Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          zOQ+yGstXVa96jReIMX4Rq1PdBhvNGhGnNrFRTh0U+8=
Subject key identifier:   21:0C:BF:ED:7D:5F:AF:47:1A:6D:81:88:0F:AF:EA:FF:28:18:50:6C
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       01962FAB2CE9F692AEA1FC1388AC6AEAC0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          0C23
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
                          2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: 7x4rd/SPfjOjI+NOCo0sN17rz8wFXemAAZEUinhH9hA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:e9:f6:92:ae:a1:fc:13:88:ac:6a:ea:c0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=210cbfed7d5faf471a6d81880fafeaff2818506c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:c4:b8:fa:ed:56:18:c1:c3:8a:15:14:13:
                    cc:1d:83:26:11:49:6b:2a:f0:16:63:d9:c2:ef:88:
                    1c:da:1b:b0:bb:95:ba:d6:70:9f:d0:76:cf:e4:7f:
                    b8:d0:45:48:e8:0d:9e:d6:69:71:b5:69:99:1e:54:
                    38:c0:eb:6f:5f:04:61:a4:46:31:dc:7b:63:4c:53:
                    15:38:f1:ca:5f:d9:30:f1:b3:50:e3:5c:3f:06:f0:
                    9f:2a:bf:ea:d1:aa:bb:ea:9e:c7:86:5f:66:7c:3f:
                    13:86:39:fa:3f:8c:83:77:08:ac:99:5c:11:62:6e:
                    a9:c0:58:96:42:f5:45:8a:11:67:d8:24:4a:28:8e:
                    42:8e:78:60:be:37:7a:17:68:7a:e1:b9:1a:33:52:
                    c4:62:7c:a7:24:f4:3b:4d:2b:d1:3d:06:81:2d:5d:
                    51:1e:4a:37:70:e7:61:36:82:6c:37:ff:31:0c:33:
                    1b:db:42:84:e2:5f:af:02:b0:22:df:c8:3a:45:03:
                    25:a7:bb:43:94:be:e7:3e:e1:41:8c:0d:77:05:3a:
                    e2:68:42:c3:c5:03:30:c6:db:1f:02:81:de:84:e7:
                    7d:a9:76:02:1b:36:58:fa:15:29:5d:52:72:46:a5:
                    e3:f8:d3:22:77:ad:14:3c:9f:ab:df:77:f1:22:78:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:BF:ED:7D:5F:AF:47:1A:6D:81:88:0F:AF:EA:FF:28:18:50:6C
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:61:b2:5c:6e:6f:cd:73:30:74:57:d2:6d:2b:21:1b:80:1e:
         07:0c:96:55:42:a4:57:c0:7c:e6:3a:c8:b9:74:8f:73:71:10:
         bf:0b:24:9f:6e:b3:29:08:36:52:4b:8d:e9:27:9c:b1:5e:bb:
         08:3f:88:98:0b:82:b7:c1:85:af:8d:8b:a2:df:8d:64:3e:f7:
         d7:31:3d:74:6a:10:69:da:11:12:f7:03:14:86:7a:7a:1d:f5:
         f1:d6:f4:82:cc:1f:f3:8c:78:69:b4:56:16:06:bf:58:11:a0:
         6d:9c:ab:cd:a3:dc:f9:88:68:cd:1e:0b:91:57:bc:43:46:ab:
         e3:07:dd:05:1c:93:29:80:49:35:eb:e6:78:0f:c0:5e:1a:7d:
         2f:58:17:48:02:e3:2e:95:f7:c6:64:5d:d5:0b:fb:ba:60:03:
         52:34:d0:94:7e:4c:3b:27:11:54:16:ab:f2:a6:82:5e:54:4e:
         f7:60:56:59:8c:c9:9d:ad:03:f8:01:94:6b:cb:00:93:7a:de:
         b0:83:c5:26:86:5e:71:3a:6e:fe:c8:ed:ed:02:27:b4:4e:2d:
         ad:38:17:35:95:10:cf:59:bb:60:13:3f:be:88:e5:e7:1e:45:
         d2:c7:99:37:d1:48:8f:a6:c1:31:f7:cb:6e:eb:b7:eb:19:ae:
         bf:69:43:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyzp9pKuofwTiKxq6sDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
EygyMTBjYmZlZDdkNWZhZjQ3MWE2ZDgxODgwZmFmZWFmZjI4MTg1MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfbEuPrtVhjBw4oVFBPMHYMmEUlr
KvAWY9nC74gc2huwu5W61nCf0HbP5H+40EVI6A2e1mlxtWmZHlQ4wOtvXwRhpEYx
3HtjTFMVOPHKX9kw8bNQ41w/BvCfKr/q0aq76p7Hhl9mfD8Thjn6P4yDdwismVwR
Ym6pwFiWQvVFihFn2CRKKI5Cjnhgvjd6F2h64bkaM1LEYnynJPQ7TSvRPQaBLV1R
Hko3cOdhNoJsN/8xDDMb20KE4l+vArAi38g6RQMlp7tDlL7nPuFBjA13BTriaELD
xQMwxtsfAoHehOd9qXYCGzZY+hUpXVJyRqXj+NMid60UPJ+r33fxIniwzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEMv+19X69HGm2BiA+v6v8oGFBsMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGGyXG5v
zXMwdFfSbSshG4AeBwyWVUKkV8B85jrIuXSPc3EQvwskn26zKQg2UkuN6SecsV67
CD+ImAuCt8GFr42Lot+NZD731zE9dGoQadoREvcDFIZ6eh318db0gswf84x4abRW
Fga/WBGgbZyrzaPc+YhozR4LkVe8Q0ar4wfdBRyTKYBJNevmeA/AXhp9L1gXSALj
LpX3xmRd1Qv7umADUjTQlH5MOycRVBar8qaCXlRO92BWWYzJna0D+AGUa8sAk3re
sIPFJoZecTpu/sjt7QIntE4trTgXNZUQz1m7YBM/vojl5x5F0seZN9FIj6bBMffL
buu36xmuv2lDdg==
-----END CERTIFICATE-----