Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          w1Ve07L+X9krjkDcppJcR/wR0YzU4cb2PJ39yLQJAGY=
Subject key identifier:   43:D9:88:3D:1E:49:5B:0E:04:18:F4:F9:3A:AF:6B:75:F7:B2:91:D4
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       01962E61DB42CA43F9A879C3B705DC08FB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          1431
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
                          2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: xXUaeGgM6S3m3IQeKybmNhD87U/a1T+LqkWl7jVRFFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:42:ca:43:f9:a8:79:c3:b7:05:dc:08:fb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=43d9883d1e495b0e0418f4f93aaf6b75f7b291d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:dd:44:f9:f4:fe:90:53:ac:8b:0d:6d:52:
                    72:48:57:c2:db:75:74:39:d5:f9:6a:4d:47:c2:1e:
                    fa:7a:2a:cb:8f:48:e6:bf:ed:a8:73:55:60:cb:25:
                    db:01:c9:5d:09:f4:1f:cb:66:47:ee:1b:c6:21:a6:
                    a4:e5:e0:7f:d0:0d:9d:7c:d5:f6:94:6b:14:9e:17:
                    82:1d:54:80:71:b2:fb:f8:5c:b6:a4:36:a1:c4:96:
                    78:7a:89:d9:50:81:5f:67:65:be:1c:63:1f:0f:06:
                    c0:47:4e:84:7c:1b:43:7f:2d:67:f0:27:51:6c:e7:
                    fd:47:64:8a:aa:ca:7b:02:c7:13:6d:e6:5b:2f:5d:
                    30:6e:47:40:38:f4:cf:d6:11:ad:91:1e:b9:ce:5d:
                    63:f5:6a:66:fd:fb:13:d8:d9:e4:59:d1:e4:80:1c:
                    c9:9f:f0:b9:1f:dd:24:7b:0f:ca:fa:fb:4d:19:d1:
                    bb:46:70:2e:fe:85:26:c9:bb:bd:0c:10:7e:04:55:
                    a8:17:b6:df:ce:09:ac:dd:6a:12:e7:a3:6c:db:3c:
                    1d:36:06:61:ad:88:ee:13:ef:d1:8b:81:20:12:f3:
                    48:26:de:ed:41:3a:9e:1b:f8:b5:da:63:f1:69:4c:
                    3b:9e:b5:e9:3c:7b:3b:50:79:ff:38:e3:a0:95:23:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:88:3D:1E:49:5B:0E:04:18:F4:F9:3A:AF:6B:75:F7:B2:91:D4
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:1e:b1:38:6f:66:3e:76:cf:3e:bb:b2:5b:a7:c5:7b:0d:
         8a:6f:bc:82:c0:8d:f2:7e:61:ba:24:e9:a7:20:e2:18:10:95:
         34:d7:b3:42:a6:15:99:65:5b:5c:e6:f1:70:81:6e:c1:14:a3:
         73:dd:10:21:46:a6:c5:b8:03:b6:de:2c:58:01:2d:c4:93:a7:
         86:49:e1:ed:1b:da:f0:53:f4:91:0d:cb:2d:b5:89:f6:be:63:
         c6:9b:8b:97:b1:7a:13:1b:8c:d0:5f:61:4e:67:54:ec:c4:d6:
         f1:26:74:a3:03:34:8c:76:76:05:53:b3:8a:33:f9:0f:1d:74:
         be:25:70:3f:20:8d:f2:af:43:ba:4d:95:04:5a:48:77:c1:e6:
         c2:5f:97:c5:90:35:40:d2:66:b1:d9:a1:e7:ae:4d:17:9a:1e:
         92:09:7c:a3:47:55:93:3e:df:a1:f2:1c:ed:a9:49:1a:c0:bd:
         49:85:ed:74:df:f9:13:02:d9:98:10:b7:1d:49:f2:0b:cc:71:
         db:b2:3d:f3:d9:63:1c:83:02:96:16:c6:ae:d1:8a:8b:be:58:
         da:89:c0:09:15:e8:30:e6:b1:ed:a9:1f:0b:d6:9d:1f:87:c6:
         c2:70:d9:34:95:f4:39:54:15:e5:23:99:3b:9e:ef:fd:12:47:
         dd:09:81:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdtCykP5qHnDtwXcCPuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2
MDU5NjYwHhcNMjUwNDEzMDkwMTI3WhcNMjUwNDE0MDkwMTI3WjAzMTEwLwYDVQQD
Eyg0M2Q5ODgzZDFlNDk1YjBlMDQxOGY0ZjkzYWFmNmI3NWY3YjI5MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5jdRPn0/pBTrIsNbVJySFfC23V0
OdX5ak1Hwh76eirLj0jmv+2oc1VgyyXbAcldCfQfy2ZH7hvGIaak5eB/0A2dfNX2
lGsUnheCHVSAcbL7+Fy2pDahxJZ4eonZUIFfZ2W+HGMfDwbAR06EfBtDfy1n8CdR
bOf9R2SKqsp7AscTbeZbL10wbkdAOPTP1hGtkR65zl1j9Wpm/fsT2NnkWdHkgBzJ
n/C5H90kew/K+vtNGdG7RnAu/oUmybu9DBB+BFWoF7bfzgms3WoS56Ns2zwdNgZh
rYjuE+/Ri4EgEvNIJt7tQTqeG/i12mPxaUw7nrXpPHs7UHn/OOOglSOKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPZiD0eSVsOBBj0+Tqva3X3spHUMB8GA1UdIwQY
MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt
NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3
LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGywesThv
Zj52zz67slunxXsNim+8gsCN8n5huiTppyDiGBCVNNezQqYVmWVbXObxcIFuwRSj
c90QIUamxbgDtt4sWAEtxJOnhknh7Rva8FP0kQ3LLbWJ9r5jxpuLl7F6ExuM0F9h
TmdU7MTW8SZ0owM0jHZ2BVOzijP5Dx10viVwPyCN8q9Duk2VBFpId8Hmwl+XxZA1
QNJmsdmh565NF5oekgl8o0dVkz7fofIc7alJGsC9SYXtdN/5EwLZmBC3HUnyC8xx
27I989ljHIMClhbGrtGKi75Y2onACRXoMOax7akfC9adH4fGwnDZNJX0OVQV5SOZ
O57v/RJH3QmB8Q==
-----END CERTIFICATE-----