Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File:                     Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier:          Pdoa9mAFd6Xswz/N9JvN4vgDETMXiyMkic8cvul5Z2k=
Subject key identifier:   F8:0B:1A:0F:B1:C1:F4:5E:C9:4D:80:CF:3A:9F:23:0A:7A:BE:25:F4
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer:       /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial:       01962F3D70E7E88E7D4C029E05BEA71A6921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number:          12B1
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
                          2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: CdLI+zdTB9uL6vhcobhhVONUG7ZoWYnujtx5sxKoOlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:70:e7:e8:8e:7d:4c:02:9e:05:be:a7:1a:69:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=f80b1a0fb1c1f45ec94d80cf3a9f230a7abe25f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:27:a2:d5:9d:ed:b1:fa:2a:62:0c:50:ce:
                    9e:bc:97:63:ba:a1:0c:f4:26:35:42:d5:f8:e7:ae:
                    ea:bd:b9:2a:f8:f1:05:68:66:11:55:15:96:04:34:
                    23:5e:de:3c:16:ac:68:2d:7e:a1:03:a6:fb:6e:42:
                    c1:48:3e:6e:28:eb:16:7b:96:30:ec:36:9c:37:0e:
                    d9:95:24:a1:d8:81:11:3e:cf:25:6e:e2:a7:58:df:
                    70:4f:5c:c0:72:d9:d9:23:14:44:55:3a:ce:2d:90:
                    97:20:47:57:6c:81:b0:64:c1:b9:ab:9c:b9:6d:8e:
                    d7:66:20:ff:02:d3:76:4a:91:36:f5:78:8b:ad:ce:
                    2b:ff:70:39:7c:41:73:cc:05:c2:95:dc:74:b2:b0:
                    92:d3:54:c9:2d:53:05:2c:f3:a6:55:84:5c:c2:a4:
                    45:3e:0a:41:88:e3:f3:3a:51:2f:f3:a1:ca:9b:3e:
                    16:18:a8:be:19:1d:e2:77:d2:93:f9:3d:bc:5a:c3:
                    73:de:26:83:81:9c:4e:9a:4d:3c:5c:1f:4b:4f:83:
                    44:97:b4:63:a3:37:8d:ce:1c:75:50:22:6f:57:58:
                    0e:df:05:14:43:26:25:9e:4c:5e:d6:7a:80:c3:36:
                    62:52:94:fa:ec:c1:4a:48:bb:89:fe:7d:2f:b1:07:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0B:1A:0F:B1:C1:F4:5E:C9:4D:80:CF:3A:9F:23:0A:7A:BE:25:F4
            X509v3 Authority Key Identifier:
                keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:57:45:9d:ef:27:03:63:9d:e5:bf:06:30:3a:06:84:ec:
         f0:a2:ac:62:3a:6d:f1:ae:42:3a:3b:41:66:01:64:93:80:ea:
         ef:c8:5c:6f:0e:00:99:da:5c:77:33:5c:b2:f4:c4:b2:04:02:
         c6:9f:a9:ca:87:b8:22:97:be:cb:27:b1:34:01:c0:c0:5e:94:
         88:a1:64:86:c4:76:66:4b:7a:2e:ac:ec:7f:74:58:01:b0:84:
         80:52:b5:5c:49:0a:3b:f5:73:51:dc:83:12:b3:71:4d:f6:68:
         21:71:b4:fb:90:19:b7:2b:51:fd:60:06:c2:36:01:13:42:7b:
         66:48:7a:cc:c2:4c:83:fb:49:0f:34:ba:6b:18:06:b0:f7:28:
         9e:44:97:7a:70:0b:5c:85:77:99:14:96:90:17:53:b6:6f:e8:
         83:ae:12:11:fd:77:fc:ff:59:49:7b:3e:07:29:97:39:01:ba:
         5c:8b:08:57:ac:7d:1a:3e:04:81:ca:c9:95:c1:be:3d:cf:15:
         df:8e:87:56:15:47:73:92:53:e8:a5:17:24:b3:0a:26:0c:53:
         72:e7:1b:de:ec:c7:36:6f:25:81:11:4f:63:7d:ec:ff:88:f5:
         2a:05:71:69:11:e5:f8:27:36:bf:48:7c:55:c0:3b:e5:96:4c:
         fb:3b:ce:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXDn6I59TAKeBb6nGmkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYmQ3ZGRjZTRmZDcwM2JjM2ZiY2FmYzFiNWQ1NzdlMWE3
NTc1NzUwHhcNMjUwNDEzMTMwMTE3WhcNMjUwNDE0MTMwMTE3WjAzMTEwLwYDVQQD
EyhmODBiMWEwZmIxYzFmNDVlYzk0ZDgwY2YzYTlmMjMwYTdhYmUyNWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws8notWd7bH6KmIMUM6evJdjuqEM
9CY1QtX4567qvbkq+PEFaGYRVRWWBDQjXt48FqxoLX6hA6b7bkLBSD5uKOsWe5Yw
7DacNw7ZlSSh2IERPs8lbuKnWN9wT1zActnZIxREVTrOLZCXIEdXbIGwZMG5q5y5
bY7XZiD/AtN2SpE29XiLrc4r/3A5fEFzzAXCldx0srCS01TJLVMFLPOmVYRcwqRF
PgpBiOPzOlEv86HKmz4WGKi+GR3id9KT+T28WsNz3iaDgZxOmk08XB9LT4NEl7Rj
ozeNzhx1UCJvV1gO3wUUQyYlnkxe1nqAwzZiUpT67MFKSLuJ/n0vsQcv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgLGg+xwfReyU2AzzqfIwp6viX0MB8GA1UdIwQY
MBaAFAq9fdzk/XA7w/vK/BtdV34adXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDIt
N2QzNDhjY2ExZDIwLzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDItN2QzNDhjY2ExZDIw
LzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiF5XRZ3v
JwNjneW/BjA6BoTs8KKsYjpt8a5COjtBZgFkk4Dq78hcbw4AmdpcdzNcsvTEsgQC
xp+pyoe4Ipe+yyexNAHAwF6UiKFkhsR2Zkt6Lqzsf3RYAbCEgFK1XEkKO/VzUdyD
ErNxTfZoIXG0+5AZtytR/WAGwjYBE0J7Zkh6zMJMg/tJDzS6axgGsPconkSXenAL
XIV3mRSWkBdTtm/og64SEf13/P9ZSXs+BymXOQG6XIsIV6x9Gj4EgcrJlcG+Pc8V
346HVhVHc5JT6KUXJLMKJgxTcucb3uzHNm8lgRFPY33s/4j1KgVxaRHl+Cc2v0h8
VcA75ZZM+zvO0A==
-----END CERTIFICATE-----