Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File:                     4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier:          TZ/c2QFZPux7po73wiya+CJ7lzxjBQwA4w8e/1fHlsQ=
Subject key identifier:   E7:90:C6:6C:07:24:09:7C:F4:A0:55:4C:0E:CD:29:5A:C6:B3:D4:5F
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer:       /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial:       01962F3DA43A99BB0F7BF7CB9CC4E5DF0624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number:          04CC
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: 6sFaGARSJ2fOX8BpRiULFXsyo3nNzGYAbtCylruOerA=)
                          2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
                          3: Xse_q1SIOApT0uJ4kO_NUiDFU1A.roa (hash: OR/vMeRN3fqz9meXU3XlPM8D3UPTvqtP1NKBnNpirBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:3a:99:bb:0f:7b:f7:cb:9c:c4:e5:df:06:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=e790c66c0724097cf4a0554c0ecd295ac6b3d45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:8c:51:6f:e7:2f:67:0f:d2:fe:e0:c7:50:
                    f2:d1:e1:a2:80:b7:f1:61:84:49:a6:96:86:84:45:
                    cd:28:c2:49:ad:9a:d1:d3:8e:f3:da:db:27:5f:99:
                    64:1a:35:b2:7d:dc:c5:42:ce:89:06:a0:ac:f4:df:
                    59:a2:55:ea:f9:c1:27:ab:1f:4c:67:80:56:be:06:
                    93:42:44:ef:fc:4b:88:2d:c8:c2:72:18:ea:9f:74:
                    3a:88:b7:ab:7c:4b:2f:95:ae:c4:31:b5:e3:ab:ae:
                    f5:65:78:0d:8d:63:d1:89:19:46:77:db:38:61:db:
                    82:38:b2:8c:a9:e4:6a:fe:2c:f6:01:46:85:11:07:
                    41:a4:54:60:53:69:02:ae:70:74:c2:3c:a6:a8:69:
                    b0:af:ce:9f:3d:6b:87:b1:ba:34:c3:a6:b4:e5:68:
                    f0:80:87:58:88:5e:2e:38:cd:89:4c:96:e4:59:16:
                    96:37:fe:81:2f:86:7c:2d:da:d1:ec:ef:35:9b:fe:
                    e8:98:84:07:78:04:12:8a:57:58:00:c5:bb:37:48:
                    9f:b7:8b:4a:a5:e6:59:07:fb:16:0e:62:83:99:5b:
                    96:77:ab:44:ef:7f:ad:af:c4:8c:3f:c2:44:cd:1e:
                    7d:26:2e:bb:6c:9f:b7:c0:ab:44:f7:a8:5a:7e:56:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:C6:6C:07:24:09:7C:F4:A0:55:4C:0E:CD:29:5A:C6:B3:D4:5F
            X509v3 Authority Key Identifier:
                keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:87:dc:b4:f3:d0:53:7e:39:34:78:6d:9c:29:34:4c:a6:
         ab:35:73:37:30:1f:6c:d7:59:fd:ee:cb:77:c2:14:aa:15:48:
         e7:04:c2:0b:b4:3d:d7:57:c5:2c:5e:f4:a1:50:61:b2:10:fa:
         b1:5f:eb:78:04:84:65:a0:a5:d3:f1:05:b4:79:25:e6:eb:3e:
         49:73:87:87:25:6c:f8:d6:92:78:54:05:3a:a0:80:8c:27:a8:
         b6:15:33:f4:b2:80:b0:13:2e:69:81:7c:f6:b4:ab:12:4d:d0:
         c9:80:c3:62:cf:8d:23:00:42:0c:bc:ed:31:5c:5f:ea:a6:35:
         b3:87:18:e8:4f:4f:7d:8c:45:4f:49:6e:a7:93:86:e6:16:b8:
         1d:5d:08:35:42:81:c7:ce:6e:32:26:a2:e9:2c:87:ce:25:a9:
         98:92:2c:bf:dc:5d:7b:b0:dd:8b:df:c8:31:c7:c1:54:92:46:
         95:db:f1:11:08:99:47:91:78:b4:c9:f9:8b:7b:af:2d:4e:71:
         12:fc:1f:41:b9:d2:ad:46:6e:7f:69:ac:ed:1b:17:81:d9:6f:
         e5:6d:9a:bb:37:94:01:96:25:ac:50:a3:df:f9:cc:69:34:43:
         4f:2b:c5:bf:3c:22:83:c8:13:b4:63:c6:a9:b8:43:1e:32:fe:
         0a:47:7f:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaQ6mbsPe/fLnMTl3wYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4
ZTU3ZDMwHhcNMjUwNDEzMTMwMTMwWhcNMjUwNDE0MTMwMTMwWjAzMTEwLwYDVQQD
EyhlNzkwYzY2YzA3MjQwOTdjZjRhMDU1NGMwZWNkMjk1YWM2YjNkNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCSMUW/nL2cP0v7gx1Dy0eGigLfx
YYRJppaGhEXNKMJJrZrR047z2tsnX5lkGjWyfdzFQs6JBqCs9N9ZolXq+cEnqx9M
Z4BWvgaTQkTv/EuILcjCchjqn3Q6iLerfEsvla7EMbXjq671ZXgNjWPRiRlGd9s4
YduCOLKMqeRq/iz2AUaFEQdBpFRgU2kCrnB0wjymqGmwr86fPWuHsbo0w6a05Wjw
gIdYiF4uOM2JTJbkWRaWN/6BL4Z8LdrR7O81m/7omIQHeAQSildYAMW7N0ift4tK
peZZB/sWDmKDmVuWd6tE73+tr8SMP8JEzR59Ji67bJ+3wKtE96haflbv6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeQxmwHJAl89KBVTA7NKVrGs9RfMB8GA1UdIwQY
MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt
ZTczM2MyNjJhMzgyLzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy
LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNSH3LTz
0FN+OTR4bZwpNEymqzVzNzAfbNdZ/e7Ld8IUqhVI5wTCC7Q911fFLF70oVBhshD6
sV/reASEZaCl0/EFtHkl5us+SXOHhyVs+NaSeFQFOqCAjCeothUz9LKAsBMuaYF8
9rSrEk3QyYDDYs+NIwBCDLztMVxf6qY1s4cY6E9PfYxFT0lup5OG5ha4HV0INUKB
x85uMiai6SyHziWpmJIsv9xde7Ddi9/IMcfBVJJGldvxEQiZR5F4tMn5i3uvLU5x
EvwfQbnSrUZuf2ms7RsXgdlv5W2auzeUAZYlrFCj3/nMaTRDTyvFvzwig8gTtGPG
qbhDHjL+Ckd/4g==
-----END CERTIFICATE-----