Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier:          dMAw23L09Re4uqGH1CMOF3S4fMuu/sORxpSYkAN2FaA=
Subject key identifier:   17:0B:A2:47:88:11:F6:41:66:41:F3:B3:49:AB:A7:1F:77:E4:74:E7
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer:       /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial:       01962F74CA568691924562078F98331A7084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number:          1235
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: Vy6vxrT2EJHlsy8ckBIk3rTROfQQZlRUJtb4Kq7h53k=)
                          2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ca:56:86:91:92:45:62:07:8f:98:33:1a:70:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=170ba2478811f6416641f3b349aba71f77e474e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fd:c8:df:11:8a:ce:e2:a1:85:a7:17:c9:c2:
                    80:8d:e3:d4:77:b6:35:93:b1:4c:22:ab:b2:14:58:
                    ac:f3:1a:68:29:a7:db:9b:bd:2a:6a:46:2e:20:a8:
                    db:73:a4:94:62:66:4f:0e:1f:66:75:ee:a7:21:a3:
                    16:c2:2f:1c:4c:1f:6c:c5:bc:4d:f0:62:4e:8a:40:
                    65:6b:06:d4:03:71:46:1a:c4:4b:69:f3:46:bc:a5:
                    7e:d6:73:1b:3c:f1:f1:c6:c9:ff:a6:2a:00:b3:5d:
                    b7:3e:36:94:53:7d:96:d1:ba:98:e5:85:92:21:33:
                    c9:37:f7:bb:7b:8a:71:54:85:ed:bd:62:f7:b5:05:
                    6a:de:9e:72:b5:8a:50:d3:b7:47:90:ea:70:18:d2:
                    b2:e2:48:32:56:4e:96:a7:a6:88:c0:e8:da:74:e2:
                    98:82:a7:a3:89:fc:be:73:f7:6b:d3:12:94:17:8d:
                    4f:41:07:4d:34:b0:5d:58:fd:b3:03:fe:95:a6:e4:
                    52:eb:49:2b:a8:22:dd:5c:d4:0c:35:db:25:ae:15:
                    75:2f:77:1b:0e:7c:16:21:d1:fc:9d:fb:e8:75:8d:
                    a6:c1:f5:8b:82:a9:a7:2e:1d:5f:af:45:1b:91:f8:
                    7c:9f:1f:4b:6e:6e:44:6a:f8:50:ce:98:5c:e4:fd:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:A2:47:88:11:F6:41:66:41:F3:B3:49:AB:A7:1F:77:E4:74:E7
            X509v3 Authority Key Identifier:
                keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:1a:85:ad:fd:d6:50:83:fe:b5:8e:25:6a:22:b5:da:30:
         36:f7:62:53:32:e6:fc:91:31:21:1c:85:15:a9:d7:69:0c:2c:
         d5:7b:ca:c5:1c:de:21:c1:a9:05:b6:fe:53:33:f6:96:20:20:
         51:39:d9:99:60:37:a8:82:da:af:c1:4f:d8:44:88:6c:57:e1:
         79:44:bd:af:a7:e9:64:35:70:19:d7:2b:3b:b4:76:33:a4:45:
         c4:4e:2d:0a:7e:ab:b1:f5:8c:ca:26:c0:b4:c1:b7:87:e7:ab:
         c7:dd:d6:38:61:dd:5f:f1:7f:57:50:68:88:7c:40:7a:ff:16:
         63:99:46:0d:3b:23:f8:9d:f1:05:3b:76:d6:40:e2:c8:df:7c:
         5a:63:e4:19:bb:62:32:40:2e:73:6e:17:fe:8b:52:68:86:b9:
         45:f9:96:e9:60:0d:6a:6c:0a:38:f3:c1:67:7c:97:16:4a:3c:
         d5:fb:f7:ea:fd:43:3c:bc:80:8d:14:87:ec:ff:3f:60:79:22:
         36:c6:8a:84:8d:e4:3c:08:f1:ee:b8:b5:57:a5:5a:13:34:01:
         12:62:e8:f1:0a:4e:c9:68:92:ca:cc:66:1a:ea:54:d7:ca:38:
         38:e2:d6:73:e7:f3:b1:ad:ef:2b:41:fa:b1:31:0d:b9:a4:4c:
         8f:21:63:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMpWhpGSRWIHj5gzGnCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYjk1MmVkMWNkN2EzODAzY2Y0ZGJmZDM0MGVhNzQ5NjMy
NjhiYTAwHhcNMjUwNDEzMTQwMTQ1WhcNMjUwNDE0MTQwMTQ1WjAzMTEwLwYDVQQD
EygxNzBiYTI0Nzg4MTFmNjQxNjY0MWYzYjM0OWFiYTcxZjc3ZTQ3NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f3I3xGKzuKhhacXycKAjePUd7Y1
k7FMIquyFFis8xpoKafbm70qakYuIKjbc6SUYmZPDh9mde6nIaMWwi8cTB9sxbxN
8GJOikBlawbUA3FGGsRLafNGvKV+1nMbPPHxxsn/pioAs123PjaUU32W0bqY5YWS
ITPJN/e7e4pxVIXtvWL3tQVq3p5ytYpQ07dHkOpwGNKy4kgyVk6Wp6aIwOjadOKY
gqejify+c/dr0xKUF41PQQdNNLBdWP2zA/6VpuRS60krqCLdXNQMNdslrhV1L3cb
DnwWIdH8nfvodY2mwfWLgqmnLh1fr0Ubkfh8nx9Lbm5EavhQzphc5P1gWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcLokeIEfZBZkHzs0mrpx935HTnMB8GA1UdIwQY
MBaAFE25Uu0c16OAPPTb/TQOp0ljJougMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGJsUzdSelhvNEE4OU52OU5BNm5TV01taTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNGYyZTItMDE4OC00YTQzLTg1MDMt
ZDI2MDFjYzEyMzc3LzEvVGJsUzdSelhvNEE4OU52OU5BNm5TV01taTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNGYyZTItMDE4OC00YTQzLTg1MDMtZDI2MDFjYzEyMzc3
LzEvVGJsUzdSelhvNEE4OU52OU5BNm5TV01taTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+caha39
1lCD/rWOJWoitdowNvdiUzLm/JExIRyFFanXaQws1XvKxRzeIcGpBbb+UzP2liAg
UTnZmWA3qILar8FP2ESIbFfheUS9r6fpZDVwGdcrO7R2M6RFxE4tCn6rsfWMyibA
tMG3h+erx93WOGHdX/F/V1BoiHxAev8WY5lGDTsj+J3xBTt21kDiyN98WmPkGbti
MkAuc24X/otSaIa5RfmW6WANamwKOPPBZ3yXFko81fv36v1DPLyAjRSH7P8/YHki
NsaKhI3kPAjx7ri1V6VaEzQBEmLo8QpOyWiSysxmGupU18o4OOLWc+fzsa3vK0H6
sTENuaRMjyFjfg==
-----END CERTIFICATE-----