Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File:                     h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier:          F630MFG0jHHDij2wbXJbCjwGxxcsSfNqk3lkYGzuHoI=
Subject key identifier:   6F:1A:F7:48:87:0B:8A:8E:02:BA:19:BF:9C:0E:2C:2C:3A:EC:71:1C
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer:       /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial:       01962E98A2BBE87D570AAF1AF0798AAC7919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
                          2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: rp3L//G5G2y6b6w85zwOBRCdgkPDDYHSJnK7eUZEX7I=)
                          3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a2:bb:e8:7d:57:0a:af:1a:f0:79:8a:ac:79:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=6f1af748870b8a8e02ba19bf9c0e2c2c3aec711c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:48:53:8f:8d:0c:67:c0:9c:88:46:0e:19:
                    52:26:32:d5:03:be:d6:56:47:f2:08:45:64:84:76:
                    58:16:dc:51:31:dc:bd:93:21:9c:70:bf:43:68:bb:
                    ba:5a:0e:bd:a8:6a:b1:5a:87:88:ec:be:5e:7e:9b:
                    8e:03:a6:b0:29:91:01:8d:a4:a7:03:c7:1b:23:0f:
                    04:f4:ad:89:93:da:69:45:3b:99:10:ae:e1:6b:e4:
                    d6:1b:f3:08:c0:88:06:fb:f1:5c:40:b7:bb:ca:56:
                    40:de:f9:07:ef:7c:19:34:8d:5f:2f:aa:69:bf:46:
                    f4:a6:f2:a4:df:ac:6d:ff:56:a5:69:3b:9a:84:db:
                    27:92:25:2e:66:08:db:66:12:9d:a4:4f:f5:59:6a:
                    1b:e8:c3:1a:52:f8:e3:c4:1b:22:d7:e4:59:da:7f:
                    8f:aa:ef:85:31:45:8b:bd:7b:7a:9a:1c:42:8e:82:
                    cc:31:9c:aa:f7:56:4b:2b:ad:1d:db:1b:4b:86:11:
                    3c:4e:ef:33:14:d6:21:46:3e:57:4c:a6:bb:85:b8:
                    e9:5b:9b:e3:8e:c1:8c:89:da:db:e0:ae:d1:65:f4:
                    88:c1:58:57:06:b0:d1:a4:eb:61:97:b8:02:09:a2:
                    89:68:1c:c1:7a:59:dd:84:2b:6f:4d:87:c9:0a:4d:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1A:F7:48:87:0B:8A:8E:02:BA:19:BF:9C:0E:2C:2C:3A:EC:71:1C
            X509v3 Authority Key Identifier:
                keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:e8:3e:c3:43:91:28:85:5b:6c:74:24:d8:3f:3e:c6:6f:
         4f:5f:f9:ad:6e:dd:93:b3:50:ae:9b:b4:0c:b9:71:52:b1:9f:
         95:de:c8:60:d4:38:ad:24:21:67:2f:3a:2e:88:bd:ca:be:cb:
         da:9a:bf:4f:63:16:15:a7:a2:b4:75:a3:7b:a6:67:ad:f6:ff:
         22:6c:e8:bd:25:05:b5:1f:69:b0:f6:2a:f6:67:60:c2:cc:a8:
         8b:1c:66:8e:d6:48:49:0b:d9:33:54:36:51:9b:e2:b1:07:f2:
         b3:13:33:5f:66:96:ba:8e:2a:ef:e5:16:8b:5e:05:2c:e6:45:
         e2:9a:2a:4b:7b:1d:c0:8b:17:7c:48:a2:e3:be:51:00:8f:46:
         8e:bb:c9:0d:11:33:bd:e5:c3:72:5d:b4:5c:0a:f6:16:f0:5c:
         40:cb:52:0c:04:6a:1c:00:19:04:dd:6f:62:14:8e:66:23:96:
         6d:fa:d8:cf:9c:02:3b:61:45:8f:40:f6:39:0e:eb:40:15:85:
         32:ad:be:ab:4b:a1:c3:b6:6b:11:a2:ed:df:7e:bf:40:b0:7a:
         ea:e3:ce:b9:1b:f9:50:12:74:4e:49:57:90:be:d0:96:1f:72:
         68:ae:19:0d:a6:8e:f2:cc:aa:34:d6:7a:37:a1:8b:2a:e6:f0:
         af:46:50:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKK76H1XCq8a8HmKrHkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx
MzUwYTEwHhcNMjUwNDEzMTAwMTE2WhcNMjUwNDE0MTAwMTE2WjAzMTEwLwYDVQQD
Eyg2ZjFhZjc0ODg3MGI4YThlMDJiYTE5YmY5YzBlMmMyYzNhZWM3MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cRIU4+NDGfAnIhGDhlSJjLVA77W
VkfyCEVkhHZYFtxRMdy9kyGccL9DaLu6Wg69qGqxWoeI7L5efpuOA6awKZEBjaSn
A8cbIw8E9K2Jk9ppRTuZEK7ha+TWG/MIwIgG+/FcQLe7ylZA3vkH73wZNI1fL6pp
v0b0pvKk36xt/1alaTuahNsnkiUuZgjbZhKdpE/1WWob6MMaUvjjxBsi1+RZ2n+P
qu+FMUWLvXt6mhxCjoLMMZyq91ZLK60d2xtLhhE8Tu8zFNYhRj5XTKa7hbjpW5vj
jsGMidrb4K7RZfSIwVhXBrDRpOthl7gCCaKJaBzBelndhCtvTYfJCk1T4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8a90iHC4qOAroZv5wOLCw67HEcMB8GA1UdIwQY
MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt
MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4
LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGjoPsND
kSiFW2x0JNg/PsZvT1/5rW7dk7NQrpu0DLlxUrGfld7IYNQ4rSQhZy86Loi9yr7L
2pq/T2MWFaeitHWje6Znrfb/ImzovSUFtR9psPYq9mdgwsyoixxmjtZISQvZM1Q2
UZvisQfysxMzX2aWuo4q7+UWi14FLOZF4poqS3sdwIsXfEii475RAI9GjrvJDREz
veXDcl20XAr2FvBcQMtSDARqHAAZBN1vYhSOZiOWbfrYz5wCO2FFj0D2OQ7rQBWF
Mq2+q0uhw7ZrEaLt336/QLB66uPOuRv5UBJ0TklXkL7Qlh9yaK4ZDaaO8syqNNZ6
N6GLKubwr0ZQjQ==
-----END CERTIFICATE-----