Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File:                     HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier:          h909zLd2fNgLdNs9vK8UrI/yzeJzL4uWbZ2DeL7B7E4=
Subject key identifier:   CB:03:43:72:72:5D:25:71:02:A8:82:F4:F1:39:B3:5A:39:A5:B7:70
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer:       /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial:       01962FAB138AEFCBDA0EDB8A28E01B1182E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number:          37
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: sSlBlgkfd3FzxWG4Fr6/GC0tzQwvS0Qp2qqowhiXTk8=)
                          2: JUZrH7esHXuIUR8S80TNsOfBgq4.roa (hash: U7uEaoA1okVxydwdN7xgsZxq5XRAaznjumXB+lt8BF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:13:8a:ef:cb:da:0e:db:8a:28:e0:1b:11:82:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=cb034372725d257102a882f4f139b35a39a5b770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:4f:3d:08:d6:c7:47:fc:b9:07:47:24:e3:
                    99:d2:f0:2d:30:f9:f8:e3:08:b1:54:14:a1:11:4a:
                    3f:cc:97:6c:a6:22:15:19:09:0e:e4:aa:04:77:e6:
                    6f:6c:ba:cb:d2:59:75:97:93:d1:20:77:e0:8e:95:
                    83:3f:db:dd:cf:79:d5:53:d6:24:f4:5d:93:b5:f4:
                    5f:ab:1c:e3:96:0c:b8:58:42:92:5c:b2:ea:ad:88:
                    60:0b:d7:63:b0:03:98:ae:df:d2:ac:d2:0a:9d:7c:
                    0f:97:b1:06:11:ff:94:bb:80:b4:ba:44:d5:8e:73:
                    38:9d:44:ef:50:62:31:39:5a:c6:dc:02:47:24:52:
                    a5:e7:21:3f:1c:47:b2:70:e8:18:fb:e8:50:db:16:
                    3b:9a:9c:ef:d7:55:24:f5:88:b1:86:2d:f8:c7:60:
                    fc:74:7b:71:96:d4:c0:4e:72:93:f1:58:1d:63:0a:
                    25:51:c3:5e:5b:3f:47:c2:da:25:52:bf:f4:04:db:
                    cc:6e:b3:44:c6:3d:81:ab:a2:99:84:8b:d7:6e:a2:
                    ee:7e:53:72:5a:de:06:88:3e:5a:00:a7:6b:5e:ff:
                    ec:aa:5b:96:ef:94:af:c5:ea:29:f0:84:73:a7:89:
                    85:e5:d5:5b:15:1c:d0:bc:6f:d7:65:c2:7a:72:e6:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:43:72:72:5D:25:71:02:A8:82:F4:F1:39:B3:5A:39:A5:B7:70
            X509v3 Authority Key Identifier:
                keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:41:40:7e:46:0f:41:5c:29:65:b7:09:b8:d2:d3:4e:15:16:
         b7:b6:04:b6:86:ac:8e:2a:e9:89:ea:64:d9:ea:1c:0d:1a:a7:
         ad:51:9f:ab:db:e1:a6:fb:a2:a4:26:d8:d2:b7:52:5d:20:cd:
         9e:83:6e:21:8d:c5:88:4e:3c:ca:6d:96:d0:5c:fa:27:f1:7d:
         77:aa:3c:8b:cf:ac:97:24:2e:e5:ca:21:a0:18:ea:25:55:a1:
         ec:e0:5f:a2:2d:4e:7a:63:85:b1:86:45:ce:4c:ea:5f:38:55:
         5d:06:4e:6c:fc:f8:2d:ae:28:03:16:a7:e0:9a:b9:83:e5:ae:
         7f:65:0d:df:7c:0d:13:86:5f:fd:84:01:df:2b:37:0f:d7:13:
         43:db:07:fb:c1:d4:5a:11:97:5d:78:a6:07:7d:22:a3:0a:75:
         d8:0e:8a:44:26:72:5b:fc:b5:74:de:cd:61:4c:70:d7:1c:9a:
         a5:81:da:f6:d4:f5:e5:4c:e1:06:24:3c:7d:65:dc:d4:01:f4:
         7e:bf:03:95:ed:f9:ec:48:f3:8c:3e:ef:8b:72:ef:73:c2:4c:
         21:24:18:67:f5:f6:db:b8:65:91:7c:b5:a7:55:78:26:fc:8b:
         32:f8:22:93:31:13:0e:ce:b2:d0:92:cb:29:45:ea:73:78:ed:
         98:fa:40:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxOK78vaDtuKKOAbEYLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5
N2M1YzMwHhcNMjUwNDEzMTUwMTAyWhcNMjUwNDE0MTUwMTAyWjAzMTEwLwYDVQQD
EyhjYjAzNDM3MjcyNWQyNTcxMDJhODgyZjRmMTM5YjM1YTM5YTViNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uFPPQjWx0f8uQdHJOOZ0vAtMPn4
4wixVBShEUo/zJdspiIVGQkO5KoEd+ZvbLrL0ll1l5PRIHfgjpWDP9vdz3nVU9Yk
9F2TtfRfqxzjlgy4WEKSXLLqrYhgC9djsAOYrt/SrNIKnXwPl7EGEf+Uu4C0ukTV
jnM4nUTvUGIxOVrG3AJHJFKl5yE/HEeycOgY++hQ2xY7mpzv11Uk9Yixhi34x2D8
dHtxltTATnKT8VgdYwolUcNeWz9HwtolUr/0BNvMbrNExj2Bq6KZhIvXbqLuflNy
Wt4GiD5aAKdrXv/sqluW75Svxeop8IRzp4mF5dVbFRzQvG/XZcJ6cubn/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsDQ3JyXSVxAqiC9PE5s1o5pbdwMB8GA1UdIwQY
MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt
YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh
LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUFAfkYP
QVwpZbcJuNLTThUWt7YEtoasjirpiepk2eocDRqnrVGfq9vhpvuipCbY0rdSXSDN
noNuIY3FiE48ym2W0Fz6J/F9d6o8i8+slyQu5cohoBjqJVWh7OBfoi1OemOFsYZF
zkzqXzhVXQZObPz4La4oAxan4Jq5g+Wuf2UN33wNE4Zf/YQB3ys3D9cTQ9sH+8HU
WhGXXXimB30iowp12A6KRCZyW/y1dN7NYUxw1xyapYHa9tT15UzhBiQ8fWXc1AH0
fr8Dle357EjzjD7vi3Lvc8JMISQYZ/X227hlkXy1p1V4JvyLMvgikzETDs6y0JLL
KUXqc3jtmPpAdQ==
-----END CERTIFICATE-----