Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
File:                     Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft (raw, json)
Hash identifier:          eBxZycma/Aj07XMk5xWTbna05E1ublr8+NmxZtwy86c=
Subject key identifier:   F9:E3:47:49:11:FB:82:C9:55:B2:B1:A5:17:BB:DE:22:47:6C:E4:DB
Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
Certificate issuer:       /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Certificate serial:       01962E2ACAA42512DD1C46DFCD810B21970E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
Manifest number:          0BAC
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: NZZp83GD9DMoLhn3D9M5XusFTxI.roa (hash: OiMifk7R6FismqZrdc/pOMDrQLzXG34BDoHmuCJQZZM=)
                          2: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl (hash: NjDZgCIG0f7ZNH7u5Nb3MlZkQeOI2eEEsqR/5NyopzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:a4:25:12:dd:1c:46:df:cd:81:0b:21:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=f9e3474911fb82c955b2b1a517bbde22476ce4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:a9:53:af:cb:a4:c0:77:87:42:89:43:23:
                    0b:03:77:72:7e:5f:09:98:1c:6b:d0:e6:19:b6:c3:
                    1c:e9:59:e1:9b:de:f1:1d:5f:06:f0:87:25:25:0f:
                    dc:86:da:c8:3b:08:ae:dd:f3:44:42:13:9f:6c:15:
                    b7:c6:1e:f4:b3:51:c0:a7:20:cc:18:fa:12:31:47:
                    20:f7:9d:74:9d:f1:6e:2b:52:85:a9:70:62:75:80:
                    f0:6c:7b:09:ea:68:cc:3c:fd:b1:f1:75:7f:04:62:
                    a5:9a:d0:d6:41:3b:45:0d:c6:4b:bf:5f:ea:a1:58:
                    c0:12:61:1f:de:e3:67:57:0a:28:14:fc:67:e4:7d:
                    37:f5:03:cb:24:7d:50:5d:1d:ef:f0:df:03:6f:dc:
                    af:de:4a:62:6d:63:71:8c:33:98:1e:f1:4e:62:c6:
                    ea:aa:cc:1c:6b:ee:29:e8:4b:f6:14:21:0e:30:99:
                    cb:0f:f8:b9:39:d9:7b:ca:c3:1a:7a:8e:9f:37:86:
                    3b:a0:ea:f0:15:06:c7:c8:5a:44:0a:ca:e2:82:64:
                    4d:d4:1c:0c:5b:6d:0f:3a:e9:87:a2:72:43:77:a0:
                    13:f8:36:5b:f4:a9:fb:1d:57:c1:de:38:1c:9d:5a:
                    a0:a3:5e:14:16:69:e6:e6:4f:c7:26:68:4c:de:a7:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E3:47:49:11:FB:82:C9:55:B2:B1:A5:17:BB:DE:22:47:6C:E4:DB
            X509v3 Authority Key Identifier:
                keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:8f:3e:8a:80:35:ff:ec:37:bd:12:bb:02:a5:16:e1:10:
         13:f6:f0:ba:d8:ee:48:d2:3c:cc:c9:02:8d:31:73:f4:89:fc:
         c4:73:e2:7f:5e:c3:cd:a5:d1:00:95:76:c9:ee:81:19:a6:c8:
         3c:34:eb:79:d1:36:7a:ac:2f:49:35:12:39:7c:b5:e9:25:8a:
         28:ba:df:7f:7d:20:3e:6b:40:03:8e:b9:b9:cb:cc:55:db:b0:
         a6:29:00:31:14:e0:ec:00:09:16:a8:61:57:fb:1c:fb:47:47:
         3d:c0:6c:c9:62:54:5c:5d:76:ba:7b:5c:4a:2f:52:79:6a:06:
         b7:7c:74:4d:1d:20:82:de:f0:bc:4f:36:23:2a:b9:a8:0c:f1:
         0e:55:34:11:fa:57:42:92:44:88:e6:28:cc:1a:b0:9d:1e:b5:
         85:74:f8:05:ee:1b:48:d4:6e:1e:3c:d3:fc:41:47:e0:af:24:
         be:9f:0a:42:24:5c:e9:d6:fb:ee:fa:b5:7a:44:89:6c:85:a3:
         c4:cb:6e:d2:e9:99:70:a0:b7:c8:35:cb:26:fe:57:2d:9f:af:
         6c:5a:33:64:e4:e2:34:b3:d9:53:5f:85:37:03:59:5d:ab:fd:
         09:34:e0:0e:60:c8:77:19:e2:12:ec:c3:26:a7:53:95:78:4f:
         58:98:59:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsqkJRLdHEbfzYELIZcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmM3ZjBiZWFjMjI2MDcwMmQwNWI2OWRkN2I3YTNmYjJk
ZGQ2OWUwHhcNMjUwNDEzMDgwMTE4WhcNMjUwNDE0MDgwMTE4WjAzMTEwLwYDVQQD
EyhmOWUzNDc0OTExZmI4MmM5NTViMmIxYTUxN2JiZGUyMjQ3NmNlNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56+pU6/LpMB3h0KJQyMLA3dyfl8J
mBxr0OYZtsMc6Vnhm97xHV8G8IclJQ/chtrIOwiu3fNEQhOfbBW3xh70s1HApyDM
GPoSMUcg9510nfFuK1KFqXBidYDwbHsJ6mjMPP2x8XV/BGKlmtDWQTtFDcZLv1/q
oVjAEmEf3uNnVwooFPxn5H039QPLJH1QXR3v8N8Db9yv3kpibWNxjDOYHvFOYsbq
qswca+4p6Ev2FCEOMJnLD/i5Odl7ysMaeo6fN4Y7oOrwFQbHyFpECsrigmRN1BwM
W20POumHonJDd6AT+DZb9Kn7HVfB3jgcnVqgo14UFmnm5k/HJmhM3qd1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnjR0kR+4LJVbKxpRe73iJHbOTbMB8GA1UdIwQY
MBaAFEr8fwvqwiYHAtBbad17ej+y3daeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Z4X0MtckNKZ2NDMEZ0cDNYdDZQN0xkMXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZjQwNmEtMjk4MS00YWFmLThiNjEt
ZjRjZTIyZWNhZTM0LzEvU3Z4X0MtckNKZ2NDMEZ0cDNYdDZQN0xkMXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80ZjQwNmEtMjk4MS00YWFmLThiNjEtZjRjZTIyZWNhZTM0
LzEvU3Z4X0MtckNKZ2NDMEZ0cDNYdDZQN0xkMXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedyPPoqA
Nf/sN70SuwKlFuEQE/bwutjuSNI8zMkCjTFz9In8xHPif17DzaXRAJV2ye6BGabI
PDTredE2eqwvSTUSOXy16SWKKLrff30gPmtAA465ucvMVduwpikAMRTg7AAJFqhh
V/sc+0dHPcBsyWJUXF12untcSi9SeWoGt3x0TR0ggt7wvE82Iyq5qAzxDlU0EfpX
QpJEiOYozBqwnR61hXT4Be4bSNRuHjzT/EFH4K8kvp8KQiRc6db77vq1ekSJbIWj
xMtu0umZcKC3yDXLJv5XLZ+vbFozZOTiNLPZU1+FNwNZXav9CTTgDmDIdxniEuzD
JqdTlXhPWJhZJQ==
-----END CERTIFICATE-----