Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
File:                     Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft (raw, json)
Hash identifier:          bAtClrDfA9119e7+OkuaydJcuTla7S3ecxL/QuX6x6M=
Subject key identifier:   9A:A6:84:42:C3:3A:F9:CD:FD:A0:95:BD:B1:DE:6F:A3:B5:0A:D7:89
Authority key identifier: 46:8E:CB:A1:0E:75:99:A0:30:AA:61:30:88:68:8A:6C:26:D6:2D:75
Certificate issuer:       /CN=468ecba10e7599a030aa613088688a6c26d62d75
Certificate serial:       01962DF3AFF849AC338D34F3480F9230C3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
Manifest number:          117A
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl (hash: 3TSWrYdKOEPnDisyB6PfYJ+PdbCtJ84dJ3nnj2uPu8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:af:f8:49:ac:33:8d:34:f3:48:0f:92:30:c3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468ecba10e7599a030aa613088688a6c26d62d75
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=9aa68442c33af9cdfda095bdb1de6fa3b50ad789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:a9:53:d3:56:06:b3:50:a7:38:27:f3:b9:
                    0f:fb:ad:e5:03:8a:70:65:5a:f3:a4:9c:ac:68:d2:
                    e4:d4:a2:3e:eb:a3:b5:99:c6:05:16:14:81:63:23:
                    db:f1:98:36:d3:23:2e:ec:73:d4:e9:46:a0:30:9d:
                    12:5b:b0:60:20:61:bd:de:8f:0a:98:fb:57:ce:b2:
                    2f:f8:6c:54:c5:53:5d:95:f6:b6:8c:07:0f:df:90:
                    33:e8:e8:40:88:a1:f6:3f:76:34:9e:cd:0f:e2:91:
                    05:99:4d:61:d1:21:f3:77:ff:ab:7d:c4:61:dd:1f:
                    07:f7:07:93:d1:e2:a3:d1:d6:72:bb:90:85:39:63:
                    8a:4d:62:f2:91:cb:90:34:b0:ec:4b:d7:5b:1d:20:
                    3e:b7:87:11:c7:aa:e4:59:e8:16:9c:a0:31:ba:06:
                    67:67:8f:58:42:1b:de:66:25:bc:24:29:31:8e:6f:
                    93:ba:46:70:a5:90:03:80:e4:9c:21:d6:f4:d5:0d:
                    bb:17:14:99:9d:df:eb:58:6b:73:5b:8a:21:a7:f0:
                    99:6b:d3:be:61:89:6b:16:d3:a1:33:33:f9:7d:74:
                    1c:c8:5a:46:f4:a7:21:24:09:8d:df:c5:db:9f:29:
                    03:d3:b8:f8:db:c6:ce:35:d4:1e:cd:09:65:40:c6:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:84:42:C3:3A:F9:CD:FD:A0:95:BD:B1:DE:6F:A3:B5:0A:D7:89
            X509v3 Authority Key Identifier:
                keyid:46:8E:CB:A1:0E:75:99:A0:30:AA:61:30:88:68:8A:6C:26:D6:2D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:5a:54:48:b5:b4:cc:65:f9:35:17:97:74:a1:b2:15:40:
         a4:22:63:67:36:2a:59:ba:47:46:f9:0b:7f:3f:09:26:dc:5f:
         be:53:18:cf:c0:04:32:87:74:d9:87:bf:c6:81:05:5c:54:46:
         b5:59:51:a9:a2:bd:3c:9e:cb:38:a4:30:c4:c7:08:f0:b3:9d:
         1d:dd:fc:80:a9:20:86:41:e2:63:4d:50:1f:bf:dd:be:8f:ae:
         fb:2a:93:31:76:23:93:42:1b:f5:ef:7d:a1:bd:4c:d2:91:5b:
         0a:cd:16:3d:c2:5d:dc:5e:2b:de:72:c0:39:9a:88:d2:35:a0:
         02:df:79:63:41:76:2e:9d:1b:d4:06:41:9e:31:19:fb:3a:ef:
         70:7e:f8:96:c6:c6:09:ca:18:fe:da:8a:53:91:9e:18:f4:54:
         c4:c3:78:5b:63:d5:c7:fa:49:cf:5d:ae:bc:01:37:2d:99:f7:
         21:13:27:f6:f8:1c:ce:49:a0:3c:c0:7a:a1:be:5e:ee:c5:71:
         23:4d:31:4e:83:d4:e8:6a:e1:b5:76:96:45:ab:96:fe:a9:36:
         4d:04:54:67:65:36:8f:5f:82:66:f1:ba:3d:13:3c:37:e9:36:
         27:a9:47:55:5e:67:43:e6:72:fb:01:04:be:d9:8c:e8:b5:ed:
         89:0f:c3:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86/4SawzjTTzSA+SMMO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGVjYmExMGU3NTk5YTAzMGFhNjEzMDg4Njg4YTZjMjZk
NjJkNzUwHhcNMjUwNDEzMDcwMTA3WhcNMjUwNDE0MDcwMTA3WjAzMTEwLwYDVQQD
Eyg5YWE2ODQ0MmMzM2FmOWNkZmRhMDk1YmRiMWRlNmZhM2I1MGFkNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j6pU9NWBrNQpzgn87kP+63lA4pw
ZVrzpJysaNLk1KI+66O1mcYFFhSBYyPb8Zg20yMu7HPU6UagMJ0SW7BgIGG93o8K
mPtXzrIv+GxUxVNdlfa2jAcP35Az6OhAiKH2P3Y0ns0P4pEFmU1h0SHzd/+rfcRh
3R8H9weT0eKj0dZyu5CFOWOKTWLykcuQNLDsS9dbHSA+t4cRx6rkWegWnKAxugZn
Z49YQhveZiW8JCkxjm+TukZwpZADgOScIdb01Q27FxSZnd/rWGtzW4ohp/CZa9O+
YYlrFtOhMzP5fXQcyFpG9KchJAmN38XbnykD07j428bONdQezQllQMbQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqmhELDOvnN/aCVvbHeb6O1CteJMB8GA1UdIwQY
MBaAFEaOy6EOdZmgMKphMIhoimwm1i11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm83TG9RNTFtYUF3cW1Fd2lHaUtiQ2JXTFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVhNTAtNGUwNS00YWJkLTg5Mjct
ZGY3ZTBiZDZmODE2LzEvUm83TG9RNTFtYUF3cW1Fd2lHaUtiQ2JXTFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVhNTAtNGUwNS00YWJkLTg5MjctZGY3ZTBiZDZmODE2
LzEvUm83TG9RNTFtYUF3cW1Fd2lHaUtiQ2JXTFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJchaVEi1
tMxl+TUXl3ShshVApCJjZzYqWbpHRvkLfz8JJtxfvlMYz8AEMod02Ye/xoEFXFRG
tVlRqaK9PJ7LOKQwxMcI8LOdHd38gKkghkHiY01QH7/dvo+u+yqTMXYjk0Ib9e99
ob1M0pFbCs0WPcJd3F4r3nLAOZqI0jWgAt95Y0F2Lp0b1AZBnjEZ+zrvcH74lsbG
CcoY/tqKU5GeGPRUxMN4W2PVx/pJz12uvAE3LZn3IRMn9vgczkmgPMB6ob5e7sVx
I00xToPU6GrhtXaWRauW/qk2TQRUZ2U2j1+CZvG6PRM8N+k2J6lHVV5nQ+Zy+wEE
vtmM6LXtiQ/Dzw==
-----END CERTIFICATE-----