Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          Rq9BFn6CZZXYayxZQtsMubD8qxVhQGkh17Ei6M/v3Zw=
Subject key identifier:   5A:65:89:32:19:2C:03:C3:AB:7E:CF:E8:18:E6:53:C3:48:AF:D9:77
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       01962F3DC6DBDBCE5AC16A261BB288FC0781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 7338bU4B9So1c5wrIlnCysFzEr+88HtCPErNMl32Hdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c6:db:db:ce:5a:c1:6a:26:1b:b2:88:fc:07:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=5a658932192c03c3ab7ecfe818e653c348afd977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:b4:53:47:39:da:ad:9b:eb:6a:07:0d:c4:
                    80:17:0c:b2:4a:d6:ae:86:66:04:cd:d0:a3:b3:55:
                    59:47:c6:8f:ad:12:6c:b9:cb:44:b4:2d:f3:94:9d:
                    dd:84:66:cb:65:78:78:04:1b:24:2f:71:5e:13:44:
                    a6:f2:65:9b:50:ca:f9:2d:6a:38:4f:9e:e9:55:1c:
                    79:8f:d0:33:c7:e0:17:bb:ab:68:6b:1c:fc:10:92:
                    f2:1e:75:2a:b9:45:b0:b3:4e:12:05:cf:64:91:9f:
                    1e:38:9e:52:4f:a6:b9:e7:13:41:32:61:77:39:de:
                    f3:37:63:cb:8a:d6:eb:11:69:2a:cb:4a:02:d8:29:
                    d8:a6:70:c3:6e:21:41:0a:44:51:f2:39:d0:6c:86:
                    b5:01:14:a0:0d:9e:fc:6e:47:a6:f5:76:ff:1f:14:
                    57:fd:e6:41:a7:1d:26:59:4d:97:d4:61:a7:1a:3e:
                    d1:2a:a6:d6:5c:db:53:dc:9a:ba:eb:80:84:79:7b:
                    b5:e5:45:20:21:3e:8a:98:cf:ce:14:97:c8:a2:90:
                    4b:5c:ee:e4:da:17:8b:e9:fb:d9:e4:59:f3:d7:09:
                    2c:6e:46:2b:86:72:6c:11:cb:cc:38:c3:5a:3f:b6:
                    92:3a:14:e3:49:e8:8c:1d:33:95:66:68:2b:74:2e:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:65:89:32:19:2C:03:C3:AB:7E:CF:E8:18:E6:53:C3:48:AF:D9:77
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d2:41:80:f4:72:1d:d1:b7:9b:bb:1a:1f:57:75:aa:3f:29:
         c3:0e:8d:27:77:d3:ea:61:6f:96:cf:dc:03:6a:73:e1:56:ab:
         60:d8:65:cf:96:5c:ef:6f:e6:58:d3:77:34:c0:2d:8a:e8:cc:
         12:37:5f:3e:e9:17:00:69:fc:24:a3:b8:29:24:75:63:7c:10:
         fc:91:4b:0d:b7:a0:1f:ef:d0:62:5c:a0:8f:30:4e:3b:36:be:
         6f:eb:15:7f:08:14:c5:af:ea:8b:bd:e6:05:07:e2:0e:59:51:
         a9:80:d4:f7:df:db:d2:35:f3:55:3f:99:d3:90:e9:55:5c:7a:
         dc:e6:98:4e:c7:16:03:12:ef:d7:9e:6d:b7:ef:ad:1f:7e:da:
         dc:8d:45:8e:7d:48:f8:78:3b:6b:32:6d:ec:9a:be:23:96:43:
         7b:5d:c0:18:37:3b:26:a2:20:c9:0f:b5:8a:88:73:02:9e:07:
         74:b6:7b:b7:2c:f4:62:7e:71:0f:18:07:23:8f:83:db:07:d3:
         6e:7e:a9:e8:09:65:03:02:53:24:58:5d:5f:c5:77:96:4c:75:
         63:7a:03:8e:79:fa:fa:87:6c:4b:3a:10:69:e3:73:c1:62:ad:
         de:e8:49:2f:e3:31:92:98:ea:25:97:b0:00:ed:bd:98:3d:44:
         4d:9f:7f:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcbb285awWomG7KI/AeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx
OTAwNTQwHhcNMjUwNDEzMTMwMTM5WhcNMjUwNDE0MTMwMTM5WjAzMTEwLwYDVQQD
Eyg1YTY1ODkzMjE5MmMwM2MzYWI3ZWNmZTgxOGU2NTNjMzQ4YWZkOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRG0U0c52q2b62oHDcSAFwyyStau
hmYEzdCjs1VZR8aPrRJsuctEtC3zlJ3dhGbLZXh4BBskL3FeE0Sm8mWbUMr5LWo4
T57pVRx5j9Azx+AXu6toaxz8EJLyHnUquUWws04SBc9kkZ8eOJ5ST6a55xNBMmF3
Od7zN2PLitbrEWkqy0oC2CnYpnDDbiFBCkRR8jnQbIa1ARSgDZ78bkem9Xb/HxRX
/eZBpx0mWU2X1GGnGj7RKqbWXNtT3Jq664CEeXu15UUgIT6KmM/OFJfIopBLXO7k
2heL6fvZ5Fnz1wksbkYrhnJsEcvMOMNaP7aSOhTjSeiMHTOVZmgrdC4zfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpliTIZLAPDq37P6BjmU8NIr9l3MB8GA1UdIwQY
MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt
YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1
LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdJBgPRy
HdG3m7saH1d1qj8pww6NJ3fT6mFvls/cA2pz4VarYNhlz5Zc72/mWNN3NMAtiujM
EjdfPukXAGn8JKO4KSR1Y3wQ/JFLDbegH+/QYlygjzBOOza+b+sVfwgUxa/qi73m
BQfiDllRqYDU99/b0jXzVT+Z05DpVVx63OaYTscWAxLv155tt++tH37a3I1Fjn1I
+Hg7azJt7Jq+I5ZDe13AGDc7JqIgyQ+1iohzAp4HdLZ7tyz0Yn5xDxgHI4+D2wfT
bn6p6AllAwJTJFhdX8V3lkx1Y3oDjnn6+odsSzoQaeNzwWKt3uhJL+MxkpjqJZew
AO29mD1ETZ9/Hg==
-----END CERTIFICATE-----