Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File:                     Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier:          5inQLO56Lc3rTOxeRtOQtRB3hL5sqZ64g8us2SEEiaI=
Subject key identifier:   2E:1B:AA:62:40:10:26:C0:02:6E:35:EB:0A:89:52:E4:E9:9E:04:D7
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer:       /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial:       01962ECF715528FF77331DAF73809E051005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number:          0728
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: 1zSX1KeZyeRe1OmeAvo11k3K91pRhJaknbermot1ftc=)
                          2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:71:55:28:ff:77:33:1d:af:73:80:9e:05:10:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=2e1baa62401026c0026e35eb0a8952e4e99e04d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:2c:88:09:3d:cc:76:ce:4a:9e:04:ac:d7:
                    4a:21:31:00:27:8a:f5:5e:07:7c:d1:cf:98:b2:dd:
                    4b:be:f7:e2:a2:22:4a:79:db:e9:98:1b:5f:66:23:
                    cf:48:52:34:eb:91:3d:9b:54:01:1e:90:f0:62:76:
                    74:14:d3:40:c6:be:20:67:f3:e8:4e:66:eb:1a:fd:
                    1f:9a:cb:d6:89:e8:ab:0d:9f:b4:c3:42:aa:1b:09:
                    85:7c:24:b4:e2:c3:31:e6:d0:52:de:11:6b:bf:47:
                    70:a5:75:63:73:57:b7:b9:e1:52:6e:88:56:83:11:
                    3a:55:e3:83:db:40:c0:e9:5a:53:54:b0:a7:a3:08:
                    a7:95:8a:ca:3b:3e:a1:79:33:89:43:44:51:43:f2:
                    81:0c:7f:3a:af:9b:1c:2b:b9:9c:81:e0:8e:b2:6c:
                    4b:83:2b:bf:ec:35:7b:28:8f:89:e8:42:8d:13:62:
                    21:12:6b:21:f5:27:9c:39:3a:a9:fb:24:37:1f:c6:
                    26:63:cd:e1:61:a7:e2:06:17:bc:60:59:c8:e4:c4:
                    6e:32:e0:d2:6f:ec:6f:b0:d7:97:61:a7:2c:37:8b:
                    db:89:28:ec:12:3e:47:96:b0:b2:7f:2b:b4:39:98:
                    5d:5f:48:9e:e0:0c:ec:1d:af:b7:2d:00:a9:29:18:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1B:AA:62:40:10:26:C0:02:6E:35:EB:0A:89:52:E4:E9:9E:04:D7
            X509v3 Authority Key Identifier:
                keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:6c:ba:13:c0:c8:d1:83:32:47:22:f4:b1:34:f8:8f:45:
         db:87:9a:b8:4e:01:a9:cc:c9:4c:84:16:9d:f1:8b:a2:97:44:
         e1:bd:e5:44:c8:d8:b2:b6:b2:46:00:c1:20:d7:5d:ad:98:3a:
         31:a2:d0:e3:5e:c1:c5:62:34:4c:a3:56:c2:7f:b8:d7:20:a1:
         3f:41:2d:f3:34:13:e2:cd:35:ea:37:76:f3:34:04:a9:83:53:
         55:ce:93:81:10:aa:87:29:b8:91:20:50:9c:55:0a:4a:2c:f9:
         b9:b4:6b:54:3a:d8:01:42:c6:a3:73:08:f6:44:08:22:d6:31:
         4b:33:b0:05:30:2f:20:87:28:e0:24:ca:a8:e3:5a:65:de:c0:
         00:ca:0e:ea:12:47:fc:8f:2d:44:09:d5:80:24:c3:86:e9:80:
         b0:82:06:6c:27:b1:4a:6b:a9:ff:88:95:e2:a2:b6:d1:a4:be:
         15:db:38:6b:16:45:d6:ab:af:08:a4:96:31:36:61:13:bc:eb:
         36:79:08:cf:5d:69:27:54:9c:7e:1b:92:bf:48:eb:62:35:18:
         ce:15:f9:47:a1:68:c7:23:ab:bc:ba:50:28:47:c0:68:2f:af:
         a6:6e:ed:19:c1:11:ad:0b:c1:d9:6e:d7:d1:c9:7a:cd:00:10:
         d2:7b:d1:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3FVKP93Mx2vc4CeBRAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk
NWZmNWMwHhcNMjUwNDEzMTEwMTA4WhcNMjUwNDE0MTEwMTA4WjAzMTEwLwYDVQQD
EygyZTFiYWE2MjQwMTAyNmMwMDI2ZTM1ZWIwYTg5NTJlNGU5OWUwNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySYsiAk9zHbOSp4ErNdKITEAJ4r1
Xgd80c+Yst1LvvfioiJKedvpmBtfZiPPSFI065E9m1QBHpDwYnZ0FNNAxr4gZ/Po
TmbrGv0fmsvWieirDZ+0w0KqGwmFfCS04sMx5tBS3hFrv0dwpXVjc1e3ueFSbohW
gxE6VeOD20DA6VpTVLCnowinlYrKOz6heTOJQ0RRQ/KBDH86r5scK7mcgeCOsmxL
gyu/7DV7KI+J6EKNE2IhEmsh9SecOTqp+yQ3H8YmY83hYafiBhe8YFnI5MRuMuDS
b+xvsNeXYacsN4vbiSjsEj5HlrCyfyu0OZhdX0ie4AzsHa+3LQCpKRiJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4bqmJAECbAAm416wqJUuTpngTXMB8GA1UdIwQY
MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et
ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3
LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8ZsuhPA
yNGDMkci9LE0+I9F24eauE4BqczJTIQWnfGLopdE4b3lRMjYsrayRgDBINddrZg6
MaLQ417BxWI0TKNWwn+41yChP0Et8zQT4s016jd28zQEqYNTVc6TgRCqhym4kSBQ
nFUKSiz5ubRrVDrYAULGo3MI9kQIItYxSzOwBTAvIIco4CTKqONaZd7AAMoO6hJH
/I8tRAnVgCTDhumAsIIGbCexSmup/4iV4qK20aS+Fds4axZF1quvCKSWMTZhE7zr
NnkIz11pJ1ScfhuSv0jrYjUYzhX5R6FoxyOrvLpQKEfAaC+vpm7tGcERrQvB2W7X
0cl6zQAQ0nvRfA==
-----END CERTIFICATE-----