Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
File:                     HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft (raw, json)
Hash identifier:          N3JiwvwTsL0qJ2tZeQe3su3OJ79MophWMhZtVRLxZqA=
Subject key identifier:   CD:1E:7A:A7:8C:C0:07:8E:E1:53:BC:2B:D4:8C:41:22:92:F0:02:94
Authority key identifier: 1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6
Certificate issuer:       /CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
Certificate serial:       01962F3D7DD9106E20AE38272D262E4BEA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
Manifest number:          028B
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl (hash: EEWl5MkW99hkSUqjTk2rZlrlFDLutvGVn3FPPzdn+5M=)
                          2: XiutpK5IFGvWb0JW8fGUzsQHR84.roa (hash: LnLSfYNTkXNsPaxH5mVhc1aUjmJ/QEWl9VYA4pHoDLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7d:d9:10:6e:20:ae:38:27:2d:26:2e:4b:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=cd1e7aa78cc0078ee153bc2bd48c412292f00294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:f8:1f:8d:10:a5:8b:f3:51:16:6f:d0:35:
                    97:f5:f2:83:f4:e3:35:62:c8:82:f0:1d:e4:ff:f7:
                    0d:f9:84:6f:7f:ed:0f:22:9c:f6:56:2d:f6:40:be:
                    eb:68:67:d7:c5:a9:b8:ab:51:99:37:cb:f6:c3:60:
                    00:76:3c:05:22:d8:e7:c9:44:67:9b:c5:ab:c2:56:
                    fc:78:98:26:db:81:e8:26:51:ba:67:7b:26:2d:b3:
                    79:11:14:e3:f7:e0:81:83:50:d0:16:ba:4c:bc:18:
                    cc:7d:e0:19:a7:30:3a:61:69:82:99:3b:6f:e4:1a:
                    7d:be:50:63:2c:dd:e1:3f:7b:05:ac:52:12:a5:37:
                    ed:a8:bb:9c:68:26:72:c0:c3:25:88:26:7c:ab:3f:
                    42:ec:97:51:d7:2c:1b:ee:5c:eb:75:ec:e8:1e:45:
                    88:b7:a9:cc:db:f0:64:8d:9c:99:2a:fb:2a:25:bd:
                    3c:57:6f:b2:d4:51:a5:71:78:d5:f1:17:98:37:45:
                    53:7e:35:33:e0:25:07:9f:97:0e:91:47:47:40:c9:
                    ed:bb:dd:bc:4b:87:3b:1a:e8:87:d6:45:e7:c5:0c:
                    2b:e1:5b:6a:cd:68:26:eb:c1:e1:f8:16:2e:60:b1:
                    31:a8:bb:ea:b1:d3:0e:94:01:24:ae:4c:07:24:8e:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:7A:A7:8C:C0:07:8E:E1:53:BC:2B:D4:8C:41:22:92:F0:02:94
            X509v3 Authority Key Identifier:
                keyid:1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:06:af:42:99:48:69:5a:ca:42:15:51:4a:4c:63:d9:ec:4f:
         9d:3a:db:ff:72:85:ef:aa:08:56:2c:6b:40:2d:50:36:42:2e:
         b1:ed:d9:5f:72:84:21:2e:e1:de:33:f6:a5:71:97:3f:61:32:
         5a:31:95:53:b3:97:68:4f:e5:0d:22:c6:56:82:9a:bb:5d:73:
         2a:42:cd:e1:2f:e2:cc:53:54:a7:ef:e1:b3:ca:5a:ad:b0:76:
         ba:66:48:54:49:00:33:b5:04:db:6a:95:f1:99:78:2a:12:8c:
         e3:84:47:e9:be:74:cb:39:3f:ee:b4:55:c9:d2:8c:b3:1e:d9:
         cb:f2:9d:91:4b:74:2f:31:9f:a8:c9:5b:ac:b5:7b:75:86:e6:
         1f:20:96:a6:1b:c9:eb:b3:bc:9e:f7:15:7a:e1:de:e7:b0:99:
         6d:5e:e4:7f:1e:0a:70:90:98:90:03:9a:6e:b7:f0:30:ac:ce:
         98:62:9b:61:7f:70:3d:9d:6a:2d:e4:5b:d8:25:2f:7e:8c:e4:
         78:7e:56:b2:55:7c:44:5a:a7:0e:5f:d7:65:b9:91:65:5e:c8:
         aa:22:a5:48:84:31:07:3f:eb:4e:68:92:51:a5:44:1e:45:a5:
         9c:a3:b3:e5:cf:77:f7:c6:5d:f3:57:80:b2:48:d7:14:96:68:
         04:f7:1b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPX3ZEG4grjgnLSYuS+qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDM1ZWQwOGFkNzUxMWZiZmUxMDdkYjFmZGE4NWUyYTEw
MGI1YzYwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
EyhjZDFlN2FhNzhjYzAwNzhlZTE1M2JjMmJkNDhjNDEyMjkyZjAwMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBP4H40QpYvzURZv0DWX9fKD9OM1
YsiC8B3k//cN+YRvf+0PIpz2Vi32QL7raGfXxam4q1GZN8v2w2AAdjwFItjnyURn
m8Wrwlb8eJgm24HoJlG6Z3smLbN5ERTj9+CBg1DQFrpMvBjMfeAZpzA6YWmCmTtv
5Bp9vlBjLN3hP3sFrFISpTftqLucaCZywMMliCZ8qz9C7JdR1ywb7lzrdezoHkWI
t6nM2/BkjZyZKvsqJb08V2+y1FGlcXjV8ReYN0VTfjUz4CUHn5cOkUdHQMntu928
S4c7GuiH1kXnxQwr4VtqzWgm68Hh+BYuYLExqLvqsdMOlAEkrkwHJI4i0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0eeqeMwAeO4VO8K9SMQSKS8AKUMB8GA1UdIwQY
MBaAFB4DXtCK11Efv+EH2x/aheKhALXGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdOZTBJclhVUi1fNFFmYkg5cUY0cUVBdGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZmJiOTktZDFmMy00NzNlLTk1MzAt
ZmU3ZGFjYzFjNDA5LzEvSGdOZTBJclhVUi1fNFFmYkg5cUY0cUVBdGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZmJiOTktZDFmMy00NzNlLTk1MzAtZmU3ZGFjYzFjNDA5
LzEvSGdOZTBJclhVUi1fNFFmYkg5cUY0cUVBdGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgavQplI
aVrKQhVRSkxj2exPnTrb/3KF76oIVixrQC1QNkIuse3ZX3KEIS7h3jP2pXGXP2Ey
WjGVU7OXaE/lDSLGVoKau11zKkLN4S/izFNUp+/hs8parbB2umZIVEkAM7UE22qV
8Zl4KhKM44RH6b50yzk/7rRVydKMsx7Zy/KdkUt0LzGfqMlbrLV7dYbmHyCWphvJ
67O8nvcVeuHe57CZbV7kfx4KcJCYkAOabrfwMKzOmGKbYX9wPZ1qLeRb2CUvfozk
eH5WslV8RFqnDl/XZbmRZV7IqiKlSIQxBz/rTmiSUaVEHkWlnKOz5c9398Zd81eA
skjXFJZoBPcbNg==
-----END CERTIFICATE-----