Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File:                     ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier:          ZfPm7WVAuFvfnoIRcCFYUJz7FRa6+Hh96dibgXAQdTU=
Subject key identifier:   B3:73:3F:52:9B:F1:EE:7C:56:35:62:6A:97:6C:0B:1B:4E:71:93:CD
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer:       /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial:       01962DF44FAB85F89DD812C37F417C171577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
                          2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: 6lGkbPKKaD0ORoIAW8yBeg/CWq9zdqafyNB2D1eBii8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4f:ab:85:f8:9d:d8:12:c3:7f:41:7c:17:15:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=b3733f529bf1ee7c5635626a976c0b1b4e7193cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:a4:a9:c5:31:b2:de:6c:41:c1:33:9d:3a:
                    bd:0d:18:b6:de:a3:58:1d:eb:f5:24:3b:b7:dd:ae:
                    3a:06:bb:a5:70:40:a2:2e:5a:57:65:23:d4:7d:29:
                    cb:8f:21:25:3d:88:d7:e3:2b:58:76:7b:84:d9:c8:
                    9e:a9:66:22:c3:dd:0c:2c:3c:51:37:79:a4:c1:49:
                    d0:aa:91:aa:2d:59:1f:24:74:f8:a8:a7:53:2a:4a:
                    5e:d4:60:ef:b7:35:0c:83:ea:a4:f7:54:3d:b9:6d:
                    fa:bb:af:11:0c:e9:79:1b:6a:c0:e7:b9:15:59:6c:
                    94:af:93:98:44:c7:7b:88:61:30:ce:00:88:ab:fe:
                    18:55:9a:09:c8:56:0f:98:a3:f5:22:00:60:6b:16:
                    f9:a7:31:ef:0e:83:91:9a:c1:4a:be:08:44:f0:5e:
                    87:97:ce:f2:2e:16:eb:de:b9:32:f5:09:1d:94:1a:
                    68:be:7f:6b:53:0b:0f:5f:da:51:c6:0c:cf:b5:b1:
                    c4:9d:a2:62:94:dd:ad:06:a3:93:dc:f1:a2:0c:c5:
                    71:c2:da:5a:fe:7a:57:c5:68:44:d5:ba:27:0f:48:
                    89:19:2e:10:08:d9:9e:82:1d:2f:c0:b7:4d:c3:60:
                    dd:79:98:7b:cd:11:6d:1e:2c:c0:10:4a:ce:07:d4:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:3F:52:9B:F1:EE:7C:56:35:62:6A:97:6C:0B:1B:4E:71:93:CD
            X509v3 Authority Key Identifier:
                keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:d3:21:41:af:3e:c4:70:5b:99:2a:44:ec:3f:0d:be:c8:
         3b:82:84:bb:d2:7a:bb:f4:1f:b2:9b:78:e7:ff:57:7b:25:22:
         68:a0:05:cf:e5:9c:1a:93:1d:6b:ea:ee:4a:fa:60:19:fe:50:
         ef:b9:4e:9f:5c:c2:8c:a6:9a:7b:64:2e:4a:cc:c0:bd:2a:3d:
         4d:4f:b0:ec:56:d9:f9:3c:c5:a5:2c:cb:9b:6e:21:dd:db:4d:
         9f:eb:eb:52:6a:3c:f8:f4:38:79:c2:d4:86:83:2f:bf:9e:dd:
         45:0a:08:14:0b:66:e0:3b:94:21:a0:65:1e:2a:9a:38:71:f6:
         1d:5b:95:33:25:b1:4d:87:60:15:15:7c:4a:0c:78:98:03:6b:
         08:e8:ad:3c:94:12:13:96:82:c9:ae:29:1a:d2:c0:06:85:e7:
         f5:d3:26:93:b7:85:79:0c:31:19:9a:d5:49:54:34:9f:56:75:
         85:83:31:02:86:5c:dd:e9:a1:51:d3:5f:88:08:4b:2a:e1:c2:
         8d:8f:b9:be:fc:1e:89:63:33:9a:84:b0:2b:27:ca:65:eb:8c:
         c2:ca:1e:2e:e2:76:1a:3c:67:d7:9f:be:b0:0e:ba:96:fa:ee:
         f7:3f:c5:16:b7:dc:c8:b0:82:22:64:5a:a2:0d:29:64:fc:89:
         b2:47:2a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9E+rhfid2BLDf0F8FxV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGQ2NjZhNTRkNWUxYmMzNTVjMGQ3MjUwM2E0NThmYzBl
OGUwNmMwHhcNMjUwNDEzMDcwMTQ3WhcNMjUwNDE0MDcwMTQ3WjAzMTEwLwYDVQQD
EyhiMzczM2Y1MjliZjFlZTdjNTYzNTYyNmE5NzZjMGIxYjRlNzE5M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tKkqcUxst5sQcEznTq9DRi23qNY
Hev1JDu33a46BrulcECiLlpXZSPUfSnLjyElPYjX4ytYdnuE2cieqWYiw90MLDxR
N3mkwUnQqpGqLVkfJHT4qKdTKkpe1GDvtzUMg+qk91Q9uW36u68RDOl5G2rA57kV
WWyUr5OYRMd7iGEwzgCIq/4YVZoJyFYPmKP1IgBgaxb5pzHvDoORmsFKvghE8F6H
l87yLhbr3rky9QkdlBpovn9rUwsPX9pRxgzPtbHEnaJilN2tBqOT3PGiDMVxwtpa
/npXxWhE1bonD0iJGS4QCNmegh0vwLdNw2DdeZh7zRFtHizAEErOB9S3SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNzP1Kb8e58VjViapdsCxtOcZPNMB8GA1UdIwQY
MBaAFGoNZmpU1eG8NVwNclA6RY/A6OBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4Mjct
YTgyYWQ1NGRlZmJjLzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4MjctYTgyYWQ1NGRlZmJj
LzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuLTIUGv
PsRwW5kqROw/Db7IO4KEu9J6u/Qfspt45/9XeyUiaKAFz+WcGpMda+ruSvpgGf5Q
77lOn1zCjKaae2QuSszAvSo9TU+w7FbZ+TzFpSzLm24h3dtNn+vrUmo8+PQ4ecLU
hoMvv57dRQoIFAtm4DuUIaBlHiqaOHH2HVuVMyWxTYdgFRV8Sgx4mANrCOitPJQS
E5aCya4pGtLABoXn9dMmk7eFeQwxGZrVSVQ0n1Z1hYMxAoZc3emhUdNfiAhLKuHC
jY+5vvweiWMzmoSwKyfKZeuMwsoeLuJ2Gjxn15++sA66lvru9z/FFrfcyLCCImRa
og0pZPyJskcqrA==
-----END CERTIFICATE-----