Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File:                     M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier:          yEMEhQfZQOWB/LpTKst7J0GvbBOAQEcdL5piblL1l8s=
Subject key identifier:   F0:A2:15:8A:D9:3A:2A:32:6F:8C:CD:80:BF:D4:E1:6A:DF:2A:80:3B
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer:       /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial:       01962E2AD1C2F89E45CC4E80284358420DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: VLMUnlU28qtDURjjQPrFh8gTfcwupl6gYgI1kzSnDis=)
                          2: azxmi2se1IK95xXGAVKvEPH21_A.roa (hash: Ss+Ca/k8A0fp5KqEjbn4GKd8EzNY8mejKpcvQRG6Wdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d1:c2:f8:9e:45:cc:4e:80:28:43:58:42:0d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=f0a2158ad93a2a326f8ccd80bfd4e16adf2a803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:ad:7d:af:62:e3:33:44:54:dc:d6:0b:2f:
                    80:ab:67:22:c0:bd:4d:39:65:1a:71:b5:3b:e2:2a:
                    e0:11:5e:bf:fd:f0:de:32:29:82:10:83:49:6b:b7:
                    e8:19:c3:0c:69:e8:ff:97:b3:f2:14:af:e7:ce:10:
                    a4:4a:68:e1:58:4e:74:38:de:2f:50:5a:97:5e:76:
                    c8:a6:10:8d:a3:c7:4d:f4:d0:46:9f:6b:c9:a4:9f:
                    91:99:c7:c9:d0:ab:1a:2a:8c:a5:8b:ee:ca:1d:a7:
                    de:be:90:c9:40:c2:84:57:a9:5d:94:bd:bb:e8:75:
                    72:e5:82:b5:23:ef:46:9e:10:db:92:1b:88:e5:16:
                    72:27:43:64:20:5c:d9:fc:07:1a:44:c6:97:8d:6d:
                    c8:c2:73:6e:ed:b0:0e:ba:a3:56:af:16:b4:d1:1b:
                    a9:14:fa:9e:7b:47:3e:20:22:a2:96:9a:cb:e0:0f:
                    4b:21:84:cf:d4:65:bb:b4:20:b1:e0:55:49:59:eb:
                    e2:af:ba:74:d8:b6:27:8e:12:ee:6f:64:b5:26:3f:
                    67:0a:ef:5f:7d:19:c2:8c:48:fb:e5:5e:e3:f3:a6:
                    07:32:e3:ae:11:23:02:7d:4f:f3:bf:44:ea:72:54:
                    06:96:93:7a:fa:19:f7:a3:b3:2c:73:7b:c2:73:33:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:15:8A:D9:3A:2A:32:6F:8C:CD:80:BF:D4:E1:6A:DF:2A:80:3B
            X509v3 Authority Key Identifier:
                keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:09:3f:db:24:cd:2f:1c:4e:33:fa:2f:59:4a:a9:49:07:b9:
         b2:a5:6b:0a:30:f8:30:ba:f8:af:34:f7:0e:1a:1b:33:8f:b5:
         96:92:eb:1d:ce:d5:b5:f5:d5:62:0c:96:c3:54:0f:c5:12:4e:
         7a:e3:ac:5b:7b:61:5f:a9:aa:73:a6:1a:db:b3:3b:ea:5b:21:
         43:4e:ad:de:e2:ce:37:53:2c:e0:0a:9d:01:11:1e:53:ed:45:
         1a:d2:82:3e:73:b4:a7:3e:f0:b2:07:62:d8:68:ea:90:80:46:
         25:d1:f9:7c:b4:3c:7e:72:e3:07:2a:38:61:d5:08:61:d5:b4:
         d0:49:18:f8:a0:34:6a:14:40:60:f5:cc:5d:cc:77:03:87:41:
         d8:cd:39:a9:39:38:7a:91:c3:19:de:75:8c:c8:a7:d3:5c:03:
         71:60:c7:29:52:f3:09:a3:ee:3a:fd:cc:9e:d9:e3:37:32:b2:
         56:74:a2:aa:b8:09:ee:02:11:b3:11:e2:ab:41:22:a6:e6:3a:
         f3:e8:85:79:0d:9a:00:49:f7:e5:8c:fc:27:90:78:92:81:9f:
         ef:4b:d4:8b:77:d9:90:57:fe:7b:0e:cf:47:de:05:cc:1b:ec:
         c0:54:96:4e:70:5b:49:fa:bb:69:56:b8:14:71:d5:33:b5:d3:
         9f:b7:fb:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtHC+J5FzE6AKENYQg3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmU4MGFlYTEwMGU5OGMwZGE1ZDFmZmVmOThiMzcxZDEx
ZWRkYTIwHhcNMjUwNDEzMDgwMTIwWhcNMjUwNDE0MDgwMTIwWjAzMTEwLwYDVQQD
EyhmMGEyMTU4YWQ5M2EyYTMyNmY4Y2NkODBiZmQ0ZTE2YWRmMmE4MDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O6tfa9i4zNEVNzWCy+Aq2ciwL1N
OWUacbU74irgEV6//fDeMimCEINJa7foGcMMaej/l7PyFK/nzhCkSmjhWE50ON4v
UFqXXnbIphCNo8dN9NBGn2vJpJ+RmcfJ0KsaKoyli+7KHafevpDJQMKEV6ldlL27
6HVy5YK1I+9GnhDbkhuI5RZyJ0NkIFzZ/AcaRMaXjW3IwnNu7bAOuqNWrxa00Rup
FPqee0c+ICKilprL4A9LIYTP1GW7tCCx4FVJWevir7p02LYnjhLub2S1Jj9nCu9f
fRnCjEj75V7j86YHMuOuESMCfU/zv0TqclQGlpN6+hn3o7Msc3vCczOjSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCiFYrZOioyb4zNgL/U4WrfKoA7MB8GA1UdIwQY
MBaAFDP+gK6hAOmMDaXR/++Ys3HRHt2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEt
NmNkNjU5YWNiZjA3LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84MDI1MjUtNWMyYy00NTY0LWJhNWEtNmNkNjU5YWNiZjA3
LzEvTV82QXJxRUE2WXdOcGRIXzc1aXpjZEVlM2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgk/2yTN
LxxOM/ovWUqpSQe5sqVrCjD4MLr4rzT3DhobM4+1lpLrHc7VtfXVYgyWw1QPxRJO
euOsW3thX6mqc6Ya27M76lshQ06t3uLON1Ms4AqdAREeU+1FGtKCPnO0pz7wsgdi
2GjqkIBGJdH5fLQ8fnLjByo4YdUIYdW00EkY+KA0ahRAYPXMXcx3A4dB2M05qTk4
epHDGd51jMin01wDcWDHKVLzCaPuOv3MntnjNzKyVnSiqrgJ7gIRsxHiq0EipuY6
8+iFeQ2aAEn35Yz8J5B4koGf70vUi3fZkFf+ew7PR94FzBvswFSWTnBbSfq7aVa4
FHHVM7XTn7f7Hw==
-----END CERTIFICATE-----