Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File:                     hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier:          bPfCNKaWFKKghcTXAfVIu7b6BrHf+vrUHpn1la0pkPs=
Subject key identifier:   8B:DB:68:28:95:09:BD:A5:47:C3:C8:8C:59:46:DC:03:23:C6:CD:32
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer:       /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial:       01962FAB243B8B5834BE5479AEAFE61321A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number:          0539
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
                          2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: kDoIJ/AiIkrBTQ9pipNpyK44sW5hi+rN5oqZBR/HQpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:24:3b:8b:58:34:be:54:79:ae:af:e6:13:21:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=8bdb68289509bda547c3c88c5946dc0323c6cd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:cc:4c:33:19:48:35:47:92:fc:29:1b:5f:
                    ca:08:64:3d:3e:3d:5d:4d:36:d9:77:e2:ba:1e:6c:
                    47:2e:85:bf:43:f9:8d:9c:2f:67:1e:99:fe:ee:8a:
                    79:ae:6b:78:a5:a1:6d:98:13:b2:f7:4a:ed:b8:97:
                    64:c8:6c:ab:25:16:9c:4e:df:c3:e3:86:06:33:1d:
                    46:a5:85:90:db:ca:c4:6a:78:de:41:ec:e6:33:5b:
                    3d:49:02:7c:66:c5:23:2b:5b:3c:4f:ed:71:3b:72:
                    d8:06:ce:99:41:1b:a6:be:a5:7f:1e:fb:05:7b:17:
                    ff:90:6c:55:e7:d5:5f:a4:c3:bf:ce:84:90:28:e4:
                    24:f6:dd:51:65:d8:5e:c8:2a:8f:37:35:59:89:e3:
                    65:bf:57:36:4e:b4:d2:06:b1:ba:dd:01:85:c0:4d:
                    8f:3d:d0:54:f3:ef:e5:c7:a5:d9:c6:5f:24:ed:96:
                    b1:2f:e6:65:70:86:78:dc:54:65:dc:f9:dd:a4:65:
                    57:bf:8f:a0:ff:87:80:7a:dc:0d:12:3c:e8:35:ab:
                    5a:7d:a5:5e:0d:3b:03:c0:23:10:fa:50:96:4a:b0:
                    81:64:13:f3:36:b3:e1:2a:03:af:ef:15:36:f6:a4:
                    f2:47:2f:79:c7:b4:03:a8:e2:da:eb:ed:5d:c0:dd:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:68:28:95:09:BD:A5:47:C3:C8:8C:59:46:DC:03:23:C6:CD:32
            X509v3 Authority Key Identifier:
                keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:35:2b:a6:d2:4a:df:c4:fa:e6:9e:89:1c:20:19:fb:42:f5:
         7a:f9:e5:82:bc:7b:d9:d6:1b:c6:1a:ce:33:e6:7f:dd:60:f6:
         b6:08:fd:92:ff:8b:eb:1e:eb:df:61:82:13:14:46:9e:3a:99:
         b7:13:ec:cd:e0:d3:0b:a6:85:f7:65:a5:0f:eb:53:19:20:a1:
         5c:4f:9e:2f:fb:bc:fc:0f:09:0a:46:63:86:00:fc:e8:6b:7c:
         0f:95:10:13:f1:78:b9:33:25:f5:93:f8:5e:a9:e0:1e:42:f3:
         b6:6f:e0:ba:d4:ca:90:49:17:5b:75:c1:29:b0:5f:d8:74:49:
         d6:e2:7e:d4:a9:46:50:b6:d1:f5:23:a9:54:12:2e:35:f8:d5:
         83:f0:f0:02:37:7e:58:94:44:a5:7f:6a:ff:3a:9a:3d:84:2b:
         20:f6:21:58:e7:90:71:a2:f2:9e:27:c0:66:f8:ac:63:68:46:
         78:65:0f:8f:b7:cd:8f:29:0a:f7:5e:54:7c:d8:92:40:a7:8e:
         8c:7b:77:86:fc:73:a6:e4:78:6b:ee:8b:11:fa:bc:fb:8e:30:
         e6:2e:3c:8b:e6:3d:0e:cb:14:42:53:93:6f:b3:77:9c:4a:75:
         f1:27:c2:94:ec:3d:88:65:a0:08:14:24:ad:5f:4f:dc:b7:73:
         15:3f:d9:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyQ7i1g0vlR5rq/mEyGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjUwNDEzMTUwMTA2WhcNMjUwNDE0MTUwMTA2WjAzMTEwLwYDVQQD
Eyg4YmRiNjgyODk1MDliZGE1NDdjM2M4OGM1OTQ2ZGMwMzIzYzZjZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt7MTDMZSDVHkvwpG1/KCGQ9Pj1d
TTbZd+K6HmxHLoW/Q/mNnC9nHpn+7op5rmt4paFtmBOy90rtuJdkyGyrJRacTt/D
44YGMx1GpYWQ28rEanjeQezmM1s9SQJ8ZsUjK1s8T+1xO3LYBs6ZQRumvqV/HvsF
exf/kGxV59VfpMO/zoSQKOQk9t1RZdheyCqPNzVZieNlv1c2TrTSBrG63QGFwE2P
PdBU8+/lx6XZxl8k7ZaxL+ZlcIZ43FRl3PndpGVXv4+g/4eAetwNEjzoNatafaVe
DTsDwCMQ+lCWSrCBZBPzNrPhKgOv7xU29qTyRy95x7QDqOLa6+1dwN0i+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvbaCiVCb2lR8PIjFlG3AMjxs0yMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjUrptJK
38T65p6JHCAZ+0L1evnlgrx72dYbxhrOM+Z/3WD2tgj9kv+L6x7r32GCExRGnjqZ
txPszeDTC6aF92WlD+tTGSChXE+eL/u8/A8JCkZjhgD86Gt8D5UQE/F4uTMl9ZP4
XqngHkLztm/gutTKkEkXW3XBKbBf2HRJ1uJ+1KlGULbR9SOpVBIuNfjVg/DwAjd+
WJREpX9q/zqaPYQrIPYhWOeQcaLynifAZvisY2hGeGUPj7fNjykK915UfNiSQKeO
jHt3hvxzpuR4a+6LEfq8+44w5i48i+Y9DssUQlOTb7N3nEp18SfClOw9iGWgCBQk
rV9P3LdzFT/Z2g==
-----END CERTIFICATE-----