Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File:                     RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier:          juPPqhZMxZcxLTdpzflqI26Tq9kJ5eu2nstnN7EgNZc=
Subject key identifier:   24:2B:05:04:E5:90:7E:6D:CC:83:28:D7:4D:E7:D7:11:C1:AE:AA:0B
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer:       /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial:       01962ECFB78BAFD64C807CE6130F4DF83BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number:          0345
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
                          2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: ugdOkkKMYbdclqHVl9JX9mQ9VlV6Q8Chinht9f5N6uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:8b:af:d6:4c:80:7c:e6:13:0f:4d:f8:3b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=242b0504e5907e6dcc8328d74de7d711c1aeaa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:ed:f6:7f:d7:e6:af:3e:d2:14:ca:56:19:
                    cd:c9:76:92:8f:ec:a9:a2:a1:ad:2a:9a:db:27:98:
                    47:f2:d8:1d:28:43:88:65:20:77:da:8d:32:dd:f6:
                    3e:14:4d:46:d5:d7:89:ba:63:b7:43:57:1d:d8:e3:
                    f2:81:6a:81:8b:68:db:4f:2e:cd:65:1d:a5:17:11:
                    07:4f:61:4a:2f:a6:fb:27:97:2f:6e:3f:e2:a4:61:
                    0f:ae:5b:ce:cc:99:f7:d7:53:1d:b1:b0:db:aa:d9:
                    ba:67:34:ab:86:4b:68:d2:9f:1e:db:05:8f:8f:17:
                    2a:e8:b7:06:e2:56:e1:21:d5:51:46:a6:ef:b8:df:
                    41:65:84:ca:fc:58:2d:36:82:6e:e7:4a:00:91:01:
                    97:40:db:6e:6c:a9:c4:01:ba:2a:a5:ca:74:12:8e:
                    22:ff:9f:b4:16:ea:1f:ab:74:dd:40:87:ea:31:e2:
                    11:13:c5:e4:0f:51:b5:5a:f2:ce:a8:35:fa:92:9c:
                    35:7f:18:68:52:ca:f6:cf:32:ed:e9:2c:c0:ab:c9:
                    76:07:f1:84:d6:af:ef:55:85:db:01:3c:e2:98:c4:
                    94:d0:72:dc:4f:63:bc:5d:c7:5b:8b:f3:d2:69:94:
                    6e:e9:e9:21:fb:04:02:a0:43:dc:1c:e6:e9:5e:10:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:05:04:E5:90:7E:6D:CC:83:28:D7:4D:E7:D7:11:C1:AE:AA:0B
            X509v3 Authority Key Identifier:
                keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:d6:e8:f1:bc:73:6f:14:14:92:b2:e8:80:fe:7a:38:35:
         f1:5c:f3:3e:e5:f5:65:ed:74:e6:81:c0:fa:b0:29:38:2a:9d:
         93:91:b4:1c:02:f1:87:0e:39:c4:92:27:94:1d:5f:41:e0:36:
         10:20:a7:fb:5b:87:56:7d:b0:85:af:45:04:80:76:ee:a1:e8:
         22:16:02:7d:58:fb:bb:06:f0:8b:bd:75:87:e4:39:10:ce:fc:
         bf:ee:3c:08:29:f2:83:cb:6c:35:0a:60:1b:5d:2b:0c:74:23:
         c3:7d:da:e0:ed:99:92:b1:30:1c:22:be:db:35:08:32:fb:dd:
         ed:ae:9e:bf:52:5d:bc:97:28:a1:3e:1b:29:c8:f5:94:52:5d:
         1d:d0:51:10:ef:c7:60:72:71:dd:cd:ba:3f:98:d0:48:b5:54:
         55:4c:99:bd:d4:0e:a5:99:05:a8:91:0b:8f:d6:69:7f:20:e5:
         36:24:b1:bc:ad:86:11:18:73:61:0c:56:09:b7:ae:d1:f8:1e:
         96:8e:db:33:e3:75:f5:d7:af:da:e4:b2:14:4d:66:1d:f0:15:
         52:c6:ea:72:fa:c8:55:fd:b9:fb:81:14:cc:65:bb:d5:13:f6:
         ec:4e:6c:6c:7d:94:49:a7:7b:b7:ed:6b:9f:de:56:98:f4:15:
         7f:8e:fa:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7eLr9ZMgHzmEw9N+DutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0
MGRiZDUwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
EygyNDJiMDUwNGU1OTA3ZTZkY2M4MzI4ZDc0ZGU3ZDcxMWMxYWVhYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygft9n/X5q8+0hTKVhnNyXaSj+yp
oqGtKprbJ5hH8tgdKEOIZSB32o0y3fY+FE1G1deJumO3Q1cd2OPygWqBi2jbTy7N
ZR2lFxEHT2FKL6b7J5cvbj/ipGEPrlvOzJn311MdsbDbqtm6ZzSrhkto0p8e2wWP
jxcq6LcG4lbhIdVRRqbvuN9BZYTK/FgtNoJu50oAkQGXQNtubKnEAboqpcp0Eo4i
/5+0Fuofq3TdQIfqMeIRE8XkD1G1WvLOqDX6kpw1fxhoUsr2zzLt6SzAq8l2B/GE
1q/vVYXbATzimMSU0HLcT2O8Xcdbi/PSaZRu6ekh+wQCoEPcHObpXhDvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQrBQTlkH5tzIMo103n1xHBrqoLMB8GA1UdIwQY
MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt
ZjM4Yzc0OWI2ZTM5LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5
LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1rW6PG8
c28UFJKy6ID+ejg18VzzPuX1Ze105oHA+rApOCqdk5G0HALxhw45xJInlB1fQeA2
ECCn+1uHVn2wha9FBIB27qHoIhYCfVj7uwbwi711h+Q5EM78v+48CCnyg8tsNQpg
G10rDHQjw33a4O2ZkrEwHCK+2zUIMvvd7a6ev1JdvJcooT4bKcj1lFJdHdBREO/H
YHJx3c26P5jQSLVUVUyZvdQOpZkFqJELj9ZpfyDlNiSxvK2GERhzYQxWCbeu0fge
lo7bM+N19dev2uSyFE1mHfAVUsbqcvrIVf25+4EUzGW71RP27E5sbH2USad7t+1r
n95WmPQVf476bA==
-----END CERTIFICATE-----