Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
File:                     63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft (raw, json)
Hash identifier:          UY9x4IvP+Q+jbma5xeau7EB2YRckHRQo9WG424VN508=
Subject key identifier:   34:4C:61:C7:0D:9C:A3:19:A2:98:39:B0:32:48:41:6A:B9:62:57:88
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       01962F06503147AA04906530A8C019256817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
Manifest number:          084A
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 0Iti5rQOBFKxa8BPPsZhviEd7_U.roa (hash: TxpBeTH0Sb0gV3JONhoTSy9RsKSDgBblYT86MorAja4=)
                          2: 63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl (hash: EKNAeooPjYqINRTmUVodHGip1lKgb3M0zrISBLWZ8bA=)
                          3: yslx6H8CxkmB5eJ6GsJ00aKGHvc.roa (hash: C1F/5vxIilaeDaJGXcioovy5J1zB7GHCUZGFv6IDVZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:50:31:47:aa:04:90:65:30:a8:c0:19:25:68:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=344c61c70d9ca319a29839b03248416ab9625788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:76:cf:5d:60:c9:52:8a:81:3a:6b:46:1f:
                    ef:4f:3f:e0:1a:b2:c6:af:91:49:2a:d6:90:60:49:
                    06:c8:26:4a:bd:1e:ba:06:e3:24:75:eb:6f:c3:20:
                    6c:dd:65:2c:de:8e:bd:b1:e0:bb:fc:fd:4e:1c:66:
                    3c:1b:8b:2e:37:77:f7:8b:08:90:3c:43:1a:93:a5:
                    a5:0d:be:93:60:89:86:f6:e3:61:e1:d6:9d:c8:a0:
                    59:9b:a9:ad:a9:f1:72:d0:77:6d:df:38:1e:57:17:
                    50:c6:b0:34:7d:19:bb:1c:65:02:bf:77:7e:c3:60:
                    19:92:b0:7e:f7:f4:ac:6e:53:c8:d4:34:cd:ea:26:
                    48:8d:b7:39:63:71:e9:84:4d:5b:1b:98:d0:8b:3e:
                    28:49:50:ef:ef:f7:70:4a:57:37:3e:1b:fe:07:f9:
                    bf:fb:5e:68:04:db:5c:d4:86:09:54:d7:6a:d5:df:
                    e2:88:cf:14:03:19:d9:3b:b7:57:61:ec:b2:8e:66:
                    98:3e:7b:8b:75:9e:bb:ca:59:c3:3a:71:ec:0d:c4:
                    35:e7:7c:56:c7:24:3e:48:e2:7c:c5:99:b8:6e:41:
                    4a:79:0f:bb:e6:12:7e:7e:47:26:dc:d3:b3:3c:77:
                    c3:60:e0:54:30:3c:5a:c2:81:ff:d3:6b:d0:2b:ea:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:61:C7:0D:9C:A3:19:A2:98:39:B0:32:48:41:6A:B9:62:57:88
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:37:70:0e:40:29:ba:a6:ec:e2:97:ac:79:00:ee:e4:16:
         ee:df:9c:7c:4d:48:e3:59:d3:01:fd:82:22:9d:e1:e0:08:45:
         da:ec:6c:ef:b1:a9:21:4f:32:1b:a8:7b:09:80:3a:ee:80:9d:
         c1:ec:d4:94:47:27:7c:f7:d7:a8:1d:dc:13:16:f9:9a:c8:ac:
         4a:f5:b7:98:b2:ce:5f:bb:53:23:07:ca:32:ee:c4:4f:51:57:
         40:a7:61:5d:76:62:52:44:f8:aa:ac:3b:3b:8d:d6:b1:1a:58:
         6a:cd:df:a2:b8:76:5b:a4:d7:2a:97:68:08:23:9f:47:2e:7f:
         e3:6b:5e:64:77:c3:c6:45:41:0e:08:07:10:e8:d0:a5:b9:08:
         17:3f:05:6c:a9:42:53:b7:e4:c2:a0:12:ad:8e:99:2e:cb:73:
         2e:03:1b:32:ea:f7:de:59:eb:b3:bf:cb:26:48:e0:c2:3b:6b:
         7d:b3:85:17:f9:63:45:92:16:eb:10:b0:9f:58:23:8b:d0:b4:
         63:13:3c:d4:45:ac:75:07:2d:dd:ab:2e:7c:6c:8a:42:4f:00:
         cc:1d:b9:3c:1f:f8:71:9a:68:61:f2:2f:97:02:ba:ed:76:48:
         ef:55:7c:ee:87:96:71:ad:57:4c:58:0f:64:93:0f:fe:30:45:
         03:d8:9d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlAxR6oEkGUwqMAZJWgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl
YWZjOWQwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
EygzNDRjNjFjNzBkOWNhMzE5YTI5ODM5YjAzMjQ4NDE2YWI5NjI1Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs52z11gyVKKgTprRh/vTz/gGrLG
r5FJKtaQYEkGyCZKvR66BuMkdetvwyBs3WUs3o69seC7/P1OHGY8G4suN3f3iwiQ
PEMak6WlDb6TYImG9uNh4dadyKBZm6mtqfFy0Hdt3zgeVxdQxrA0fRm7HGUCv3d+
w2AZkrB+9/SsblPI1DTN6iZIjbc5Y3HphE1bG5jQiz4oSVDv7/dwSlc3Phv+B/m/
+15oBNtc1IYJVNdq1d/iiM8UAxnZO7dXYeyyjmaYPnuLdZ67ylnDOnHsDcQ153xW
xyQ+SOJ8xZm4bkFKeQ+75hJ+fkcm3NOzPHfDYOBUMDxawoH/02vQK+rzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRMYccNnKMZopg5sDJIQWq5YleIMB8GA1UdIwQY
MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt
NGE1ZWVkMWVlNWJjLzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj
LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPM3cA5A
Kbqm7OKXrHkA7uQW7t+cfE1I41nTAf2CIp3h4AhF2uxs77GpIU8yG6h7CYA67oCd
wezUlEcnfPfXqB3cExb5msisSvW3mLLOX7tTIwfKMu7ET1FXQKdhXXZiUkT4qqw7
O43WsRpYas3forh2W6TXKpdoCCOfRy5/42teZHfDxkVBDggHEOjQpbkIFz8FbKlC
U7fkwqASrY6ZLstzLgMbMur33lnrs7/LJkjgwjtrfbOFF/ljRZIW6xCwn1gji9C0
YxM81EWsdQct3asufGyKQk8AzB25PB/4cZpoYfIvlwK67XZI71V87oeWca1XTFgP
ZJMP/jBFA9idxg==
-----END CERTIFICATE-----