Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          C2ebuqsPJNAhmbTh0kmdV4SktsW2yfHEqNM/bS7MGvQ=
Subject key identifier:   30:A1:3F:F4:9D:F6:24:B8:25:26:87:65:F2:B8:1F:65:91:04:ED:77
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       01962ECF54AEF53021CF074527C14D783D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: fJiiQZe/6DgB5vEC/y3668RijuL4l3h52+Moa0UFXBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:54:ae:f5:30:21:cf:07:45:27:c1:4d:78:3d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=30a13ff49df624b825268765f2b81f659104ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:b6:72:d8:0d:b9:f7:13:0d:17:ce:8d:ce:
                    b3:2a:fa:59:dd:d2:5e:f5:16:7c:40:fa:5c:d6:f6:
                    1c:fd:15:89:be:39:b9:85:79:5b:76:6a:e1:ac:d1:
                    c7:78:75:ad:2a:29:9d:37:d0:e4:84:79:02:7b:99:
                    6a:7d:54:49:42:06:38:4b:c9:5f:74:07:dc:28:60:
                    b6:9e:14:3b:54:b0:40:46:33:af:3b:9c:93:d2:69:
                    87:b0:98:eb:e1:e4:9a:ba:7e:8a:ff:23:17:17:6d:
                    ca:43:36:61:12:1c:00:d4:a5:a3:64:6c:44:ea:a0:
                    db:39:8b:f0:a0:7b:07:66:ec:da:b8:92:44:4d:5d:
                    c2:2c:fc:ef:12:7d:e2:48:c8:a1:72:b0:0d:d2:c7:
                    68:44:4a:3b:15:cd:84:e9:55:69:b9:56:78:4c:53:
                    b1:a3:ca:12:1c:2e:05:be:a5:bc:83:ef:33:42:42:
                    c8:9f:28:cc:15:e0:f1:a3:d0:55:35:d5:d1:36:db:
                    17:84:c6:63:09:48:e0:9b:7e:5d:c0:68:05:9b:c7:
                    50:56:35:ad:cf:44:d4:9c:7a:58:6d:51:aa:ff:e4:
                    ff:ae:6d:8e:0b:6f:5a:3b:d8:53:0d:30:f7:b4:5d:
                    46:56:a7:ea:71:d3:f3:dd:46:9a:6c:94:12:ac:0b:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A1:3F:F4:9D:F6:24:B8:25:26:87:65:F2:B8:1F:65:91:04:ED:77
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:62:67:19:7e:da:a0:76:68:f8:bb:5d:ff:b9:45:8d:99:ce:
         f0:22:03:ff:6f:7c:95:f2:51:f7:42:35:0a:f2:b6:bc:bc:0d:
         00:08:61:de:73:05:9c:2b:19:70:4c:48:79:e3:2c:cc:07:8c:
         28:a2:c9:18:fa:24:44:4d:3c:df:01:98:17:3c:5f:8d:fd:2e:
         49:f0:c6:cb:e9:58:86:c9:a8:c6:41:e2:70:86:07:54:c1:08:
         38:16:23:28:7f:2f:ad:d3:d6:bd:27:e0:e1:c6:46:77:42:53:
         8a:41:ca:6c:cb:84:a2:22:6b:a8:94:79:b4:4e:d6:e1:af:5c:
         02:0f:1d:fc:5d:43:23:96:f2:0c:e0:12:f6:b0:16:24:70:cb:
         26:2b:2c:61:b2:cf:34:a3:0a:6d:1e:ec:90:ef:1c:f4:55:6a:
         14:11:ef:71:b0:ed:c2:2d:15:69:07:41:87:47:4d:f3:f3:2e:
         8e:f2:ff:80:d3:14:82:ef:be:4f:52:26:19:ee:1c:80:95:e7:
         58:87:34:6a:7e:8b:07:02:45:58:f2:03:cc:33:d8:26:dd:c3:
         a8:89:fb:41:65:b8:bd:9a:aa:7a:82:24:79:de:71:34:96:e5:
         69:33:6a:79:b5:e1:28:a3:56:fb:54:9d:d4:b5:0e:e0:6b:9c:
         9c:55:33:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1Su9TAhzwdFJ8FNeD2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw
N2Y4YzIwHhcNMjUwNDEzMTEwMTAxWhcNMjUwNDE0MTEwMTAxWjAzMTEwLwYDVQQD
EygzMGExM2ZmNDlkZjYyNGI4MjUyNjg3NjVmMmI4MWY2NTkxMDRlZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJK2ctgNufcTDRfOjc6zKvpZ3dJe
9RZ8QPpc1vYc/RWJvjm5hXlbdmrhrNHHeHWtKimdN9DkhHkCe5lqfVRJQgY4S8lf
dAfcKGC2nhQ7VLBARjOvO5yT0mmHsJjr4eSaun6K/yMXF23KQzZhEhwA1KWjZGxE
6qDbOYvwoHsHZuzauJJETV3CLPzvEn3iSMihcrAN0sdoREo7Fc2E6VVpuVZ4TFOx
o8oSHC4FvqW8g+8zQkLInyjMFeDxo9BVNdXRNtsXhMZjCUjgm35dwGgFm8dQVjWt
z0TUnHpYbVGq/+T/rm2OC29aO9hTDTD3tF1GVqfqcdPz3UaabJQSrAuNiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDChP/Sd9iS4JSaHZfK4H2WRBO13MB8GA1UdIwQY
MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt
YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm
LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGJnGX7a
oHZo+Ltd/7lFjZnO8CID/298lfJR90I1CvK2vLwNAAhh3nMFnCsZcExIeeMszAeM
KKLJGPokRE083wGYFzxfjf0uSfDGy+lYhsmoxkHicIYHVMEIOBYjKH8vrdPWvSfg
4cZGd0JTikHKbMuEoiJrqJR5tE7W4a9cAg8d/F1DI5byDOAS9rAWJHDLJissYbLP
NKMKbR7skO8c9FVqFBHvcbDtwi0VaQdBh0dN8/MujvL/gNMUgu++T1ImGe4cgJXn
WIc0an6LBwJFWPIDzDPYJt3DqIn7QWW4vZqqeoIked5xNJblaTNqebXhKKNW+1Sd
1LUO4GucnFUzjA==
-----END CERTIFICATE-----