b:b4:3e:6c:78:0c:5c:21:9a:27:4f:ff:76:
                    55:c4:3a:10:72:25:ab:96:f6:2e:7f:70:85:c3:dd:
                    0a:e8:27:69:7c:c4:17:1b:15:65:21:d1:ca:46:34:
                    e1:cf:f5:7a:37:da:aa:18:ca:22:3e:bb:5a:7a:20:
                    be:b5:32:b9:e7:99:7b:8f:5d:f2:a6:8b:3a:d4:83:
                    2b:04:69:f4:46:c1:ec:9b:a5:f4:b4:73:f6:d0:5d:
                    bd:ec:52:04:81:7d:6b:14:e4:84:d5:1f:ca:08:9d:
                    f4:ff:ad:47:58:1f:34:37:d7:45:cc:56:9a:c9:63:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D7:CA:98:F2:2F:26:00:47:4E:4F:B7:1F:C4:E9:29:B7:0C:95:0B
            X509v3 Authority Key Identifier:
                keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:35:d8:76:a4:cd:e2:61:a3:10:33:ce:d0:6c:a3:81:0b:
         57:bf:3a:44:8e:29:1b:8f:15:28:c4:f9:61:37:13:f4:ef:56:
         55:b8:46:0f:c3:25:fc:d5:d6:b5:f9:86:75:78:1e:1c:0d:26:
         f8:4e:27:fc:5b:19:0a:92:8e:15:55:47:09:0d:d1:52:80:26:
         07:be:d9:62:26:fc:be:12:af:8a:26:7d:0b:ad:d3:2c:e3:1d:
         0e:aa:58:44:d1:87:6e:67:07:68:98:8f:2e:1d:b5:ca:05:cf:
         a5:d6:3f:6b:7b:9c:a1:1e:63:24:ab:bd:ac:1e:74:43:ea:95:
         ac:6e:65:c7:f7:9f:f7:bb:ab:b6:b0:01:d4:29:58:4b:98:1b:
         cb:b3:60:9f:a1:87:76:87:03:c5:6d:01:c0:a6:90:45:77:b0:
         f4:55:46:9e:92:33:5c:5e:d4:53:58:b5:5f:38:63:ab:dc:e8:
         47:1d:a7:0f:b0:d1:a5:88:6b:83:0d:30:17:49:42:fa:48:ca:
         70:1d:9f:24:06:19:3f:6f:80:2e:ee:fe:21:0f:9c:eb:52:3b:
         5d:fd:4b:62:af:07:ff:9d:46:b5:e1:c5:50:ca:12:b2:25:2c:
         19:2f:45:20:dc:f7:d9:aa:7a:aa:3e:46:65:ed:94:03:ef:a5:
         6c:77:8f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZ+2Tv9FsWII2C1lBrBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2FhYzY3NGU0ZTU3OTYwMjAxYTM0YzJjMDQyNDg2MWE3
ZmIwNzcwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
Eyg1NGQ3Y2E5OGYyMmYyNjAwNDc0ZTRmYjcxZmM0ZTkyOWI3MGM5NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q6WRM0VZ1lB9v0aZfqgiFAyaTdJ
MV7bLW+9OidErER5XYpR3cbj2TAQwJ+o63S9gRQBvXkGlQYrKOPKRpht58Fh/Lg6
ETHiR2MWs3G2bv8XwyhiSv8KLM81KRHmYwxUjt2xEKY/MnrHBiInyJw922vF/wNJ
Ehsjx1geBXVxQDWpGXRz02Us7Zu0Pmx4DFwhmidP/3ZVxDoQciWrlvYuf3CFw90K
6CdpfMQXGxVlIdHKRjThz/V6N9qqGMoiPrtaeiC+tTK555l7j13ypos61IMrBGn0
RsHsm6X0tHP20F297FIEgX1rFOSE1R/KCJ30/61HWB80N9dFzFaayWPjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTXypjyLyYAR05Ptx/E6Sm3DJULMB8GA1UdIwQY
MBaAFAh6rGdOTleWAgGjTCwEJIYaf7B3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgt
ZGYwMmIxM2UyZTRhLzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgtZGYwMmIxM2UyZTRh
LzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqM12Hak
zeJhoxAzztBso4ELV786RI4pG48VKMT5YTcT9O9WVbhGD8Ml/NXWtfmGdXgeHA0m
+E4n/FsZCpKOFVVHCQ3RUoAmB77ZYib8vhKviiZ9C63TLOMdDqpYRNGHbmcHaJiP
Lh21ygXPpdY/a3ucoR5jJKu9rB50Q+qVrG5lx/ef97urtrAB1ClYS5gby7Ngn6GH
docDxW0BwKaQRXew9FVGnpIzXF7UU1i1Xzhjq9zoRx2nD7DRpYhrgw0wF0lC+kjK
cB2fJAYZP2+ALu7+IQ+c61I7Xf1LYq8H/51GteHFUMoSsiUsGS9FINz32ap6qj5G
Ze2UA++lbHePQg==
-----END CERTIFICATE-----