Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File:                     RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier:          vCLtdMUKsW1bRufoUK8YKxBcy/0T41aE6mQwVuiMnHI=
Subject key identifier:   5C:56:7D:62:D3:14:AB:95:E5:A5:16:C6:2D:50:20:55:62:05:89:B0
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer:       /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial:       01962E998BA264690DF7434EADAC79E21B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number:          14C0
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
                          2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: r30MxD9T8Ztp3LF7eSJNEW4jylojPGi9uvd9w8ZFp9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8b:a2:64:69:0d:f7:43:4e:ad:ac:79:e2:1b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=5c567d62d314ab95e5a516c62d502055620589b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:ef:3b:db:e0:32:8d:51:60:f7:b7:4b:e7:
                    98:aa:bc:c3:91:a5:b4:d9:a4:d4:12:c4:48:b1:1c:
                    be:ee:6b:26:ab:84:92:02:ac:56:e5:43:01:14:94:
                    96:b6:97:37:45:bd:85:4a:b9:87:cd:f6:e2:ee:b6:
                    71:ba:62:40:7c:8d:38:cf:4e:97:87:92:f5:bf:9c:
                    79:7f:1d:e3:0d:2b:52:f8:ed:f3:94:c5:b6:4f:8e:
                    10:da:86:f7:1f:96:f8:ae:63:f6:6c:5e:0a:b7:54:
                    95:98:34:39:e7:14:65:5c:63:57:0d:90:dd:9a:63:
                    83:e1:03:4f:ed:24:d8:d3:59:f1:d2:59:2b:7b:77:
                    b0:fc:60:4d:73:23:8a:17:d5:41:fa:40:51:e4:85:
                    cd:1b:2f:f5:e0:28:eb:82:ee:99:92:44:13:7f:4c:
                    46:65:cc:e2:f4:fe:0a:32:b3:74:ef:e7:1d:5c:06:
                    1c:f8:da:6c:cd:ed:3a:7f:cd:aa:9d:ab:69:a8:24:
                    1f:e2:98:46:82:58:35:08:0d:3d:3d:ef:78:ae:9b:
                    5c:57:17:fa:19:d9:49:2b:b0:63:a0:a4:45:95:70:
                    dc:9c:c5:26:df:c6:5f:36:94:29:74:2f:7b:3b:ae:
                    c1:2f:e7:a8:ba:94:ce:30:87:1e:90:43:61:58:af:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:56:7D:62:D3:14:AB:95:E5:A5:16:C6:2D:50:20:55:62:05:89:B0
            X509v3 Authority Key Identifier:
                keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:96:1f:8f:ad:4e:82:dd:c9:0f:7c:ed:58:13:bc:4f:4a:
         35:45:06:62:eb:1e:c6:9e:16:5f:97:e0:f2:f4:5d:43:37:27:
         b8:15:d2:49:1b:95:35:73:6c:c1:21:fb:b2:2f:3c:b4:cf:b4:
         01:b1:2e:b7:12:72:a0:f3:8a:1a:fa:78:bd:e6:88:86:87:b0:
         db:e6:ad:40:46:ff:d6:4b:a9:5d:ea:e5:4e:ae:e3:00:f9:b2:
         b3:92:d2:23:20:c5:41:e6:85:8d:eb:6f:6f:2d:9f:70:e2:40:
         7b:53:60:12:6e:88:3d:af:25:a6:79:23:10:0c:81:bc:94:29:
         87:6a:9f:e3:9d:d2:9b:18:55:bf:42:a5:3c:c5:1c:7e:da:dc:
         bb:77:7b:d9:ad:ac:0b:f6:61:54:47:4f:0f:de:53:76:4d:4a:
         07:e2:6f:64:49:ad:d0:8e:76:b9:c9:e5:0c:4a:7a:1e:5d:08:
         ee:d6:b4:f1:93:99:73:56:23:24:c8:19:1e:a9:a3:3f:e7:4d:
         47:bf:91:b9:80:23:35:5f:b4:6f:f8:da:e4:2c:63:a0:07:42:
         59:d2:da:e7:85:6e:fe:55:1c:6b:ef:58:15:f5:62:76:28:00:
         d2:e3:a1:86:f5:88:ff:1a:62:18:80:bf:54:84:7e:bd:e2:d9:
         ba:ec:1c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYuiZGkN90NOrax54ht+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjI0ZGM5Mzk2ZTU4MGZmNzEyMGYyNTczNTNhNzBjNzIz
NzljOTMwHhcNMjUwNDEzMTAwMjE2WhcNMjUwNDE0MTAwMjE2WjAzMTEwLwYDVQQD
Eyg1YzU2N2Q2MmQzMTRhYjk1ZTVhNTE2YzYyZDUwMjA1NTYyMDU4OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho3vO9vgMo1RYPe3S+eYqrzDkaW0
2aTUEsRIsRy+7msmq4SSAqxW5UMBFJSWtpc3Rb2FSrmHzfbi7rZxumJAfI04z06X
h5L1v5x5fx3jDStS+O3zlMW2T44Q2ob3H5b4rmP2bF4Kt1SVmDQ55xRlXGNXDZDd
mmOD4QNP7STY01nx0lkre3ew/GBNcyOKF9VB+kBR5IXNGy/14Cjrgu6ZkkQTf0xG
Zczi9P4KMrN07+cdXAYc+Npsze06f82qnatpqCQf4phGglg1CA09Pe94rptcVxf6
GdlJK7BjoKRFlXDcnMUm38ZfNpQpdC97O67BL+eoupTOMIcekENhWK+JgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxWfWLTFKuV5aUWxi1QIFViBYmwMB8GA1UdIwQY
MBaAFEYiTck5blgP9xIPJXNTpwxyN5yTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMDVkZmYtYmUxMi00ZTgyLTg3M2Qt
ZDMxYTMzZmM1ZTk5LzEvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lMDVkZmYtYmUxMi00ZTgyLTg3M2QtZDMxYTMzZmM1ZTk5
LzEvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvuWH4+t
ToLdyQ987VgTvE9KNUUGYusexp4WX5fg8vRdQzcnuBXSSRuVNXNswSH7si88tM+0
AbEutxJyoPOKGvp4veaIhoew2+atQEb/1kupXerlTq7jAPmys5LSIyDFQeaFjetv
by2fcOJAe1NgEm6IPa8lpnkjEAyBvJQph2qf453SmxhVv0KlPMUcftrcu3d72a2s
C/ZhVEdPD95Tdk1KB+JvZEmt0I52ucnlDEp6Hl0I7ta08ZOZc1YjJMgZHqmjP+dN
R7+RuYAjNV+0b/ja5CxjoAdCWdLa54Vu/lUca+9YFfVidigA0uOhhvWI/xpiGIC/
VIR+veLZuuwc5Q==
-----END CERTIFICATE-----