Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File:                     SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier:          CAD6PMLDphVOJXK0cAxk1nk2P+B3qcmZgsu0iKnYp1A=
Subject key identifier:   1B:9B:94:46:B3:FC:89:B9:B1:31:98:69:64:A8:86:55:E5:9B:CC:05
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer:       /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial:       01962E98A6AD8A35E18DD76E327380C982D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number:          10AC
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: hcO9fnhvl5st85tUucYjfZBceQKztnw7gdMWjzdvV6U=)
                          2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:ad:8a:35:e1:8d:d7:6e:32:73:80:c9:82:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=1b9b9446b3fc89b9b131986964a88655e59bcc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:7f:30:d7:03:79:a1:e4:74:44:cd:4e:9e:
                    ee:0f:75:aa:94:80:04:f3:c7:a8:58:05:56:a3:0b:
                    11:6c:c8:ed:99:40:3c:b8:90:fc:65:6d:e7:25:e4:
                    ff:73:63:e4:3e:ac:82:ce:40:a4:23:26:72:c6:f6:
                    76:d7:a2:d1:ef:69:cb:b2:1b:1e:1f:f9:be:65:3b:
                    11:11:40:72:9e:02:26:3b:e0:ea:d1:67:0a:0f:9b:
                    80:99:6b:b1:f9:7a:35:86:c4:99:c6:db:0c:4e:ca:
                    35:7a:92:c7:36:fe:16:1c:db:47:31:5e:90:5e:a7:
                    7c:93:99:bb:d2:fc:24:b9:17:cf:33:f7:b1:4d:5c:
                    8f:35:74:33:eb:2a:83:77:93:f0:79:12:02:76:15:
                    3e:04:88:bd:f8:05:c9:ad:cd:bf:0b:81:70:79:dd:
                    2f:f0:58:25:78:c3:7c:72:9d:26:06:27:fe:56:b1:
                    b6:19:9b:e4:3d:5f:c1:99:24:bf:dc:21:60:d1:4e:
                    5f:a3:08:db:07:1c:e5:e2:a9:82:ff:fa:73:0b:0d:
                    4f:2d:65:aa:9f:4b:1b:2f:36:aa:14:12:1b:38:c6:
                    2a:b6:7e:5a:f4:1e:63:c3:67:66:b5:9d:f2:19:20:
                    8b:84:2a:99:ed:60:67:5d:28:79:3b:08:4e:24:cc:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9B:94:46:B3:FC:89:B9:B1:31:98:69:64:A8:86:55:E5:9B:CC:05
            X509v3 Authority Key Identifier:
                keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:52:49:1e:a8:3d:d3:09:52:43:97:8f:ee:65:37:a1:be:8b:
         e9:de:38:c6:ea:b7:72:33:c6:69:4f:a2:9b:91:eb:65:5f:3b:
         44:20:9c:7c:c1:6b:e0:df:04:e5:7d:c3:6f:10:b0:ed:a5:33:
         4b:cc:89:81:01:98:65:8e:66:7b:9d:f6:35:c2:00:94:fd:ea:
         16:29:8f:d2:40:0f:15:02:08:27:81:f5:26:30:d4:76:c0:31:
         d1:9f:7b:6b:44:07:e2:15:3a:3c:00:ad:a6:23:85:a1:81:f6:
         5a:39:75:ac:bd:56:02:44:60:39:94:2b:73:c3:e7:9b:90:a5:
         31:88:39:33:60:51:f6:31:a9:18:b3:63:89:59:63:68:bc:fb:
         f1:90:0a:52:ef:67:da:42:51:54:81:e7:ad:69:28:cd:72:a2:
         e6:ad:87:66:cc:f5:38:57:6b:c9:f2:c6:42:cf:97:84:ab:2b:
         27:e6:ff:cc:9f:ea:6e:60:c9:ea:79:2e:38:40:6e:40:5d:69:
         b7:fc:67:31:42:54:40:ee:c4:41:1b:ad:29:16:a1:f3:b3:f0:
         56:2f:88:aa:f8:8b:1f:cc:7e:ec:5c:91:02:99:07:9d:7a:12:
         ea:11:c0:ac:28:f8:ac:7d:46:c1:3b:e4:89:77:11:80:62:89:
         65:89:2d:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKatijXhjdduMnOAyYLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj
ZTU5ZmQwHhcNMjUwNDEzMTAwMTE3WhcNMjUwNDE0MTAwMTE3WjAzMTEwLwYDVQQD
EygxYjliOTQ0NmIzZmM4OWI5YjEzMTk4Njk2NGE4ODY1NWU1OWJjYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0l/MNcDeaHkdETNTp7uD3WqlIAE
88eoWAVWowsRbMjtmUA8uJD8ZW3nJeT/c2PkPqyCzkCkIyZyxvZ216LR72nLshse
H/m+ZTsREUByngImO+Dq0WcKD5uAmWux+Xo1hsSZxtsMTso1epLHNv4WHNtHMV6Q
Xqd8k5m70vwkuRfPM/exTVyPNXQz6yqDd5PweRICdhU+BIi9+AXJrc2/C4Fwed0v
8FgleMN8cp0mBif+VrG2GZvkPV/BmSS/3CFg0U5fowjbBxzl4qmC//pzCw1PLWWq
n0sbLzaqFBIbOMYqtn5a9B5jw2dmtZ3yGSCLhCqZ7WBnXSh5OwhOJMya5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBublEaz/Im5sTGYaWSohlXlm8wFMB8GA1UdIwQY
MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt
NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl
LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVJJHqg9
0wlSQ5eP7mU3ob6L6d44xuq3cjPGaU+im5HrZV87RCCcfMFr4N8E5X3DbxCw7aUz
S8yJgQGYZY5me532NcIAlP3qFimP0kAPFQIIJ4H1JjDUdsAx0Z97a0QH4hU6PACt
piOFoYH2Wjl1rL1WAkRgOZQrc8Pnm5ClMYg5M2BR9jGpGLNjiVljaLz78ZAKUu9n
2kJRVIHnrWkozXKi5q2HZsz1OFdryfLGQs+XhKsrJ+b/zJ/qbmDJ6nkuOEBuQF1p
t/xnMUJUQO7EQRutKRah87PwVi+IqviLH8x+7FyRApkHnXoS6hHArCj4rH1GwTvk
iXcRgGKJZYktKQ==
-----END CERTIFICATE-----