Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File:                     CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier:          2OdVEXpGjIRdgcodd7Lx72Ydhbh47cIi4Tp4hHSpV0Y=
Subject key identifier:   44:88:F3:A3:9A:85:21:53:C4:80:F5:EE:66:B9:69:D0:B1:36:A8:6E
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer:       /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial:       01962F3D949635FE1B4F4E8C16A0F575E465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number:          087E
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
                          2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: JJdx6mptqc0IA4dyC7fsPcDCZqaOE0WnuKtqF7vijQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:96:35:fe:1b:4f:4e:8c:16:a0:f5:75:e4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=4488f3a39a852153c480f5ee66b969d0b136a86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:29:45:f5:55:0c:ce:72:33:7f:13:c2:b4:
                    42:c1:17:10:da:56:94:31:15:d4:32:23:16:e7:da:
                    8d:cd:0e:54:b7:c5:53:99:fc:dd:62:ca:5c:d4:0f:
                    7e:71:0a:ac:f8:1c:d0:ed:95:d6:72:1a:fb:e1:d2:
                    14:c6:69:7f:07:c6:76:ff:37:79:d5:6f:1b:26:96:
                    b5:d5:de:0d:80:2a:5f:b9:71:68:6c:c0:5c:b7:0d:
                    c3:5c:70:87:ba:4c:ec:19:a7:ec:ee:71:86:5d:16:
                    c2:53:a7:26:f9:4a:33:56:6a:dc:30:3e:c3:e2:bf:
                    a5:ca:36:37:38:01:4c:4a:a4:6e:e3:a8:f3:8c:89:
                    ca:3e:bf:82:fb:69:0e:cc:50:7b:7b:ab:0f:07:72:
                    bc:81:bd:d7:8f:eb:40:c9:e9:49:f2:31:99:6f:2c:
                    dd:cc:8b:1a:bb:6b:f3:b2:ff:75:79:f3:0d:80:ac:
                    77:e6:28:16:54:82:64:50:70:a9:25:ed:86:10:8c:
                    47:91:bd:9c:4b:fa:cc:31:49:5d:b2:00:34:34:76:
                    23:6c:e8:57:df:ea:dc:d7:8f:00:71:98:39:a5:ea:
                    d9:03:11:f8:a6:f0:b9:19:86:bc:ca:0f:b9:f9:d9:
                    ce:de:81:ba:0b:41:46:57:17:e2:69:27:38:14:a6:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:88:F3:A3:9A:85:21:53:C4:80:F5:EE:66:B9:69:D0:B1:36:A8:6E
            X509v3 Authority Key Identifier:
                keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:59:96:c0:29:a5:6c:6a:38:25:71:92:59:e2:35:2d:bb:f6:
         8f:98:ca:16:12:6a:de:52:2e:01:73:d0:68:01:4f:0f:f3:4a:
         3d:82:b5:85:39:c1:82:f9:41:28:e7:e7:98:5e:9c:33:ac:75:
         e3:44:2a:ad:93:d0:4c:49:4e:1b:80:8f:5f:a2:02:d7:a5:8b:
         94:2f:ae:3d:37:b1:91:e7:54:94:8e:e9:7a:14:fa:05:8f:a4:
         8e:2a:59:37:7f:e8:08:ee:b3:7f:15:99:cb:27:1e:67:1e:d9:
         9d:42:ca:f2:b2:ce:79:d0:3a:ee:dd:1d:40:5b:81:23:77:f1:
         61:21:a6:b3:ab:ff:4c:91:3d:95:5a:8c:12:3e:f5:4a:d5:16:
         3b:e1:3f:7e:e1:50:ab:91:5c:a6:36:c6:75:56:4d:63:b0:ee:
         eb:56:81:ae:fc:37:87:75:93:48:2d:67:45:f4:58:47:0b:a9:
         9f:49:93:2f:8f:e9:56:48:fb:ab:97:12:62:63:ed:0e:cc:65:
         58:56:61:a7:c3:2e:93:9b:1b:a4:fe:4a:85:5a:e3:35:3e:5d:
         0d:0e:89:fc:42:f4:f5:4d:85:7c:21:7c:43:12:b0:34:95:41:
         f5:fc:14:d5:db:95:24:f6:0a:52:f5:4c:7e:d4:03:50:0e:9a:
         b5:5e:54:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZSWNf4bT06MFqD1deRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjAzYzZlZmY5ZTc0MjI2MDMwOTNmODNlNjIxMWRhOThj
NzU4MjkwHhcNMjUwNDEzMTMwMTI2WhcNMjUwNDE0MTMwMTI2WjAzMTEwLwYDVQQD
Eyg0NDg4ZjNhMzlhODUyMTUzYzQ4MGY1ZWU2NmI5NjlkMGIxMzZhODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU8pRfVVDM5yM38TwrRCwRcQ2laU
MRXUMiMW59qNzQ5Ut8VTmfzdYspc1A9+cQqs+BzQ7ZXWchr74dIUxml/B8Z2/zd5
1W8bJpa11d4NgCpfuXFobMBctw3DXHCHukzsGafs7nGGXRbCU6cm+UozVmrcMD7D
4r+lyjY3OAFMSqRu46jzjInKPr+C+2kOzFB7e6sPB3K8gb3Xj+tAyelJ8jGZbyzd
zIsau2vzsv91efMNgKx35igWVIJkUHCpJe2GEIxHkb2cS/rMMUldsgA0NHYjbOhX
3+rc148AcZg5perZAxH4pvC5GYa8yg+5+dnO3oG6C0FGVxfiaSc4FKZpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESI86OahSFTxID17ma5adCxNqhuMB8GA1UdIwQY
MBaAFAogPG7/nnQiYDCT+D5iEdqYx1gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjIt
MDg3NzRiNmM2YmIzLzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjItMDg3NzRiNmM2YmIz
LzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1mWwCml
bGo4JXGSWeI1Lbv2j5jKFhJq3lIuAXPQaAFPD/NKPYK1hTnBgvlBKOfnmF6cM6x1
40QqrZPQTElOG4CPX6IC16WLlC+uPTexkedUlI7pehT6BY+kjipZN3/oCO6zfxWZ
yyceZx7ZnULK8rLOedA67t0dQFuBI3fxYSGms6v/TJE9lVqMEj71StUWO+E/fuFQ
q5FcpjbGdVZNY7Du61aBrvw3h3WTSC1nRfRYRwupn0mTL4/pVkj7q5cSYmPtDsxl
WFZhp8Muk5sbpP5KhVrjNT5dDQ6J/EL09U2FfCF8QxKwNJVB9fwU1duVJPYKUvVM
ftQDUA6atV5UUw==
-----END CERTIFICATE-----