Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
File:                     HCTxyq-zII64J6B4JkF7y5STQS8.mft (raw, json)
Hash identifier:          cSx/Org0jVNcQxzQedG28mQ3Cfc9+RAu8+PLUSU+Hhc=
Subject key identifier:   93:1C:24:17:B6:56:B1:9A:78:9D:BF:07:B4:6F:68:A5:8A:0C:02:72
Authority key identifier: 1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
Certificate issuer:       /CN=1c24f1caafb3208eb827a07826417bcb9493412f
Certificate serial:       01962ECFC43728CDD8B9B5134762D00AE529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
Manifest number:          0460
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: HCTxyq-zII64J6B4JkF7y5STQS8.crl (hash: BpEVtj6MQZVS6AXS3puFWEAq2B0zRyaUIYFBdVPxRf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:37:28:cd:d8:b9:b5:13:47:62:d0:0a:e5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c24f1caafb3208eb827a07826417bcb9493412f
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=931c2417b656b19a789dbf07b46f68a58a0c0272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:e4:59:ed:b3:02:ed:93:26:0a:ac:71:e9:
                    be:35:21:ca:de:a1:f6:80:d3:23:9e:ce:7e:4e:7c:
                    81:2d:b1:e4:e4:4c:1c:60:29:c1:9e:f9:f2:f7:8d:
                    fe:ac:69:24:c9:65:9a:18:65:f4:f5:da:f5:b3:61:
                    45:a1:96:27:ae:0c:65:54:7f:51:e6:0e:9c:50:45:
                    61:01:07:01:a4:d3:f6:91:8d:11:7b:36:01:af:2b:
                    a5:a4:be:94:d2:1a:5c:46:d7:26:b9:5f:ea:c2:19:
                    d2:4d:7f:39:d1:f9:48:9e:a1:b5:19:2c:0a:65:6c:
                    89:98:8c:ff:04:9f:58:8f:b0:61:09:16:fc:6c:03:
                    7d:bd:d1:e9:4b:d2:65:18:db:4d:c6:90:93:3c:34:
                    2a:28:da:ed:c0:58:ff:ec:7f:a3:1b:67:90:cc:26:
                    ee:c0:5d:a1:09:25:c0:1e:f7:42:17:c2:d4:28:ad:
                    46:95:09:9a:31:3b:37:66:a0:e0:0e:86:c4:d9:2b:
                    17:2d:a6:11:6c:12:51:3a:8f:27:13:dd:ae:7d:e7:
                    4a:b6:fe:f2:1a:f3:84:a2:f0:35:36:81:cf:85:83:
                    c8:fa:50:89:02:5a:67:54:5f:ce:19:cf:a8:39:cf:
                    74:d6:74:85:0e:82:32:43:b8:92:8a:b1:a4:48:29:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:24:17:B6:56:B1:9A:78:9D:BF:07:B4:6F:68:A5:8A:0C:02:72
            X509v3 Authority Key Identifier:
                keyid:1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:64:13:0e:4f:71:5d:55:03:30:46:b5:67:e8:4d:92:eb:23:
         2f:ad:0e:59:7f:01:dd:43:95:af:04:ac:f2:da:d7:64:b9:8f:
         28:bd:ef:29:b6:e0:d5:54:66:78:16:23:c8:7c:ad:6a:40:93:
         11:4b:72:13:5c:5a:0d:dd:b0:e1:50:58:74:c6:53:86:13:6f:
         4a:38:d8:cd:5e:98:a8:e5:64:68:00:29:99:29:02:69:17:a4:
         01:4f:93:a2:26:8c:8e:24:aa:ee:db:db:46:a4:ec:91:42:10:
         70:da:9b:ca:ad:ac:f4:36:84:21:70:e2:d3:b9:de:41:60:eb:
         5e:32:32:53:72:e9:9b:72:13:72:09:d3:d1:7a:29:9d:00:26:
         44:12:7f:0f:78:76:44:38:d9:48:3b:0b:2a:fd:9f:93:4d:a7:
         95:2a:a6:d7:dd:5c:45:ab:c5:d2:2b:93:81:87:83:33:62:e7:
         0e:d5:38:73:4c:50:d6:50:76:fe:c4:8b:4b:e6:be:13:c9:d7:
         41:a1:f5:fa:d5:11:81:e0:fe:7a:ba:8e:4f:6d:83:14:57:ed:
         b1:72:c2:c4:65:c5:3b:5c:3c:87:85:a9:7d:92:cb:8c:50:ac:
         5b:fb:b7:17:ad:ce:55:01:ea:7e:4c:d0:21:a1:0e:89:df:2c:
         cb:c4:97:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8Q3KM3YubUTR2LQCuUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjRmMWNhYWZiMzIwOGViODI3YTA3ODI2NDE3YmNiOTQ5
MzQxMmYwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
Eyg5MzFjMjQxN2I2NTZiMTlhNzg5ZGJmMDdiNDZmNjhhNThhMGMwMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXnkWe2zAu2TJgqscem+NSHK3qH2
gNMjns5+TnyBLbHk5EwcYCnBnvny943+rGkkyWWaGGX09dr1s2FFoZYnrgxlVH9R
5g6cUEVhAQcBpNP2kY0RezYBryulpL6U0hpcRtcmuV/qwhnSTX850flInqG1GSwK
ZWyJmIz/BJ9Yj7BhCRb8bAN9vdHpS9JlGNtNxpCTPDQqKNrtwFj/7H+jG2eQzCbu
wF2hCSXAHvdCF8LUKK1GlQmaMTs3ZqDgDobE2SsXLaYRbBJROo8nE92ufedKtv7y
GvOEovA1NoHPhYPI+lCJAlpnVF/OGc+oOc901nSFDoIyQ7iSirGkSCm9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMcJBe2VrGaeJ2/B7RvaKWKDAJyMB8GA1UdIwQY
MBaAFBwk8cqvsyCOuCegeCZBe8uUk0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENUeHlxLXpJSTY0SjZCNEprRjd5NVNUUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iNTVmZGUtMmI1NS00N2JlLThkNjQt
N2RjZmZmYWUyNzhjLzEvSENUeHlxLXpJSTY0SjZCNEprRjd5NVNUUVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iNTVmZGUtMmI1NS00N2JlLThkNjQtN2RjZmZmYWUyNzhj
LzEvSENUeHlxLXpJSTY0SjZCNEprRjd5NVNUUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWQTDk9x
XVUDMEa1Z+hNkusjL60OWX8B3UOVrwSs8trXZLmPKL3vKbbg1VRmeBYjyHytakCT
EUtyE1xaDd2w4VBYdMZThhNvSjjYzV6YqOVkaAApmSkCaRekAU+ToiaMjiSq7tvb
RqTskUIQcNqbyq2s9DaEIXDi07neQWDrXjIyU3Lpm3ITcgnT0XopnQAmRBJ/D3h2
RDjZSDsLKv2fk02nlSqm191cRavF0iuTgYeDM2LnDtU4c0xQ1lB2/sSLS+a+E8nX
QaH1+tURgeD+erqOT22DFFftsXLCxGXFO1w8h4WpfZLLjFCsW/u3F63OVQHqfkzQ
IaEOid8sy8SXsg==
-----END CERTIFICATE-----