Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File:                     88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier:          Z1yHsn+qnLrJx8K2B0lm/dcVFXeUWOjIlXHh/VDNUXs=
Subject key identifier:   06:97:3A:31:78:E5:6D:03:29:7F:EB:34:56:5E:14:2D:EA:42:AD:4E
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer:       /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial:       01962E61A2E8A4E248A9057A66F1D6D2F8F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number:          13DE
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: sY8vimPi2KsQc7JL6W0zxYTp28p25Ou0mwhIrdjtZ6Q=)
                          2: hvBR5Lh2V5nBCkDL4kLbjgOv4x4.roa (hash: roHQdZzbDc98BWIijFr4uNTSgf0x5DY16Sjtlk2cSOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a2:e8:a4:e2:48:a9:05:7a:66:f1:d6:d2:f8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=06973a3178e56d03297feb34565e142dea42ad4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:92:03:32:7c:4f:c2:b0:c2:50:e2:bb:e0:
                    fc:9f:c2:22:8f:63:69:51:3a:49:e1:1f:31:2f:3e:
                    e7:6c:e1:d8:91:e9:62:ab:2b:cc:9c:b5:39:a7:e4:
                    a0:4e:59:9d:ef:8a:09:37:6c:4a:df:3e:c1:65:b8:
                    5b:ac:c1:cc:58:06:25:bf:7c:2a:15:c8:e5:22:e0:
                    a4:54:a1:ba:fa:00:60:3f:98:6b:2e:cf:68:a9:cf:
                    cd:f3:fa:07:bc:56:61:3b:04:0e:12:f1:26:e4:00:
                    af:7f:f2:40:50:26:c9:ef:3c:1a:d7:66:76:28:2a:
                    47:98:0f:78:64:72:e4:a9:9d:dc:b5:bd:72:f4:b3:
                    ce:a1:7b:83:f3:2d:bd:f0:21:b6:01:eb:39:9a:31:
                    6b:1e:72:f5:85:4e:1c:9b:1e:52:86:b6:3a:15:85:
                    eb:cf:a1:0d:b2:33:9f:24:cd:ad:cc:e1:b4:33:17:
                    47:65:8d:55:50:e0:88:cc:ed:97:80:bc:e9:60:90:
                    86:e6:e9:db:c2:d8:65:9d:df:19:89:bd:8c:69:e1:
                    04:92:3d:15:9b:fc:fa:19:b3:7c:69:7f:bf:94:5b:
                    dc:a8:bf:b1:32:b3:fd:72:92:95:3d:15:90:13:7b:
                    81:21:a0:38:51:f2:91:1e:3f:0e:4a:73:f2:57:8a:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:3A:31:78:E5:6D:03:29:7F:EB:34:56:5E:14:2D:EA:42:AD:4E
            X509v3 Authority Key Identifier:
                keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:77:02:ad:3e:29:c7:84:ef:c4:95:5b:eb:5e:87:3c:71:56:
         6f:64:31:f0:5f:43:3b:99:fc:21:fc:d1:01:60:90:7e:a6:92:
         61:97:1f:04:31:18:6c:92:54:c5:96:d5:7e:55:e7:8a:22:cb:
         5e:ae:b6:da:28:aa:71:e8:37:f3:e0:83:45:b0:fa:db:7a:ca:
         ff:ac:8b:fe:bb:c2:04:ac:ca:c2:55:34:69:4b:89:65:4c:9c:
         37:5c:90:07:bb:af:e5:8a:46:64:88:5b:b6:9d:e1:0b:c0:b2:
         e1:75:a3:8b:c9:da:59:1e:80:82:51:8e:0f:db:35:9a:2f:bd:
         04:9c:be:f7:b4:f6:3a:c0:0d:ca:5f:2c:8b:05:5a:c6:a5:d4:
         bd:3c:6f:18:96:03:e4:05:a1:c8:c5:b2:aa:db:a0:79:a5:5d:
         30:a2:cd:54:ba:fa:0f:88:63:3b:d1:9a:f2:a2:59:a4:8d:a9:
         92:01:62:7e:ac:7c:df:70:bc:f1:67:84:1e:36:90:6c:b0:d3:
         98:20:6b:cc:79:f1:f3:2c:65:70:6b:5d:4f:66:0e:d7:47:7e:
         6c:14:fc:1e:1c:da:71:48:e0:17:ce:c1:4e:f1:0c:41:8e:b1:
         8b:b6:7d:b8:3f:e9:ed:ea:ff:30:f8:dd:45:1d:fc:0d:99:be:
         85:2a:a7:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaLopOJIqQV6ZvHW0vj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg2ZWEyOTk1ZTkzNGI2NTA0MTkxMWNiOWViNjU4NzJj
MjI4OWYwHhcNMjUwNDEzMDkwMTEyWhcNMjUwNDE0MDkwMTEyWjAzMTEwLwYDVQQD
EygwNjk3M2EzMTc4ZTU2ZDAzMjk3ZmViMzQ1NjVlMTQyZGVhNDJhZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGOSAzJ8T8KwwlDiu+D8n8Iij2Np
UTpJ4R8xLz7nbOHYkeliqyvMnLU5p+SgTlmd74oJN2xK3z7BZbhbrMHMWAYlv3wq
FcjlIuCkVKG6+gBgP5hrLs9oqc/N8/oHvFZhOwQOEvEm5ACvf/JAUCbJ7zwa12Z2
KCpHmA94ZHLkqZ3ctb1y9LPOoXuD8y298CG2Aes5mjFrHnL1hU4cmx5ShrY6FYXr
z6ENsjOfJM2tzOG0MxdHZY1VUOCIzO2XgLzpYJCG5unbwthlnd8Zib2MaeEEkj0V
m/z6GbN8aX+/lFvcqL+xMrP9cpKVPRWQE3uBIaA4UfKRHj8OSnPyV4r1LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaXOjF45W0DKX/rNFZeFC3qQq1OMB8GA1UdIwQY
MBaAFPPIbqKZXpNLZQQZEcuetlhywiifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMt
YzYzNWQ4ZWVkNDQ3LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMtYzYzNWQ4ZWVkNDQ3
LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYncCrT4p
x4TvxJVb616HPHFWb2Qx8F9DO5n8IfzRAWCQfqaSYZcfBDEYbJJUxZbVflXniiLL
Xq622iiqceg38+CDRbD623rK/6yL/rvCBKzKwlU0aUuJZUycN1yQB7uv5YpGZIhb
tp3hC8Cy4XWji8naWR6AglGOD9s1mi+9BJy+97T2OsANyl8siwVaxqXUvTxvGJYD
5AWhyMWyqtugeaVdMKLNVLr6D4hjO9Ga8qJZpI2pkgFifqx833C88WeEHjaQbLDT
mCBrzHnx8yxlcGtdT2YO10d+bBT8HhzacUjgF87BTvEMQY6xi7Z9uD/p7er/MPjd
RR38DZm+hSqnFw==
-----END CERTIFICATE-----