Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File:                     RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier:          U0TYU7mFrD5uKOqHNmIqIdOK6agqO6r9hdQLcgZ2KcM=
Subject key identifier:   18:E7:98:FA:B6:6D:4D:51:73:FE:04:4D:37:DE:64:6F:54:AD:07:57
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer:       /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial:       01962F74A614BB6355788BF00EBF566FE6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
                          2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: ptH6ah6h2QERxaI9gIBEXsOUCbPD2bFbbfAc9imIg0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a6:14:bb:63:55:78:8b:f0:0e:bf:56:6f:e6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=18e798fab66d4d5173fe044d37de646f54ad0757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:ed:c6:ba:8d:99:c7:3a:62:dd:49:1e:da:
                    f8:58:d8:3a:35:77:8c:42:b1:ec:60:85:bf:4b:d0:
                    5c:cf:7e:08:e4:93:61:b8:32:50:cf:d9:9d:56:96:
                    23:0c:47:11:50:2a:16:61:5c:3a:b3:39:47:51:04:
                    59:29:83:de:ef:57:a0:ef:ec:34:49:0c:a5:69:06:
                    24:43:03:26:d9:e5:d9:36:ee:85:5a:19:f1:4f:91:
                    28:28:f0:53:c6:f4:84:f1:21:81:d7:c5:06:71:34:
                    51:8b:4e:9d:3a:ef:7a:e8:fe:12:2d:86:da:5a:84:
                    f1:98:3a:79:70:74:dc:3b:fb:61:52:ef:2b:f2:ec:
                    dd:63:4c:fd:b1:6e:bb:24:e7:5a:64:4a:10:ab:24:
                    79:47:d7:0b:74:a5:33:64:0b:8d:8e:8d:64:09:dd:
                    d2:d6:42:19:51:f3:0f:5c:79:e2:e4:c9:66:a8:9d:
                    d9:bf:ff:13:64:e7:a4:30:23:b1:eb:64:05:87:57:
                    12:a9:78:de:63:08:18:e1:a5:46:e6:e4:02:ec:3c:
                    08:2e:e0:ab:e5:bf:77:23:df:50:4b:ca:b0:b0:ae:
                    de:b6:ec:f0:a2:e7:09:d3:b8:b7:62:9a:fa:02:11:
                    77:98:45:10:e5:9e:48:5b:67:3c:18:36:86:37:51:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:98:FA:B6:6D:4D:51:73:FE:04:4D:37:DE:64:6F:54:AD:07:57
            X509v3 Authority Key Identifier:
                keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6b:44:6c:5c:57:1e:09:8d:5d:71:36:5c:e5:d5:95:f7:6b:
         97:cb:46:ce:be:b7:52:f8:7c:90:e6:26:f5:52:9b:d4:cc:de:
         25:cf:61:76:ed:88:93:06:75:74:11:d2:0c:79:f8:ee:0c:a6:
         63:02:53:b6:b4:c3:29:c2:5b:89:40:d4:9f:86:65:d1:bc:5b:
         b4:d2:2c:e7:26:69:b2:08:c2:f0:f0:16:c8:99:20:f4:5c:e7:
         d6:cd:d6:b3:ae:e2:f4:33:13:bc:2a:cb:6b:1b:e4:9a:62:89:
         3c:79:53:8e:2a:33:7a:de:f8:c3:da:5b:5f:26:f5:ca:45:b5:
         80:a0:55:72:92:89:8a:6c:c3:c2:aa:51:ae:9c:05:23:46:8c:
         c1:58:55:88:31:9c:8a:56:0a:66:54:4e:61:f7:44:d5:75:67:
         c0:e0:ba:61:7b:03:6c:2b:0c:5b:5b:f4:23:35:87:d0:3a:21:
         e1:32:6f:a2:ca:42:78:cf:ba:52:c8:ce:fb:a8:02:c9:84:e3:
         01:5c:f5:82:43:d9:13:94:af:98:e0:2c:a0:ac:54:e9:63:b2:
         04:19:96:3c:04:fe:73:cb:b2:06:95:ff:4d:7c:f9:f5:ee:21:
         b3:6c:53:31:38:ad:d2:cb:a8:67:31:26:4b:3e:7d:cf:31:e3:
         55:df:98:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKYUu2NVeIvwDr9Wb+aoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjUwNDEzMTQwMTM1WhcNMjUwNDE0MTQwMTM1WjAzMTEwLwYDVQQD
EygxOGU3OThmYWI2NmQ0ZDUxNzNmZTA0NGQzN2RlNjQ2ZjU0YWQwNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc/txrqNmcc6Yt1JHtr4WNg6NXeM
QrHsYIW/S9Bcz34I5JNhuDJQz9mdVpYjDEcRUCoWYVw6szlHUQRZKYPe71eg7+w0
SQylaQYkQwMm2eXZNu6FWhnxT5EoKPBTxvSE8SGB18UGcTRRi06dOu966P4SLYba
WoTxmDp5cHTcO/thUu8r8uzdY0z9sW67JOdaZEoQqyR5R9cLdKUzZAuNjo1kCd3S
1kIZUfMPXHni5MlmqJ3Zv/8TZOekMCOx62QFh1cSqXjeYwgY4aVG5uQC7DwILuCr
5b93I99QS8qwsK7etuzwoucJ07i3Ypr6AhF3mEUQ5Z5IW2c8GDaGN1EHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjnmPq2bU1Rc/4ETTfeZG9UrQdXMB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmtEbFxX
HgmNXXE2XOXVlfdrl8tGzr63Uvh8kOYm9VKb1MzeJc9hdu2IkwZ1dBHSDHn47gym
YwJTtrTDKcJbiUDUn4Zl0bxbtNIs5yZpsgjC8PAWyJkg9Fzn1s3Ws67i9DMTvCrL
axvkmmKJPHlTjiozet74w9pbXyb1ykW1gKBVcpKJimzDwqpRrpwFI0aMwVhViDGc
ilYKZlROYfdE1XVnwOC6YXsDbCsMW1v0IzWH0Doh4TJvospCeM+6UsjO+6gCyYTj
AVz1gkPZE5SvmOAsoKxU6WOyBBmWPAT+c8uyBpX/TXz59e4hs2xTMTit0suoZzEm
Sz59zzHjVd+YDg==
-----END CERTIFICATE-----