Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File:                     hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier:          PsUr3uYu1KKszQswa4z7L3hSYZmjYYIR739lNWxxH4E=
Subject key identifier:   87:D9:82:48:D4:E0:88:A3:55:68:33:7B:7E:95:89:9F:F0:AA:C5:2A
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer:       /CN=863841506d026131965057409a1604a5671f0541
Certificate serial:       01962E98753D8B8FB1006992F5DCCFADB3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number:          02B2
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: hXap7hNXLEAQarnfnwYswdCAdkQ.roa (hash: bNhK/WdUp/9xvJiGhX97CJWQhZiON1WPJ6uWrAYKvFI=)
                          2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: q49uHmdD78AssEyg90mSIUqrNNKHEOXMSBiDJTp0EDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:75:3d:8b:8f:b1:00:69:92:f5:dc:cf:ad:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863841506d026131965057409a1604a5671f0541
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=87d98248d4e088a35568337b7e95899ff0aac52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:ae:1a:f3:41:a6:79:67:3b:37:bf:c0:7a:
                    e7:54:cb:5e:3f:79:dc:00:7b:d4:be:e5:17:43:e8:
                    db:d3:6b:bb:ca:cb:c2:4d:40:14:05:df:64:07:f7:
                    51:2b:72:39:3c:b4:51:5d:fc:89:0b:36:0f:24:4b:
                    8d:22:61:83:31:59:dd:a2:6c:0e:34:5a:cb:e9:29:
                    06:4a:aa:01:81:66:27:ed:57:2d:69:72:f5:3c:a1:
                    31:43:c0:16:79:82:6d:33:88:62:12:d0:87:f9:0d:
                    fc:b3:2c:cf:6d:f4:51:05:ac:06:c3:f2:35:a0:29:
                    ba:ad:fb:d3:5f:49:f6:02:0b:9d:7a:15:81:1d:d3:
                    24:14:cf:17:92:9d:fb:4e:53:d2:9a:36:9e:37:c8:
                    95:37:11:be:28:3b:29:97:f1:e6:62:b2:15:c6:7e:
                    40:5e:d8:c7:09:49:fb:6c:3e:da:21:74:bf:7a:37:
                    46:5a:ea:de:b8:be:97:38:5c:3b:15:2e:9f:35:d7:
                    69:5a:05:bd:95:0e:ef:34:cc:95:24:3d:07:94:2c:
                    2b:eb:49:60:39:85:91:6d:8b:62:4a:de:90:3d:f0:
                    13:ea:10:d2:f5:ad:fb:ce:f2:c9:44:44:e6:8c:56:
                    e4:e8:14:2c:01:8c:4e:72:92:71:7b:1a:1f:d3:fc:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:82:48:D4:E0:88:A3:55:68:33:7B:7E:95:89:9F:F0:AA:C5:2A
            X509v3 Authority Key Identifier:
                keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:56:02:7a:2e:89:41:c6:8d:d8:10:a6:3d:e7:50:36:3c:
         07:7b:4f:cd:7d:1f:e9:40:16:e2:25:20:ff:46:b9:37:e8:63:
         78:20:56:4f:31:00:50:b1:ae:3b:84:c2:a6:f7:a7:f0:19:95:
         6d:64:ee:29:93:99:9f:fd:93:67:60:1b:ab:f5:c4:1b:ce:b9:
         96:79:3e:ad:a6:1c:7f:f1:8b:b5:29:3d:78:43:6f:2a:76:95:
         35:a4:6d:ba:11:5d:85:42:dc:c7:ee:55:46:9c:08:50:da:6d:
         7b:0c:f0:56:a4:a6:60:a0:03:4e:ce:fe:0d:17:a9:c6:67:38:
         8f:c7:0c:10:cb:56:27:1b:96:f5:96:90:95:2b:45:3a:cb:40:
         64:30:42:17:5a:14:c8:35:0f:22:84:8c:dd:2d:1a:98:41:ab:
         b8:e0:9e:9a:64:e2:fe:e1:7d:fe:fe:6a:75:e0:6e:0c:17:7e:
         bc:e9:be:74:f9:cb:ce:df:09:ec:b3:eb:fa:a0:c9:e4:be:c2:
         cf:13:68:7b:38:72:9c:4a:92:d2:2e:6f:8a:90:17:e4:55:28:
         c3:1a:1d:91:77:76:c1:05:31:b3:04:30:4b:19:9f:f4:3d:a4:
         b7:e8:4b:92:c4:81:32:51:fa:71:61:95:e6:50:79:0f:65:1e:
         74:f2:86:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHU9i4+xAGmS9dzPrbPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Mzg0MTUwNmQwMjYxMzE5NjUwNTc0MDlhMTYwNGE1Njcx
ZjA1NDEwHhcNMjUwNDEzMTAwMTA1WhcNMjUwNDE0MTAwMTA1WjAzMTEwLwYDVQQD
Eyg4N2Q5ODI0OGQ0ZTA4OGEzNTU2ODMzN2I3ZTk1ODk5ZmYwYWFjNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLKuGvNBpnlnOze/wHrnVMteP3nc
AHvUvuUXQ+jb02u7ysvCTUAUBd9kB/dRK3I5PLRRXfyJCzYPJEuNImGDMVndomwO
NFrL6SkGSqoBgWYn7VctaXL1PKExQ8AWeYJtM4hiEtCH+Q38syzPbfRRBawGw/I1
oCm6rfvTX0n2AgudehWBHdMkFM8Xkp37TlPSmjaeN8iVNxG+KDspl/HmYrIVxn5A
XtjHCUn7bD7aIXS/ejdGWureuL6XOFw7FS6fNddpWgW9lQ7vNMyVJD0HlCwr60lg
OYWRbYtiSt6QPfAT6hDS9a37zvLJRETmjFbk6BQsAYxOcpJxexof0/yUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfZgkjU4IijVWgze36ViZ/wqsUqMB8GA1UdIwQY
MBaAFIY4QVBtAmExllBXQJoWBKVnHwVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2Mt
M2JmYTA1MDkyMDFmLzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2MtM2JmYTA1MDkyMDFm
LzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuZWAnou
iUHGjdgQpj3nUDY8B3tPzX0f6UAW4iUg/0a5N+hjeCBWTzEAULGuO4TCpven8BmV
bWTuKZOZn/2TZ2Abq/XEG865lnk+raYcf/GLtSk9eENvKnaVNaRtuhFdhULcx+5V
RpwIUNptewzwVqSmYKADTs7+DRepxmc4j8cMEMtWJxuW9ZaQlStFOstAZDBCF1oU
yDUPIoSM3S0amEGruOCemmTi/uF9/v5qdeBuDBd+vOm+dPnLzt8J7LPr+qDJ5L7C
zxNoezhynEqS0i5vipAX5FUowxodkXd2wQUxswQwSxmf9D2kt+hLksSBMlH6cWGV
5lB5D2UedPKG3g==
-----END CERTIFICATE-----