Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File:                     HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier:          MJa7h82QXsKLqoGsseAW8OJh3JVx2LK/Sp16qvwhj2s=
Subject key identifier:   ED:81:17:E7:8D:E6:D8:79:07:8A:80:2E:56:0A:E8:1B:97:7E:33:60
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer:       /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial:       01962F068FCD1C60D1843F547686CB08462A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number:          11FB
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: 6UVt9pNDo+HE4CQWRrAX86VxWwSifgfUYTKjTzS5gCw=)
                          2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8f:cd:1c:60:d1:84:3f:54:76:86:cb:08:46:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=ed8117e78de6d879078a802e560ae81b977e3360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:f6:1a:d4:6e:8c:1e:ac:e0:38:9a:fe:00:
                    08:53:02:ad:55:de:db:3e:24:4e:70:35:fb:9c:c8:
                    0b:bd:0a:06:de:ed:9a:97:ee:5e:b8:57:e6:4f:e4:
                    2d:af:8e:03:3e:c3:d4:2e:91:66:36:2e:da:c0:0c:
                    f9:18:fc:80:e3:4d:40:d0:74:b7:29:45:23:b7:39:
                    8a:d9:b3:d9:e4:60:f6:01:40:5a:10:a8:41:9d:c2:
                    1f:22:30:fc:6d:87:c9:f5:53:d5:9b:a1:0a:5c:76:
                    59:c3:c7:f0:6f:ad:24:01:09:d5:8a:5f:12:0a:9d:
                    52:86:b0:97:cb:c8:a8:4e:77:40:e9:16:46:32:52:
                    ca:a5:51:12:f4:bd:77:a8:54:bb:97:f5:07:37:fb:
                    a2:97:37:77:c6:18:24:d4:42:97:d4:1c:b4:8a:82:
                    f0:f2:a3:fc:3d:bd:61:4b:1d:f6:7a:a2:68:7b:83:
                    88:fe:14:2e:72:34:87:75:08:f0:e7:61:60:32:65:
                    29:bd:72:81:68:80:af:81:69:05:77:20:7e:b8:9f:
                    fe:83:91:a2:cb:09:b8:fa:23:68:eb:02:ed:f7:37:
                    59:b7:20:b5:71:f6:26:a0:b4:db:5e:a7:74:ae:2c:
                    c6:16:fd:9b:82:85:81:b5:4d:3d:46:aa:bd:86:2a:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:17:E7:8D:E6:D8:79:07:8A:80:2E:56:0A:E8:1B:97:7E:33:60
            X509v3 Authority Key Identifier:
                keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:fa:a2:5e:3a:97:4b:f3:f3:d9:a4:85:ce:5c:2b:49:4a:
         56:69:dc:d9:1f:64:80:3a:95:a2:80:d9:c0:0b:7a:df:b5:fc:
         c3:a8:9e:68:61:ec:b8:01:26:97:e7:4f:68:0d:ce:bf:12:56:
         94:42:6c:26:31:73:28:6a:72:a6:5f:75:a5:1e:a9:d8:e6:68:
         ae:21:1d:32:0f:70:68:5b:c1:b0:64:f8:39:f5:36:51:1a:2c:
         45:2f:11:13:47:bb:96:a4:01:2a:10:ed:de:88:bc:6b:85:f8:
         25:41:81:d4:1f:a4:3d:7e:b1:50:1a:2d:a7:23:ee:77:74:ff:
         ae:44:25:7c:98:a2:8f:36:7f:97:b2:db:c8:ab:06:25:b8:dd:
         04:58:bc:f1:9a:ab:8b:62:f6:15:76:57:a1:bb:4a:27:57:77:
         74:d6:18:f2:3d:84:3b:cc:c4:d0:a6:8a:3d:ba:dc:06:c9:00:
         54:23:83:88:d0:6c:08:e1:57:20:53:71:28:42:95:81:b2:22:
         54:1f:20:ff:fc:69:13:0c:25:5e:29:0e:65:33:af:2b:d3:30:
         53:55:62:b1:81:b6:38:98:c9:0e:15:fa:6e:8c:0c:c7:81:b2:
         d2:f3:db:ea:b7:39:77:dd:3e:c8:d1:42:64:25:41:2d:80:0b:
         3f:4f:b5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBo/NHGDRhD9UdobLCEYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz
Njk5MWUwHhcNMjUwNDEzMTIwMTIxWhcNMjUwNDE0MTIwMTIxWjAzMTEwLwYDVQQD
EyhlZDgxMTdlNzhkZTZkODc5MDc4YTgwMmU1NjBhZTgxYjk3N2UzMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrv2GtRujB6s4Dia/gAIUwKtVd7b
PiROcDX7nMgLvQoG3u2al+5euFfmT+Qtr44DPsPULpFmNi7awAz5GPyA401A0HS3
KUUjtzmK2bPZ5GD2AUBaEKhBncIfIjD8bYfJ9VPVm6EKXHZZw8fwb60kAQnVil8S
Cp1ShrCXy8ioTndA6RZGMlLKpVES9L13qFS7l/UHN/uilzd3xhgk1EKX1By0ioLw
8qP8Pb1hSx32eqJoe4OI/hQucjSHdQjw52FgMmUpvXKBaICvgWkFdyB+uJ/+g5Gi
ywm4+iNo6wLt9zdZtyC1cfYmoLTbXqd0rizGFv2bgoWBtU09Rqq9hircSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2BF+eN5th5B4qALlYK6BuXfjNgMB8GA1UdIwQY
MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt
NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5
LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUL6ol46
l0vz89mkhc5cK0lKVmnc2R9kgDqVooDZwAt637X8w6ieaGHsuAEml+dPaA3OvxJW
lEJsJjFzKGpypl91pR6p2OZoriEdMg9waFvBsGT4OfU2URosRS8RE0e7lqQBKhDt
3oi8a4X4JUGB1B+kPX6xUBotpyPud3T/rkQlfJiijzZ/l7LbyKsGJbjdBFi88Zqr
i2L2FXZXobtKJ1d3dNYY8j2EO8zE0KaKPbrcBskAVCODiNBsCOFXIFNxKEKVgbIi
VB8g//xpEwwlXikOZTOvK9MwU1VisYG2OJjJDhX6bowMx4Gy0vPb6rc5d90+yNFC
ZCVBLYALP0+1rA==
-----END CERTIFICATE-----