Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File:                     STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier:          BFmqEXI0pH5W+DB9nqxgf8621OqC3RV0wToWOOecWpM=
Subject key identifier:   0B:5C:E2:A3:18:2C:65:B8:BC:5E:E3:02:70:EB:00:74:70:1B:D3:EC
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer:       /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial:       01962FAB94C48E66FAA75BEC41D55529379D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number:          0312
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: Cc19cgugQdGGzWmKNe0-AV5tNOA.roa (hash: AdB3qWr4T5q3889qZQZVXkGWaD9whbwxZRKtQuF+C18=)
                          2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
                          3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: T2UHQ3hCJA4/bUz1Xusgqj/2ZOTa2MUlCm9ZKdZEPhw=)
                          4: Y7PFR1AcfUDa5WoNJCBqS3QlUqs.roa (hash: Wv6ekzOe8NLiKCI6n/SgwcD6sKF1kP4pqcOdTIjNnr4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:c4:8e:66:fa:a7:5b:ec:41:d5:55:29:37:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=0b5ce2a3182c65b8bc5ee30270eb0074701bd3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:79:88:39:01:0e:85:57:5a:bd:f3:73:70:
                    2d:06:8c:19:c2:11:66:f1:50:1b:b0:fc:cd:8b:d5:
                    35:89:94:b0:17:03:53:45:cc:af:44:03:20:e4:fb:
                    30:d6:a9:7d:88:dd:90:0c:9a:61:78:37:c6:02:41:
                    24:da:56:20:92:22:f4:36:0a:7e:6b:fe:b2:c0:01:
                    8b:98:a7:18:94:cf:12:36:5a:d6:a8:93:4e:1e:76:
                    b3:58:d9:6e:e8:5d:5e:d3:7d:f8:db:27:9b:ae:9d:
                    1a:7d:91:09:74:f5:67:d5:95:fb:7a:cd:1d:b9:5c:
                    51:26:64:14:b7:03:67:40:4a:56:a8:c3:15:a0:a9:
                    07:62:e9:fb:53:79:a2:99:b0:68:be:3a:a9:bd:a8:
                    f1:06:14:3f:18:95:e6:4a:b3:4f:c1:60:e1:e7:1b:
                    19:64:c1:87:74:62:e9:e5:b8:94:3a:7d:a0:93:cf:
                    85:d3:16:d2:09:09:b1:5e:f3:28:2b:d4:aa:80:e3:
                    fa:95:93:54:6b:cf:12:ae:97:ad:63:40:ee:2f:cc:
                    09:9d:2c:ea:b6:63:87:c0:1b:fc:b2:00:6b:a3:95:
                    6d:02:e1:a3:cf:24:e4:d4:6c:e9:e6:b1:32:86:11:
                    58:02:80:c2:92:45:15:32:93:72:91:ce:8b:b2:82:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:E2:A3:18:2C:65:B8:BC:5E:E3:02:70:EB:00:74:70:1B:D3:EC
            X509v3 Authority Key Identifier:
                keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:d3:cd:81:4d:3d:45:b7:ed:40:a2:ec:4a:18:64:a8:b1:
         2c:0e:47:52:b7:27:96:2a:9f:a9:14:d1:00:29:a8:e5:6d:2a:
         58:ba:f6:ae:12:51:b1:ec:ce:b5:6c:28:b2:b8:5a:7a:16:af:
         cb:8b:ce:f4:7c:0f:2e:a7:cb:34:69:af:5f:3d:ef:f2:6b:ba:
         7d:98:76:70:3c:b2:0b:52:4d:2c:16:97:4e:21:5e:0a:6b:f3:
         8b:64:2a:36:1e:7f:31:7d:08:c8:9b:15:f4:1f:e1:d7:4f:65:
         2b:56:ce:81:af:ad:2b:2a:fa:f1:43:f4:38:0a:8d:90:27:24:
         cc:27:c9:fa:5c:3d:dc:a5:bf:d8:ba:be:4d:8c:0a:dc:29:9d:
         1f:43:53:f3:d6:39:76:cd:48:dd:07:d8:11:bb:d0:83:7f:9e:
         03:96:29:c9:b2:54:26:bc:8e:a0:88:37:1f:a8:f6:64:17:59:
         d3:1a:e0:10:dc:ab:54:14:3c:d3:47:7e:d7:b2:55:ff:6b:fa:
         0d:55:e9:4f:89:00:13:13:fc:94:bd:0e:4c:17:a7:98:36:56:
         2a:00:0b:eb:6c:80:86:a9:2c:16:a0:46:e9:f4:e9:9e:45:de:
         5c:b3:24:ec:ee:38:06:db:ae:65:39:e1:3d:d9:17:18:51:da:
         d1:08:bc:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5TEjmb6p1vsQdVVKTedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj
YTMzZTgwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EygwYjVjZTJhMzE4MmM2NWI4YmM1ZWUzMDI3MGViMDA3NDcwMWJkM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZ5iDkBDoVXWr3zc3AtBowZwhFm
8VAbsPzNi9U1iZSwFwNTRcyvRAMg5Psw1ql9iN2QDJpheDfGAkEk2lYgkiL0Ngp+
a/6ywAGLmKcYlM8SNlrWqJNOHnazWNlu6F1e03342yebrp0afZEJdPVn1ZX7es0d
uVxRJmQUtwNnQEpWqMMVoKkHYun7U3mimbBovjqpvajxBhQ/GJXmSrNPwWDh5xsZ
ZMGHdGLp5biUOn2gk8+F0xbSCQmxXvMoK9SqgOP6lZNUa88SrpetY0DuL8wJnSzq
tmOHwBv8sgBro5VtAuGjzyTk1Gzp5rEyhhFYAoDCkkUVMpNykc6LsoK0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtc4qMYLGW4vF7jAnDrAHRwG9PsMB8GA1UdIwQY
MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt
Njg5YmE0ZDMzYzRiLzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi
LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoLTzYFN
PUW37UCi7EoYZKixLA5HUrcnliqfqRTRACmo5W0qWLr2rhJRsezOtWwosrhaehav
y4vO9HwPLqfLNGmvXz3v8mu6fZh2cDyyC1JNLBaXTiFeCmvzi2QqNh5/MX0IyJsV
9B/h109lK1bOga+tKyr68UP0OAqNkCckzCfJ+lw93KW/2Lq+TYwK3CmdH0NT89Y5
ds1I3QfYEbvQg3+eA5YpybJUJryOoIg3H6j2ZBdZ0xrgENyrVBQ800d+17JV/2v6
DVXpT4kAExP8lL0OTBenmDZWKgAL62yAhqksFqBG6fTpnkXeXLMk7O44BtuuZTnh
PdkXGFHa0Qi8xA==
-----END CERTIFICATE-----