Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File:                     HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier:          oq5FGRPccZzq/S/0Zs6ZZOSs+DmR8ZrOw3mvEF0uLRk=
Subject key identifier:   D1:32:39:A3:CD:C3:07:13:B2:A4:F2:0E:72:8C:C0:21:58:40:08:E5
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer:       /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial:       01962F3D2F8A30275561E7D08C0FB0B6EDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 4DghyujHV7ZdeFrUy6fSdBuxIElqb6JijTtTw0ac0LY=)
                          2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
                          3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2f:8a:30:27:55:61:e7:d0:8c:0f:b0:b6:ed:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=d13239a3cdc30713b2a4f20e728cc021584008e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:98:12:76:d3:ad:3c:05:30:24:60:f6:ba:
                    d5:8d:66:5a:9e:98:98:66:91:b7:ca:08:16:c0:c0:
                    e3:d4:de:26:ac:8a:3b:e2:ad:f0:65:0f:1a:fb:61:
                    5f:fc:36:8b:f6:1f:ce:3c:fd:9d:66:9a:4f:5e:38:
                    18:db:28:ee:7a:4d:38:ec:f0:dc:62:b5:73:f7:f0:
                    f1:da:5c:ad:db:d7:c6:d5:6f:f3:ab:84:92:d2:56:
                    52:11:1d:c9:ac:3b:03:bc:68:ff:ba:83:13:eb:65:
                    dc:0b:33:0e:f1:a5:56:a2:39:22:c2:37:e0:11:55:
                    c9:8d:3d:13:67:2d:89:ce:de:4d:cf:b3:1f:7a:cf:
                    8e:9e:39:75:dc:d4:fe:bc:c4:59:48:8f:46:da:96:
                    5e:0c:a7:d1:5a:e4:5b:d5:da:da:f0:97:2d:d4:9e:
                    5a:3d:42:bf:76:36:2a:c3:85:fc:1b:05:8e:3c:f8:
                    f0:0a:c0:b5:15:38:cf:89:86:9c:a3:42:a9:fe:aa:
                    60:97:d6:28:90:3a:e7:87:30:bb:6d:b2:72:a1:9e:
                    a0:70:49:14:4e:4a:05:65:4b:9b:e7:c8:d9:22:e2:
                    28:cc:e5:65:51:5f:59:dd:5e:7a:28:0f:e7:bb:45:
                    dd:8a:42:d3:0e:44:1a:c4:ef:87:c2:95:ee:d3:01:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:39:A3:CD:C3:07:13:B2:A4:F2:0E:72:8C:C0:21:58:40:08:E5
            X509v3 Authority Key Identifier:
                keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:33:b5:e0:49:54:a2:0c:3d:0d:64:57:b9:1c:34:14:f2:a2:
         ab:eb:7d:4e:9b:cc:78:2b:54:b6:45:20:22:26:3e:81:fe:06:
         5c:18:41:44:01:a7:5d:b6:67:d3:e2:65:53:36:05:a2:60:96:
         35:7b:4c:07:7c:08:ee:9b:80:2e:0b:72:a5:42:34:c9:9a:10:
         bd:b3:bf:cc:19:6b:83:a3:a8:5d:19:af:37:46:c1:f5:c9:76:
         e8:b0:89:6e:27:59:3c:0f:d5:59:e5:19:a1:0d:04:dc:a5:4a:
         49:33:65:46:60:c5:56:e3:d7:ab:c3:53:57:66:b5:9e:6f:11:
         97:c3:18:4f:53:ad:9f:44:e7:39:29:a2:f1:54:74:49:9e:71:
         4c:17:33:86:07:4f:30:05:0c:64:eb:d3:a2:02:9c:f7:05:5a:
         97:59:4d:8f:6d:aa:06:66:51:87:4e:eb:75:3a:5a:c3:ec:ce:
         b4:6e:35:21:a5:9b:12:0f:65:de:96:5b:20:da:86:55:0b:c5:
         25:b9:01:cd:2b:e9:d9:46:70:c9:6e:1c:7b:7c:1e:f0:d5:c3:
         7f:bc:70:a5:27:4b:33:e1:44:30:6f:6a:75:9d:ee:6f:8b:73:
         ee:0e:4b:e8:7f:ab:48:58:97:26:6a:3d:29:79:91:6f:25:56:
         c2:4d:cb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPS+KMCdVYefQjA+wtu26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh
MmEwMGEwHhcNMjUwNDEzMTMwMTAwWhcNMjUwNDE0MTMwMTAwWjAzMTEwLwYDVQQD
EyhkMTMyMzlhM2NkYzMwNzEzYjJhNGYyMGU3MjhjYzAyMTU4NDAwOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0+YEnbTrTwFMCRg9rrVjWZanpiY
ZpG3yggWwMDj1N4mrIo74q3wZQ8a+2Ff/DaL9h/OPP2dZppPXjgY2yjuek047PDc
YrVz9/Dx2lyt29fG1W/zq4SS0lZSER3JrDsDvGj/uoMT62XcCzMO8aVWojkiwjfg
EVXJjT0TZy2Jzt5Nz7Mfes+Onjl13NT+vMRZSI9G2pZeDKfRWuRb1dra8Jct1J5a
PUK/djYqw4X8GwWOPPjwCsC1FTjPiYaco0Kp/qpgl9YokDrnhzC7bbJyoZ6gcEkU
TkoFZUub58jZIuIozOVlUV9Z3V56KA/nu0XdikLTDkQaxO+HwpXu0wFRYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEyOaPNwwcTsqTyDnKMwCFYQAjlMB8GA1UdIwQY
MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt
MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz
LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDO14ElU
ogw9DWRXuRw0FPKiq+t9TpvMeCtUtkUgIiY+gf4GXBhBRAGnXbZn0+JlUzYFomCW
NXtMB3wI7puALgtypUI0yZoQvbO/zBlrg6OoXRmvN0bB9cl26LCJbidZPA/VWeUZ
oQ0E3KVKSTNlRmDFVuPXq8NTV2a1nm8Rl8MYT1Otn0TnOSmi8VR0SZ5xTBczhgdP
MAUMZOvTogKc9wVal1lNj22qBmZRh07rdTpaw+zOtG41IaWbEg9l3pZbINqGVQvF
JbkBzSvp2UZwyW4ce3we8NXDf7xwpSdLM+FEMG9qdZ3ub4tz7g5L6H+rSFiXJmo9
KXmRbyVWwk3L2A==
-----END CERTIFICATE-----