Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File:                     HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier:          1osW7vFA/W879qFI5OX0oPG1hGuWZ5OmUk4CY3rBNXw=
Subject key identifier:   56:1E:75:B4:56:23:2B:1A:27:EC:28:E2:1E:3B:56:C0:18:D2:E9:AE
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer:       /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial:       01962F74E3F91F9C2EF8E0B4CE0EF1CD30F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: mxhmlHnSZBEgyXCYTEsTuqJ5XezxdmqJ/o6Z26BPlOE=)
                          2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e3:f9:1f:9c:2e:f8:e0:b4:ce:0e:f1:cd:30:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=561e75b456232b1a27ec28e21e3b56c018d2e9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:71:28:84:34:dd:fc:e5:7f:ff:1e:ac:c3:
                    df:06:70:12:5d:90:8c:92:10:39:ea:7b:4a:0b:2b:
                    59:39:b3:36:62:09:52:a7:1a:0f:5c:2b:6a:82:32:
                    4a:96:77:a6:de:f6:db:48:de:f0:49:79:4c:d1:06:
                    31:49:3e:b5:52:3a:4d:58:e1:b9:1e:da:d6:48:81:
                    52:8b:24:98:fb:19:53:2c:f5:f1:19:51:9a:32:57:
                    e5:8c:50:98:f7:90:3e:d0:da:cf:a7:e0:56:67:48:
                    f4:f8:c2:ec:fa:15:60:9c:08:23:fb:c2:f9:a2:e8:
                    9b:5b:34:0d:fc:48:1e:25:3f:d9:8b:07:84:3c:07:
                    3e:d7:5a:57:cb:a2:51:50:c1:06:cf:86:d2:79:86:
                    4d:37:1a:9b:cf:4b:9d:03:fd:d1:e1:4e:19:a3:4f:
                    e3:ee:40:c8:79:dd:d8:55:41:ae:83:e3:1e:ba:1e:
                    1b:f6:87:21:df:e1:31:7a:69:39:f2:05:b2:37:7d:
                    7c:2f:3e:ae:63:08:ac:ba:4c:7e:35:31:aa:a7:9f:
                    74:19:c7:30:8f:26:b4:88:d3:eb:f4:09:9a:a2:bb:
                    7e:cb:82:a6:96:bd:39:92:e1:05:2e:e8:a1:53:9f:
                    e7:d0:a8:b2:f2:d7:6a:30:63:fa:6c:70:5f:ea:ec:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1E:75:B4:56:23:2B:1A:27:EC:28:E2:1E:3B:56:C0:18:D2:E9:AE
            X509v3 Authority Key Identifier:
                keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:60:10:97:a5:6c:c4:73:86:3c:f5:41:b4:4e:f1:b0:89:
         e4:3f:8f:54:49:74:36:b4:dd:76:06:cc:72:ca:9b:1b:38:7e:
         b9:95:e0:db:cb:8f:9e:f2:8a:93:7b:af:4d:f5:d1:96:90:c2:
         8f:a1:96:05:da:b4:15:0e:c7:7f:3b:62:d2:30:7b:f2:cb:dc:
         cd:09:5a:aa:c9:67:e9:5c:c3:e6:26:94:5a:dd:7f:21:e2:30:
         b8:57:b4:fb:ae:ee:b9:b1:60:9c:41:b8:85:1c:ec:fa:8a:ae:
         55:6e:b8:12:ea:45:38:2d:1c:0c:9a:44:f3:62:81:53:f1:aa:
         60:51:6c:12:76:5c:02:38:6d:fd:f5:7b:35:16:7b:7e:69:03:
         71:8d:76:c2:d6:e2:89:e1:98:a1:23:ca:47:58:b0:b6:ee:b8:
         35:59:18:f8:e6:fe:18:6b:ed:1c:7c:ed:e2:2e:7f:fb:88:8e:
         73:16:28:08:4a:a0:25:c3:49:66:0f:31:2f:e3:4b:12:ce:70:
         1c:05:73:da:b7:97:e4:1e:84:01:2c:c6:82:c9:36:3f:2a:78:
         c6:8c:2d:af:f0:3a:5b:33:57:26:64:25:a2:8f:f5:09:db:0d:
         67:aa:f8:43:94:67:31:06:e7:e6:28:41:d3:d6:00:4f:87:06:
         e7:87:bd:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOP5H5wu+OC0zg7xzTDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4
YjA5YmEwHhcNMjUwNDEzMTQwMTUxWhcNMjUwNDE0MTQwMTUxWjAzMTEwLwYDVQQD
Eyg1NjFlNzViNDU2MjMyYjFhMjdlYzI4ZTIxZTNiNTZjMDE4ZDJlOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/5xKIQ03fzlf/8erMPfBnASXZCM
khA56ntKCytZObM2YglSpxoPXCtqgjJKlnem3vbbSN7wSXlM0QYxST61UjpNWOG5
HtrWSIFSiySY+xlTLPXxGVGaMlfljFCY95A+0NrPp+BWZ0j0+MLs+hVgnAgj+8L5
ouibWzQN/EgeJT/ZiweEPAc+11pXy6JRUMEGz4bSeYZNNxqbz0udA/3R4U4Zo0/j
7kDIed3YVUGug+Meuh4b9och3+Exemk58gWyN318Lz6uYwisukx+NTGqp590Gccw
jya0iNPr9Amaort+y4Kmlr05kuEFLuihU5/n0Kiy8tdqMGP6bHBf6uwBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYedbRWIysaJ+wo4h47VsAY0umuMB8GA1UdIwQY
MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt
NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw
LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARatgEJel
bMRzhjz1QbRO8bCJ5D+PVEl0NrTddgbMcsqbGzh+uZXg28uPnvKKk3uvTfXRlpDC
j6GWBdq0FQ7Hfzti0jB78svczQlaqsln6VzD5iaUWt1/IeIwuFe0+67uubFgnEG4
hRzs+oquVW64EupFOC0cDJpE82KBU/GqYFFsEnZcAjht/fV7NRZ7fmkDcY12wtbi
ieGYoSPKR1iwtu64NVkY+Ob+GGvtHHzt4i5/+4iOcxYoCEqgJcNJZg8xL+NLEs5w
HAVz2reX5B6EASzGgsk2Pyp4xowtr/A6WzNXJmQloo/1CdsNZ6r4Q5RnMQbn5ihB
09YAT4cG54e92w==
-----END CERTIFICATE-----