Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File:                     pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier:          l0rSvyDzdIiw0tHvgnOoZCq4bbF5RIpYbsd4Fn41cDg=
Subject key identifier:   9B:F8:48:AD:19:BE:18:9C:BF:66:33:A7:6F:C2:9A:C4:72:AB:C6:7A
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer:       /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial:       01962F06A2B9EB6F552B4DF40C2A5296030C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number:          0887
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: H2ciew030YT_ZKL58SNBSDs0iQc.roa (hash: dr7FPAyraTf1nqxR0HjlvGsow4ZxkGibDCSpB0tZ3CU=)
                          2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: cY4W1/GYyvOfPka8yUxO3F0IWXAef9OFzOnZlcAR1LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a2:b9:eb:6f:55:2b:4d:f4:0c:2a:52:96:03:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=9bf848ad19be189cbf6633a76fc29ac472abc67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:a1:f6:cf:04:b0:b3:7b:92:36:a9:d6:91:
                    19:8f:22:a2:8c:14:b1:36:b5:f2:67:87:0f:95:e2:
                    9e:1e:88:ed:31:dc:a5:c9:7d:00:d3:b2:16:d4:ed:
                    a9:25:df:fd:87:2d:70:b4:12:f1:63:f2:d5:a3:10:
                    e6:8c:45:6d:72:de:99:96:09:c8:c2:76:d8:e8:7d:
                    45:f0:46:24:62:49:7e:bb:97:fc:56:62:d2:05:73:
                    59:ed:5f:d8:6a:a7:37:59:a7:1e:f2:43:fe:dc:fb:
                    91:a2:9d:a9:8b:8d:f5:f6:81:50:c3:34:30:68:53:
                    0e:d7:84:18:9c:52:ce:61:e3:eb:a5:ba:5f:f9:d2:
                    4d:b7:d7:64:2c:c7:e8:a7:4d:08:bc:da:54:cf:59:
                    48:e9:d7:29:39:5b:6b:95:8e:c3:6e:91:bb:5b:d1:
                    3a:4b:7f:49:7c:bf:90:89:5e:7c:29:b1:21:dd:61:
                    9f:bf:a4:0a:f3:4c:d0:ea:f0:06:89:a3:0e:e1:39:
                    98:ea:c6:44:62:31:d0:d1:44:3e:2a:05:cd:a1:13:
                    ca:b5:4b:04:dc:a4:21:10:c2:1d:d7:d5:64:c6:c5:
                    63:ce:ff:8f:c7:f5:57:28:62:b5:a0:ba:93:9a:86:
                    48:37:33:4b:24:64:24:0b:3d:d2:f9:e4:9c:d9:e6:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:48:AD:19:BE:18:9C:BF:66:33:A7:6F:C2:9A:C4:72:AB:C6:7A
            X509v3 Authority Key Identifier:
                keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:38:dd:f9:aa:c1:e5:0c:48:50:ee:2f:e9:f6:15:54:83:
         66:2c:60:aa:c5:90:10:f8:cf:22:2b:7b:31:62:7b:02:45:c0:
         74:8e:a4:07:e6:68:02:fc:a2:d4:2c:1e:b5:6e:3e:58:d5:cf:
         78:85:d7:77:69:63:5e:dc:2b:a1:28:17:78:71:b7:09:4a:3e:
         fc:2f:67:b2:1f:4d:7a:36:9d:e4:4d:5d:94:c1:48:39:94:6d:
         f6:f6:c9:9d:a8:e9:4e:3d:56:89:4a:71:b3:e5:5c:21:1d:a1:
         45:c9:c1:60:f8:ca:5f:8d:19:ad:34:ed:2a:80:69:a3:ba:d7:
         59:18:94:dd:ee:54:11:d7:4a:19:2c:c0:4a:14:4a:ad:54:1a:
         a9:c6:7c:5b:6f:82:7d:c1:21:52:9c:c5:fc:1f:21:7b:3e:0d:
         b3:97:76:54:1e:ff:5c:19:c6:29:f9:12:3b:7e:d0:a0:b9:f3:
         f2:8f:e9:29:5b:58:6f:4b:dc:b0:6d:f1:ff:1b:ea:d2:93:c5:
         6d:56:89:fc:58:a0:72:71:3c:a0:71:28:b4:45:50:f2:da:89:
         4c:72:02:14:3f:35:1c:1f:08:0b:d6:a4:0c:70:c5:07:56:6d:
         63:db:f7:05:d0:90:13:b1:77:03:85:21:fc:8f:ff:ec:36:7c:
         86:a2:04:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqK5629VK030DCpSlgMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDFlN2Y2NzgyM2VlZjUyYTE5ZmUxZGM4ZTBlNmE3ZjQx
Yzk0MzMwHhcNMjUwNDEzMTIwMTI1WhcNMjUwNDE0MTIwMTI1WjAzMTEwLwYDVQQD
Eyg5YmY4NDhhZDE5YmUxODljYmY2NjMzYTc2ZmMyOWFjNDcyYWJjNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vmh9s8EsLN7kjap1pEZjyKijBSx
NrXyZ4cPleKeHojtMdylyX0A07IW1O2pJd/9hy1wtBLxY/LVoxDmjEVtct6ZlgnI
wnbY6H1F8EYkYkl+u5f8VmLSBXNZ7V/Yaqc3Wace8kP+3PuRop2pi4319oFQwzQw
aFMO14QYnFLOYePrpbpf+dJNt9dkLMfop00IvNpUz1lI6dcpOVtrlY7DbpG7W9E6
S39JfL+QiV58KbEh3WGfv6QK80zQ6vAGiaMO4TmY6sZEYjHQ0UQ+KgXNoRPKtUsE
3KQhEMId19VkxsVjzv+Px/VXKGK1oLqTmoZINzNLJGQkCz3S+eSc2ea9zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv4SK0Zvhicv2Yzp2/CmsRyq8Z6MB8GA1UdIwQY
MBaAFKZB5/Z4I+71Khn+Hcjg5qf0HJQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtIbjluZ2o3dlVxR2Y0ZHlPRG1wX1FjbERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wYWMyMWMtYzcyYi00NzE5LWEwODUt
MDc4OGY3OTIxODUyLzEvcGtIbjluZ2o3dlVxR2Y0ZHlPRG1wX1FjbERNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wYWMyMWMtYzcyYi00NzE5LWEwODUtMDc4OGY3OTIxODUy
LzEvcGtIbjluZ2o3dlVxR2Y0ZHlPRG1wX1FjbERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlk43fmq
weUMSFDuL+n2FVSDZixgqsWQEPjPIit7MWJ7AkXAdI6kB+ZoAvyi1CwetW4+WNXP
eIXXd2ljXtwroSgXeHG3CUo+/C9nsh9Nejad5E1dlMFIOZRt9vbJnajpTj1WiUpx
s+VcIR2hRcnBYPjKX40ZrTTtKoBpo7rXWRiU3e5UEddKGSzAShRKrVQaqcZ8W2+C
fcEhUpzF/B8hez4Ns5d2VB7/XBnGKfkSO37QoLnz8o/pKVtYb0vcsG3x/xvq0pPF
bVaJ/FigcnE8oHEotEVQ8tqJTHICFD81HB8IC9akDHDFB1ZtY9v3BdCQE7F3A4Uh
/I//7DZ8hqIE3A==
-----END CERTIFICATE-----