Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File:                     hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier:          Vcr4vsDpa4sbCuaoEmRmgsQ9qXpJtMwaUnyL5lZ8G2Q=
Subject key identifier:   0D:DB:1F:30:B4:60:7F:65:19:9A:2D:1C:2C:40:06:B9:57:85:BD:31
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer:       /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial:       01962E2B3D90E03F79EEDDF418477F5F2B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
                          2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: rsUfIpDNICo5E6+l/bemFvFgURliLcpLoE6MrUKbLJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:90:e0:3f:79:ee:dd:f4:18:47:7f:5f:2b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=0ddb1f30b4607f65199a2d1c2c4006b95785bd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:b1:f7:70:ea:a3:57:31:ba:66:87:27:ab:
                    f1:c0:dd:01:c2:87:18:0e:70:6f:0f:c3:b7:a8:a1:
                    48:4e:c7:1c:58:f8:0e:7b:3c:97:75:32:9a:f2:31:
                    31:6a:e1:2f:aa:b3:30:e7:f7:28:b2:3b:65:9b:af:
                    e8:18:98:3f:87:04:0b:ad:ae:4c:7f:59:9a:9d:5d:
                    b6:a4:71:52:52:4e:e4:20:10:3c:ba:73:f6:ba:21:
                    22:2a:94:c4:64:3b:a3:07:31:ac:bc:70:5d:33:a2:
                    2e:21:ab:98:32:70:3f:e4:22:71:54:44:33:90:12:
                    5b:c7:d8:b4:b9:98:03:8b:0a:5c:d2:dc:05:73:1f:
                    c4:67:b3:b4:75:e8:bf:bb:b0:c6:bb:f6:a6:1b:bf:
                    d0:f9:da:e0:63:6c:cf:d0:3f:ab:ef:4c:6b:f9:de:
                    7b:a9:10:37:a3:b6:91:6a:54:de:52:fa:76:bc:9e:
                    f9:b7:cc:27:d1:9a:93:f4:3f:ea:f2:bc:ee:4d:b2:
                    0d:38:ed:a2:4d:a5:f3:9a:f3:8c:f0:0a:ca:f2:e0:
                    00:e6:54:50:3e:46:48:4c:96:09:27:64:22:91:22:
                    ac:55:86:66:8d:fb:b1:2e:0c:ab:73:a2:1a:03:23:
                    69:e1:92:7a:a3:31:c0:f2:de:4b:4a:ee:b7:09:60:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DB:1F:30:B4:60:7F:65:19:9A:2D:1C:2C:40:06:B9:57:85:BD:31
            X509v3 Authority Key Identifier:
                keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:04:17:1c:ad:37:30:ac:d8:dd:99:d8:d5:5a:7f:e3:6a:c3:
         36:47:fc:91:67:f8:0d:55:73:69:7f:a9:03:b7:aa:4e:bc:7d:
         bc:fc:83:69:fd:f1:8b:76:a1:3c:bf:31:c4:93:86:38:89:6e:
         95:6d:96:9b:25:f8:ec:5d:d5:ae:7c:53:54:08:b2:5c:bc:ea:
         f2:93:32:eb:a8:5b:22:7b:83:ae:9a:7e:e8:8b:1d:33:cc:fa:
         d2:77:2a:b1:85:23:d4:38:4a:1a:89:fe:6d:8e:25:33:74:84:
         4b:b6:26:c9:b6:47:27:4e:d1:65:e5:87:81:bc:53:bf:0f:41:
         01:97:1a:e5:e3:97:f0:c3:8d:ca:23:ba:ec:ef:8c:1e:7d:c4:
         a7:20:a3:fb:9c:d8:79:8c:08:5f:76:8f:ce:3e:f6:b9:44:ae:
         46:6b:62:bc:c0:c1:13:6d:d8:3e:40:2f:41:c1:45:9b:70:48:
         ab:64:e3:31:4d:4e:2b:8b:db:81:1f:1e:30:df:16:61:3c:74:
         62:10:a2:26:95:64:a2:4b:cd:d1:49:ef:8e:ca:58:6a:c1:52:
         7e:36:31:79:91:b4:06:eb:fb:5f:76:aa:c3:b1:ed:15:44:12:
         08:b5:8c:0c:19:32:97:ac:9e:07:3b:44:1b:5d:cf:4f:dc:77:
         70:1b:3f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKz2Q4D957t30GEd/XyuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi
MTRjZGEwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
EygwZGRiMWYzMGI0NjA3ZjY1MTk5YTJkMWMyYzQwMDZiOTU3ODViZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2qx93Dqo1cxumaHJ6vxwN0BwocY
DnBvD8O3qKFITsccWPgOezyXdTKa8jExauEvqrMw5/cosjtlm6/oGJg/hwQLra5M
f1manV22pHFSUk7kIBA8unP2uiEiKpTEZDujBzGsvHBdM6IuIauYMnA/5CJxVEQz
kBJbx9i0uZgDiwpc0twFcx/EZ7O0dei/u7DGu/amG7/Q+drgY2zP0D+r70xr+d57
qRA3o7aRalTeUvp2vJ75t8wn0ZqT9D/q8rzuTbINOO2iTaXzmvOM8ArK8uAA5lRQ
PkZITJYJJ2QikSKsVYZmjfuxLgyrc6IaAyNp4ZJ6ozHA8t5LSu63CWADewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3bHzC0YH9lGZotHCxABrlXhb0xMB8GA1UdIwQY
MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt
YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4
LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwQXHK03
MKzY3ZnY1Vp/42rDNkf8kWf4DVVzaX+pA7eqTrx9vPyDaf3xi3ahPL8xxJOGOIlu
lW2WmyX47F3VrnxTVAiyXLzq8pMy66hbInuDrpp+6IsdM8z60ncqsYUj1DhKGon+
bY4lM3SES7YmybZHJ07RZeWHgbxTvw9BAZca5eOX8MONyiO67O+MHn3EpyCj+5zY
eYwIX3aPzj72uUSuRmtivMDBE23YPkAvQcFFm3BIq2TjMU1OK4vbgR8eMN8WYTx0
YhCiJpVkokvN0UnvjspYasFSfjYxeZG0Buv7X3aqw7HtFUQSCLWMDBkyl6yeBztE
G13PT9x3cBs/aQ==
-----END CERTIFICATE-----