Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File:                     HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier:          3kZ/DdxoEbuNJzL0MYA15hXeJ1a9lyYzMCJ6rpZteHA=
Subject key identifier:   BF:8D:FA:F3:A4:4E:3B:C7:C6:CF:24:4A:02:80:00:01:F2:B5:A0:9D
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer:       /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial:       01962E98AA42AA88FAD998FDD1BC6295F0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number:          0564
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: SWPK2nFJLStYNFQNT1BR+0bDv4ZKRWxdeFFbxo8p7Yc=)
                          2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:aa:42:aa:88:fa:d9:98:fd:d1:bc:62:95:f0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=bf8dfaf3a44e3bc7c6cf244a02800001f2b5a09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:14:33:c1:d2:51:32:e4:0d:3f:a7:94:76:
                    a8:7e:a4:9a:af:7d:1e:1b:3c:9e:ea:08:e8:39:35:
                    d4:47:8b:c3:10:d2:cd:9a:62:5c:96:16:a5:7a:18:
                    36:f0:6d:c2:df:9e:d9:08:a0:cd:c4:28:a6:05:51:
                    bc:b6:ed:2d:d5:df:f4:88:da:08:96:cb:a0:94:34:
                    4a:2c:56:12:a3:58:3e:ba:60:99:47:26:17:48:91:
                    79:06:4d:97:c8:c1:d7:45:23:75:a3:6c:89:2f:39:
                    5d:47:67:af:17:12:be:4f:21:72:73:e3:23:58:33:
                    a4:28:6f:3f:80:b2:6f:c3:a3:b7:ec:32:94:e4:16:
                    ac:d3:a2:a7:c4:b8:61:93:38:0d:ea:5b:e5:38:5d:
                    35:89:d9:e0:41:18:53:df:db:6e:a4:04:50:50:08:
                    92:bf:92:4b:a6:bb:0d:08:a2:f7:dc:cd:8f:e6:16:
                    41:f8:81:26:2c:26:4d:3e:9d:a1:fd:97:23:3f:63:
                    8c:cb:bd:44:2a:85:9f:e1:12:b1:ea:18:c5:98:80:
                    4c:94:b0:96:bf:73:13:c7:ca:86:25:00:d9:e4:dc:
                    7e:07:59:bb:47:20:27:38:98:4a:15:a8:22:1d:b6:
                    16:dd:fc:fe:38:6f:c9:90:ee:d1:3f:ba:a1:eb:a7:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:FA:F3:A4:4E:3B:C7:C6:CF:24:4A:02:80:00:01:F2:B5:A0:9D
            X509v3 Authority Key Identifier:
                keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:b5:20:02:0c:d4:8a:34:d4:8f:7c:bd:0d:b3:39:21:f2:
         d7:11:bb:33:69:67:77:3c:a3:31:36:f8:ba:c0:3e:e5:05:cc:
         6f:25:cb:e3:d3:1a:4b:5e:5c:2a:1a:70:1f:97:14:5f:63:6b:
         0e:19:95:af:f0:00:73:90:31:61:7b:5e:cd:6d:95:2b:d9:24:
         d2:00:be:a7:31:78:82:02:a3:f5:a9:e8:f4:fe:c0:47:5c:3d:
         9e:3a:a6:3c:d3:f6:19:93:48:bd:93:e1:fe:96:f5:9e:7c:c5:
         0c:18:ea:9b:b4:88:ce:fd:75:72:b4:77:8a:a6:6b:71:31:2f:
         26:d4:b3:17:79:92:51:3e:09:39:9d:91:4e:78:ef:2e:77:1a:
         70:2f:04:44:f7:96:56:f9:b3:0c:16:76:4e:61:86:c2:2d:72:
         95:fb:de:47:da:75:0b:cb:5f:9d:80:3b:ab:42:0b:b1:b9:07:
         75:00:a8:ca:52:79:03:4b:56:50:17:dd:c3:2e:a7:bd:f1:9c:
         b3:2c:43:a2:9e:aa:f0:84:36:d7:01:34:ee:a2:e1:db:5b:af:
         2c:15:f6:be:a2:61:c3:9c:6f:45:cc:cb:6b:c1:1a:47:4b:49:
         c6:c3:94:9a:cd:b4:72:25:e3:1b:24:d5:45:b7:71:7d:26:12:
         ed:01:b4:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKpCqoj62Zj90bxilfDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjNhNDdlY2JmY2ZhYTlmNmNmZWNlMjYxNGM3MGU4YjVh
ZGI4M2UwHhcNMjUwNDEzMTAwMTE5WhcNMjUwNDE0MTAwMTE5WjAzMTEwLwYDVQQD
EyhiZjhkZmFmM2E0NGUzYmM3YzZjZjI0NGEwMjgwMDAwMWYyYjVhMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJMUM8HSUTLkDT+nlHaofqSar30e
Gzye6gjoOTXUR4vDENLNmmJclhalehg28G3C357ZCKDNxCimBVG8tu0t1d/0iNoI
lsuglDRKLFYSo1g+umCZRyYXSJF5Bk2XyMHXRSN1o2yJLzldR2evFxK+TyFyc+Mj
WDOkKG8/gLJvw6O37DKU5Bas06KnxLhhkzgN6lvlOF01idngQRhT39tupARQUAiS
v5JLprsNCKL33M2P5hZB+IEmLCZNPp2h/ZcjP2OMy71EKoWf4RKx6hjFmIBMlLCW
v3MTx8qGJQDZ5Nx+B1m7RyAnOJhKFagiHbYW3fz+OG/JkO7RP7qh66deQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+N+vOkTjvHxs8kSgKAAAHytaCdMB8GA1UdIwQY
MBaAFB5jpH7L/Pqp9s/s4mFMcOi1rbg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEt
MzU1YjVjZDVkOTcxLzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEtMzU1YjVjZDVkOTcx
LzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpi1IAIM
1Io01I98vQ2zOSHy1xG7M2lndzyjMTb4usA+5QXMbyXL49MaS15cKhpwH5cUX2Nr
DhmVr/AAc5AxYXtezW2VK9kk0gC+pzF4ggKj9ano9P7AR1w9njqmPNP2GZNIvZPh
/pb1nnzFDBjqm7SIzv11crR3iqZrcTEvJtSzF3mSUT4JOZ2RTnjvLncacC8ERPeW
VvmzDBZ2TmGGwi1ylfveR9p1C8tfnYA7q0ILsbkHdQCoylJ5A0tWUBfdwy6nvfGc
syxDop6q8IQ21wE07qLh21uvLBX2vqJhw5xvRczLa8EaR0tJxsOUms20ciXjGyTV
RbdxfSYS7QG0+A==
-----END CERTIFICATE-----