Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier:          JM0x6cWu3q4PHYzXJPK19So5B7ORODSRDGz8Y4MkEEE=
Subject key identifier:   81:82:D2:9D:6B:2B:44:3D:5F:EF:D8:0E:A7:B1:E6:D6:73:E3:9D:B9
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       01962E618396F7C0709DCA6AB3C4263BC3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number:          0F1B
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
                          2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
                          3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
                          4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: j6fHf9iJHH5mj06s9up5kBjMYMRWo6rDw1PXMoxyjsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:83:96:f7:c0:70:9d:ca:6a:b3:c4:26:3b:c3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=8182d29d6b2b443d5fefd80ea7b1e6d673e39db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:ea:d4:6e:f2:ca:c6:2a:1f:67:58:b5:2e:
                    90:13:ea:43:f2:51:6c:ec:19:56:a2:12:b3:84:dc:
                    80:05:29:0c:0f:7b:be:4c:21:79:89:b8:c7:89:60:
                    95:54:8b:50:41:a1:42:d8:b5:df:c6:e0:ea:29:1c:
                    b4:af:b6:64:cf:0a:53:21:0f:2e:01:3e:4b:78:5c:
                    96:13:a5:a9:da:1b:1b:25:bf:d2:cd:5a:41:cf:c3:
                    a1:41:98:be:90:ac:62:f6:d5:7e:aa:20:c3:a5:0b:
                    69:5d:58:fc:2e:02:9c:95:25:eb:ca:a7:f3:51:73:
                    73:44:0b:13:3b:dd:68:a1:e1:f5:3b:9f:de:24:dd:
                    80:6c:30:58:38:e4:58:ab:95:51:42:71:98:2f:4c:
                    79:ae:57:4a:f0:53:3f:ad:9a:44:88:09:66:22:59:
                    72:73:45:6e:b7:73:ad:11:4a:7b:5b:14:b9:5a:c5:
                    e2:6f:fa:5a:9b:17:79:f6:f6:24:9e:6d:15:88:2e:
                    d8:68:d9:c1:b6:e2:58:e0:63:08:98:b6:16:ea:dc:
                    dc:cc:39:ff:81:51:03:a8:16:48:6e:88:c7:0f:ab:
                    3d:c2:89:d5:3e:da:60:9e:82:d5:cc:8a:ae:24:17:
                    27:dc:d0:c3:6e:5d:02:2c:92:4a:d3:e5:51:88:6d:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:82:D2:9D:6B:2B:44:3D:5F:EF:D8:0E:A7:B1:E6:D6:73:E3:9D:B9
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:65:b2:bd:ab:76:51:11:f5:b8:26:b9:9a:4a:95:83:6e:
         73:aa:cb:10:58:a8:6f:2b:e8:e1:80:ff:c9:eb:7f:55:64:30:
         5e:56:17:e3:05:eb:7e:2d:c2:4a:a0:e4:70:9f:47:c4:53:03:
         b7:40:00:3e:80:65:3f:ab:31:6e:65:d4:d2:d2:aa:1a:dc:7c:
         3a:2e:61:97:bb:82:87:52:78:04:f5:37:a6:50:67:5b:99:f4:
         b3:8f:43:9b:7e:5e:37:56:3b:1a:eb:c1:a4:b5:9e:3f:d4:d8:
         df:d9:74:f1:c9:b3:8a:eb:12:d1:fb:18:e3:64:b9:68:0d:d7:
         2f:ba:13:57:00:e9:3e:76:ad:5b:13:d3:01:ca:21:15:6e:07:
         58:af:87:7c:b2:4d:80:5f:2f:73:3f:8d:35:b2:ee:41:27:2f:
         b6:da:72:93:ef:8e:8d:c3:9f:cd:09:a8:f7:45:e1:79:27:16:
         64:ae:ba:8a:d4:3d:9f:74:5f:82:fe:3a:74:49:0d:ac:54:5f:
         9d:dd:7c:fd:a6:0f:59:5d:77:72:8a:c4:25:89:bf:98:c0:6e:
         44:88:da:89:dc:c9:b6:48:1a:92:35:b9:ff:0e:52:a5:a4:af:
         72:b1:9f:45:3e:8c:11:dc:90:e7:4f:bb:15:fa:6d:25:91:c3:
         49:8c:0f:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYOW98Bwncpqs8QmO8PZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjUwNDEzMDkwMTA0WhcNMjUwNDE0MDkwMTA0WjAzMTEwLwYDVQQD
Eyg4MTgyZDI5ZDZiMmI0NDNkNWZlZmQ4MGVhN2IxZTZkNjczZTM5ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh7q1G7yysYqH2dYtS6QE+pD8lFs
7BlWohKzhNyABSkMD3u+TCF5ibjHiWCVVItQQaFC2LXfxuDqKRy0r7ZkzwpTIQ8u
AT5LeFyWE6Wp2hsbJb/SzVpBz8OhQZi+kKxi9tV+qiDDpQtpXVj8LgKclSXryqfz
UXNzRAsTO91ooeH1O5/eJN2AbDBYOORYq5VRQnGYL0x5rldK8FM/rZpEiAlmIlly
c0Vut3OtEUp7WxS5WsXib/pamxd59vYknm0ViC7YaNnBtuJY4GMImLYW6tzczDn/
gVEDqBZIbojHD6s9wonVPtpgnoLVzIquJBcn3NDDbl0CLJJK0+VRiG1mqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGC0p1rK0Q9X+/YDqex5tZz4525MB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHtlsr2r
dlER9bgmuZpKlYNuc6rLEFiobyvo4YD/yet/VWQwXlYX4wXrfi3CSqDkcJ9HxFMD
t0AAPoBlP6sxbmXU0tKqGtx8Oi5hl7uCh1J4BPU3plBnW5n0s49Dm35eN1Y7GuvB
pLWeP9TY39l08cmziusS0fsY42S5aA3XL7oTVwDpPnatWxPTAcohFW4HWK+HfLJN
gF8vcz+NNbLuQScvttpyk++OjcOfzQmo90XheScWZK66itQ9n3Rfgv46dEkNrFRf
nd18/aYPWV13corEJYm/mMBuRIjaidzJtkgakjW5/w5SpaSvcrGfRT6MEdyQ50+7
FfptJZHDSYwPWg==
-----END CERTIFICATE-----