Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File:                     hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier:          TxXNo2S975nLT5mlmGTxhg795MZiCQU1vvx8PpjHug8=
Subject key identifier:   12:C9:81:89:41:03:EF:1B:56:7B:7F:68:5E:9A:6C:33:9A:75:7F:1B
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer:       /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial:       01962E98AEC7A60C58E7AB46B8776065890A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
                          2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
                          3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
                          4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
                          5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
                          6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
                          7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: M2ilila2xo/pCta8yiy/ycegwCDel/kOHZrhBvp4eM4=)
                          8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:c7:a6:0c:58:e7:ab:46:b8:77:60:65:89:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=12c981894103ef1b567b7f685e9a6c339a757f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:b0:4d:fd:b3:53:45:98:57:7e:6d:53:a8:
                    9e:2e:e9:87:c5:48:37:60:47:1a:e2:be:ee:fc:65:
                    17:ec:f5:99:14:ae:22:41:ba:b5:9c:aa:8f:e9:50:
                    de:1f:6d:d7:8b:83:7b:d4:48:d0:a5:f6:af:43:d4:
                    6a:3e:45:46:1a:dc:3b:8d:99:69:ba:14:90:5a:5a:
                    c7:0a:9e:1d:89:7a:cb:cc:53:78:a2:d4:a6:58:1f:
                    fd:fd:17:72:70:09:51:ad:ae:02:9a:4c:2e:3f:c1:
                    b5:d6:51:92:93:1b:56:c3:46:be:91:e1:f5:9f:84:
                    35:04:ac:d6:a6:50:e5:b1:a9:b8:65:2f:3e:3c:0c:
                    39:fd:f7:d2:50:b4:c3:3e:ff:31:cc:be:41:dc:8b:
                    e8:72:cc:64:b7:32:9e:ef:75:95:92:64:90:79:df:
                    25:f2:f8:0a:47:c2:01:75:dc:9f:e5:66:4b:02:d8:
                    67:6f:db:98:ea:5c:47:21:ad:17:34:20:bc:2a:ff:
                    6d:5d:2d:37:5d:96:1d:fe:71:a8:22:f4:76:91:5b:
                    e6:2c:32:f9:dc:5f:ae:e5:61:fd:12:d7:41:f6:d5:
                    2e:1c:80:97:5e:99:a8:53:ae:01:b6:5d:ae:01:ad:
                    e2:03:31:33:23:1b:ce:77:6b:b1:ab:00:f4:f4:c9:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C9:81:89:41:03:EF:1B:56:7B:7F:68:5E:9A:6C:33:9A:75:7F:1B
            X509v3 Authority Key Identifier:
                keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:06:0c:55:aa:dc:61:f5:03:b4:43:de:06:c8:c7:84:71:
         a5:5b:18:11:63:c9:95:43:18:c7:bf:5a:aa:b3:41:78:f1:26:
         c4:9d:09:71:bf:83:0d:03:ef:b6:c2:9b:e5:01:e3:92:96:33:
         9b:ae:54:6c:17:7c:98:b6:ec:18:b3:d7:03:5a:1d:96:18:70:
         2e:83:9a:08:b6:b0:ba:a3:ba:af:b3:88:c5:55:fb:e7:e9:fc:
         87:58:3e:1a:60:61:ed:93:44:e1:ca:8a:d0:cc:59:2d:b5:64:
         80:61:91:3f:47:f7:f4:6e:6a:ec:b6:a4:45:25:6e:d2:f2:13:
         27:42:19:16:cd:97:e1:0d:fc:85:ef:aa:ea:1a:ad:a4:9f:fd:
         25:41:9a:0b:89:5a:9a:9d:91:d1:8a:6f:c8:1f:0b:d0:c4:6d:
         56:95:b8:20:ec:6c:57:75:6f:43:e6:bc:7c:b2:5d:0e:57:2e:
         a2:b7:4b:bf:16:a3:83:3f:5e:f1:3f:f7:40:c5:d7:51:e6:a7:
         5f:60:2a:ea:a0:5e:c4:20:86:4a:d8:b3:ea:e8:4e:ec:d0:77:
         32:18:9f:35:3e:a5:55:8c:12:f4:99:ad:a3:a7:3c:6c:56:66:
         5e:8b:4c:71:ac:40:ee:65:21:d9:34:1f:69:12:ea:70:20:e7:
         f8:a2:bc:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumK7HpgxY56tGuHdgZYkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl
Y2FiNzcwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
EygxMmM5ODE4OTQxMDNlZjFiNTY3YjdmNjg1ZTlhNmMzMzlhNzU3ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UqwTf2zU0WYV35tU6ieLumHxUg3
YEca4r7u/GUX7PWZFK4iQbq1nKqP6VDeH23Xi4N71EjQpfavQ9RqPkVGGtw7jZlp
uhSQWlrHCp4diXrLzFN4otSmWB/9/RdycAlRra4CmkwuP8G11lGSkxtWw0a+keH1
n4Q1BKzWplDlsam4ZS8+PAw5/ffSULTDPv8xzL5B3IvocsxktzKe73WVkmSQed8l
8vgKR8IBddyf5WZLAthnb9uY6lxHIa0XNCC8Kv9tXS03XZYd/nGoIvR2kVvmLDL5
3F+u5WH9EtdB9tUuHICXXpmoU64Btl2uAa3iAzEzIxvOd2uxqwD09Mkp0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLJgYlBA+8bVnt/aF6abDOadX8bMB8GA1UdIwQY
MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt
MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx
LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8AGDFWq
3GH1A7RD3gbIx4RxpVsYEWPJlUMYx79aqrNBePEmxJ0Jcb+DDQPvtsKb5QHjkpYz
m65UbBd8mLbsGLPXA1odlhhwLoOaCLawuqO6r7OIxVX75+n8h1g+GmBh7ZNE4cqK
0MxZLbVkgGGRP0f39G5q7LakRSVu0vITJ0IZFs2X4Q38he+q6hqtpJ/9JUGaC4la
mp2R0YpvyB8L0MRtVpW4IOxsV3VvQ+a8fLJdDlcuordLvxajgz9e8T/3QMXXUean
X2Aq6qBexCCGStiz6uhO7NB3MhifNT6lVYwS9Jmto6c8bFZmXotMcaxA7mUh2TQf
aRLqcCDn+KK8ng==
-----END CERTIFICATE-----