Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File:                     h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier:          W6Mopg/phS3O1KHuFlKgBN0K3UID3PxAr4HR1f8Linc=
Subject key identifier:   7C:C1:DE:B9:7D:6A:FF:DA:75:37:FF:49:34:59:6D:B7:82:64:F1:CE
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer:       /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial:       01962E2B2580617DC5D55433DC6CEAC8877A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number:          05E2
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: RIy1RXmFCqFK0I+LSas8dEeqfmbOUy/QF6Zx4bvWhOY=)
                          2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:25:80:61:7d:c5:d5:54:33:dc:6c:ea:c8:87:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=7cc1deb97d6affda7537ff4934596db78264f1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:03:cb:75:1b:79:bc:6b:48:d3:c2:98:67:bf:
                    5e:84:e1:33:68:a5:7e:e3:bd:f7:04:ae:2b:a0:0d:
                    de:e6:49:e0:98:5f:d3:d7:cf:fb:04:6c:0a:3b:f4:
                    2a:9b:4f:d3:d5:7e:ea:d8:4e:a4:90:c9:69:47:47:
                    40:cd:7e:e2:11:e9:e0:77:c6:62:87:66:23:de:fe:
                    7f:22:1f:0e:05:0b:b8:9e:ef:c5:e9:9e:64:30:e0:
                    a2:5c:9c:1e:8b:6f:65:e3:21:51:7c:f5:a4:61:4a:
                    7d:26:92:bf:f4:14:93:f1:60:c7:03:19:63:c5:5e:
                    87:ef:38:c2:d5:68:65:fc:67:e9:0d:b9:3f:77:00:
                    2b:26:9f:d2:5d:b2:1c:58:d7:ff:e9:71:df:4f:fc:
                    35:5e:08:c2:b1:fb:da:d2:a1:b9:30:fb:65:a9:68:
                    a7:28:e4:dc:d7:53:74:3d:fd:e3:21:5d:13:d8:ea:
                    31:5c:68:85:f7:6b:5b:7d:94:fb:84:19:e9:4f:80:
                    15:44:5f:83:43:98:f6:53:50:87:99:99:bd:3a:b0:
                    36:a6:c4:e2:50:1d:c3:3e:df:de:ce:55:d3:fe:d0:
                    e2:9e:e7:da:9a:04:52:35:5a:49:13:83:8e:fb:32:
                    a8:5f:e4:57:77:02:d3:48:42:ef:4d:89:de:76:b2:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:DE:B9:7D:6A:FF:DA:75:37:FF:49:34:59:6D:B7:82:64:F1:CE
            X509v3 Authority Key Identifier:
                keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:29:c9:02:d5:4a:e8:7d:2f:26:f6:7f:10:a8:93:74:a9:ae:
         59:c5:a3:bb:30:6c:d4:9d:11:68:12:95:e0:72:bc:fa:70:39:
         14:7e:87:4c:a4:97:49:1b:69:e0:d1:66:19:29:12:47:a1:b0:
         0e:72:fb:ee:5a:4a:ad:97:f7:1c:9c:03:3d:9c:2c:cc:ac:ce:
         38:97:07:bb:9e:84:5a:6e:53:ff:4b:25:d7:40:a7:ef:e7:12:
         3e:b7:19:fd:4e:4d:da:10:e3:6a:f3:00:f8:31:77:3e:58:93:
         de:d7:90:91:ac:d7:50:5f:97:2c:11:af:7e:b4:73:63:e7:c0:
         0b:0a:b5:6d:9b:8c:7c:82:7b:ad:ce:67:7c:4e:41:40:c4:82:
         1b:e6:21:b6:50:61:18:23:69:f0:92:88:a9:79:7a:65:1b:b8:
         8a:63:2a:e2:8c:b4:df:e9:45:00:b2:82:03:28:3c:fa:84:b7:
         aa:98:fc:7b:4c:39:cf:9b:6b:1b:44:e6:b3:ae:02:c2:a6:86:
         93:34:6a:fa:32:56:ab:1d:34:47:de:64:ea:8a:4b:75:8c:e8:
         b3:dd:59:e0:02:95:06:6b:cb:c8:b8:50:d6:43:9b:66:7b:ff:
         66:f1:b8:46:a4:0c:4e:87:ad:1d:48:d9:53:7c:ee:f2:83:ee:
         d8:a7:9c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyWAYX3F1VQz3GzqyId6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk
ZGY0MWQwHhcNMjUwNDEzMDgwMTQxWhcNMjUwNDE0MDgwMTQxWjAzMTEwLwYDVQQD
Eyg3Y2MxZGViOTdkNmFmZmRhNzUzN2ZmNDkzNDU5NmRiNzgyNjRmMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wPLdRt5vGtI08KYZ79ehOEzaKV+
4733BK4roA3e5kngmF/T18/7BGwKO/Qqm0/T1X7q2E6kkMlpR0dAzX7iEengd8Zi
h2Yj3v5/Ih8OBQu4nu/F6Z5kMOCiXJwei29l4yFRfPWkYUp9JpK/9BST8WDHAxlj
xV6H7zjC1Whl/GfpDbk/dwArJp/SXbIcWNf/6XHfT/w1XgjCsfva0qG5MPtlqWin
KOTc11N0Pf3jIV0T2OoxXGiF92tbfZT7hBnpT4AVRF+DQ5j2U1CHmZm9OrA2psTi
UB3DPt/ezlXT/tDinufamgRSNVpJE4OO+zKoX+RXdwLTSELvTYnedrI1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzB3rl9av/adTf/STRZbbeCZPHOMB8GA1UdIwQY
MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct
YTA0NzYyMDk1ZWU2LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2
LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSnJAtVK
6H0vJvZ/EKiTdKmuWcWjuzBs1J0RaBKV4HK8+nA5FH6HTKSXSRtp4NFmGSkSR6Gw
DnL77lpKrZf3HJwDPZwszKzOOJcHu56EWm5T/0sl10Cn7+cSPrcZ/U5N2hDjavMA
+DF3PliT3teQkazXUF+XLBGvfrRzY+fACwq1bZuMfIJ7rc5nfE5BQMSCG+YhtlBh
GCNp8JKIqXl6ZRu4imMq4oy03+lFALKCAyg8+oS3qpj8e0w5z5trG0Tms64CwqaG
kzRq+jJWqx00R95k6opLdYzos91Z4AKVBmvLyLhQ1kObZnv/ZvG4RqQMToetHUjZ
U3zu8oPu2KecDQ==
-----END CERTIFICATE-----