Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
File:                     6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json)
Hash identifier:          FymODg2r7xeejVmjA17IUjurCGfLQbyvZd1+UdRv5YM=
Subject key identifier:   80:26:D5:08:2C:51:1C:0C:89:07:82:4C:70:5D:15:96:F8:9B:AA:8B
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Certificate issuer:       /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial:       01962E620E93B13778F1705740C8DAAE7755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
Manifest number:          1016
Signing time:             Sun 13 Apr 2025 09:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:40 +0000
Files and hashes:         1: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: pEhcJENUG93yWK1Z56GevJjISLhOSLNXMAofEXyxtkk=)
                          2: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=)
                          3: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=)
                          4: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (hash: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0e:93:b1:37:78:f1:70:57:40:c8:da:ae:77:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
        Validity
            Not Before: Apr 13 09:01:40 2025 GMT
            Not After : Apr 14 09:01:40 2025 GMT
        Subject: CN=8026d5082c511c0c8907824c705d1596f89baa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:36:23:b5:88:3c:55:39:af:e5:b7:7b:87:
                    43:fc:c7:d8:f3:2b:0a:7b:2a:af:25:89:1f:e1:7c:
                    88:fe:97:61:f0:d1:b8:2b:a4:2b:82:46:db:72:76:
                    b1:f6:1a:43:8e:28:fd:79:c8:d8:c4:95:82:5e:f7:
                    58:00:aa:64:d3:9b:d6:09:b1:07:a5:54:29:05:96:
                    ba:e3:f1:fa:c8:a4:54:f0:7d:79:f3:19:0f:19:74:
                    33:a6:6e:e5:bf:65:4e:53:1e:36:fc:fe:93:ea:5b:
                    be:10:10:93:19:10:26:d7:25:75:24:21:71:d3:5f:
                    2f:86:d1:8f:83:56:8d:71:74:9a:3b:83:c9:0b:b3:
                    21:8d:ee:fe:00:7c:ad:b4:cf:1b:c2:6f:dd:62:66:
                    fa:af:1f:96:8a:73:69:25:a3:80:0b:52:91:e8:5f:
                    f1:56:26:3f:a7:53:68:0f:ed:09:d3:60:9f:f7:17:
                    ad:b8:75:e6:0a:02:5a:7b:d5:e2:0f:10:77:2f:2e:
                    55:cc:e2:f0:45:14:fd:8a:31:4a:75:41:7d:4c:57:
                    fc:a1:ae:b8:c3:d4:25:61:4b:df:85:89:68:ad:4a:
                    5b:32:49:3e:e2:49:ca:32:16:c5:31:c8:a4:c8:5b:
                    19:8a:93:b5:b8:93:f7:97:c8:74:b7:a8:52:5c:7b:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:D5:08:2C:51:1C:0C:89:07:82:4C:70:5D:15:96:F8:9B:AA:8B
            X509v3 Authority Key Identifier:
                keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:fa:a9:d6:11:c1:f5:57:11:2b:04:32:61:2c:a7:6c:5c:
         e1:af:17:a5:49:8f:28:25:ab:13:7b:33:60:ab:6c:c4:39:5e:
         4a:1a:72:ec:ea:53:8d:16:4e:fb:a5:38:9a:8d:ea:a0:02:6b:
         ee:b2:ab:df:da:88:6b:b7:3b:3f:b6:8b:e1:80:1c:ad:b3:68:
         84:c7:e4:d2:35:65:d2:55:f5:27:d8:ef:fc:74:cc:73:66:30:
         5d:a2:cf:da:23:3f:5a:50:88:6c:60:b2:a8:9c:73:64:82:86:
         51:8f:e4:c4:06:ff:06:c1:0f:0b:af:30:00:79:22:cd:dd:99:
         63:ff:bf:0a:f5:e5:51:61:91:c1:d7:67:33:9b:55:c9:c5:7e:
         56:f0:12:7a:cc:f1:22:2c:45:77:1b:c8:eb:54:3e:90:6b:5b:
         05:e0:ae:24:4c:19:59:05:ad:38:72:4c:11:24:be:80:99:95:
         52:07:01:5f:6e:9a:21:0a:d6:b7:a8:f0:f0:4b:1f:18:e4:94:
         38:c3:fd:55:7c:65:19:85:c7:4c:51:12:86:44:25:ba:7b:8b:
         34:f5:7f:0a:cc:af:bb:59:2d:b3:05:54:89:ca:4a:8d:bc:90:
         fd:a6:3e:b7:fa:27:62:57:f1:98:25:cb:a5:ca:20:32:04:be:
         70:54:fc:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYg6TsTd48XBXQMjarndVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NjNjgwYzg1OTgzZTdiZjc0NDk4ZDBlNmJlODAwZjg2
NDUxYzMwHhcNMjUwNDEzMDkwMTQwWhcNMjUwNDE0MDkwMTQwWjAzMTEwLwYDVQQD
Eyg4MDI2ZDUwODJjNTExYzBjODkwNzgyNGM3MDVkMTU5NmY4OWJhYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzE2I7WIPFU5r+W3e4dD/MfY8ysK
eyqvJYkf4XyI/pdh8NG4K6Qrgkbbcnax9hpDjij9ecjYxJWCXvdYAKpk05vWCbEH
pVQpBZa64/H6yKRU8H158xkPGXQzpm7lv2VOUx42/P6T6lu+EBCTGRAm1yV1JCFx
018vhtGPg1aNcXSaO4PJC7Mhje7+AHyttM8bwm/dYmb6rx+WinNpJaOAC1KR6F/x
ViY/p1NoD+0J02Cf9xetuHXmCgJae9XiDxB3Ly5VzOLwRRT9ijFKdUF9TFf8oa64
w9QlYUvfhYlorUpbMkk+4knKMhbFMcikyFsZipO1uJP3l8h0t6hSXHvfoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAm1QgsURwMiQeCTHBdFZb4m6qLMB8GA1UdIwQY
MBaAFOh8xoDIWYPnv3RJjQ5r6AD4ZFHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYt
MTRkMDJlMzBkMjI3LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYtMTRkMDJlMzBkMjI3
LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDH6qdYR
wfVXESsEMmEsp2xc4a8XpUmPKCWrE3szYKtsxDleShpy7OpTjRZO+6U4mo3qoAJr
7rKr39qIa7c7P7aL4YAcrbNohMfk0jVl0lX1J9jv/HTMc2YwXaLP2iM/WlCIbGCy
qJxzZIKGUY/kxAb/BsEPC68wAHkizd2ZY/+/CvXlUWGRwddnM5tVycV+VvASeszx
IixFdxvI61Q+kGtbBeCuJEwZWQWtOHJMESS+gJmVUgcBX26aIQrWt6jw8EsfGOSU
OMP9VXxlGYXHTFEShkQlunuLNPV/Csyvu1ktswVUicpKjbyQ/aY+t/onYlfxmCXL
pcogMgS+cFT8vQ==
-----END CERTIFICATE-----