Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File:                     AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier:          DUCwkbuyJVYsuZm6aatNmuR391veJ22yFnNh4Q1Z17M=
Subject key identifier:   B8:02:1F:25:C8:0E:E2:00:15:0B:BA:B6:07:C7:6F:61:8C:30:A1:93
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer:       /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial:       01962F072071EA1DD379DFF4B14D6B50DA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number:          02A2
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: uz/sS0nVJMmhrSkANGSxABXYSwiR2BtDVp0MVkFYWbs=)
                          2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:20:71:ea:1d:d3:79:df:f4:b1:4d:6b:50:da:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=b8021f25c80ee200150bbab607c76f618c30a193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:6d:e0:53:5b:a1:73:b6:a7:5e:1d:6e:3e:
                    7d:ad:ed:11:54:97:af:d7:5a:9f:28:01:86:fb:cc:
                    bc:59:be:87:37:14:14:6e:f2:2a:f8:c1:e4:7e:72:
                    7e:60:2c:af:f2:b9:19:3a:78:bc:58:33:fe:b8:01:
                    70:23:a7:d2:77:dc:e1:16:81:b2:0b:d8:45:99:db:
                    c8:9b:81:59:1a:bb:d5:3d:76:4d:d5:28:a1:f2:b3:
                    b5:79:19:eb:73:69:2f:c6:ae:b1:ad:32:f9:fc:fb:
                    d8:ee:2b:53:3d:01:3f:13:eb:97:0b:bb:84:53:ad:
                    1a:ed:97:b0:0b:8b:c1:f3:02:9d:fe:e9:ef:c7:05:
                    b3:a7:e8:e3:c7:82:17:f2:ca:0b:84:0e:71:12:a0:
                    55:d2:65:67:e0:2f:72:a9:bf:df:79:fc:18:7a:3c:
                    a5:95:e4:98:68:e8:db:3e:e7:ce:7c:6a:5c:ef:32:
                    c8:0f:29:89:68:85:d9:55:e5:55:f2:09:10:bb:d0:
                    60:7e:d0:46:49:c6:0f:bc:e9:48:15:cd:b5:8b:13:
                    0c:03:1f:27:b7:cf:99:bb:df:9e:27:b8:de:09:50:
                    57:ed:98:b2:aa:24:0a:f1:c8:9a:3c:92:67:5c:a7:
                    b4:e8:c9:08:2a:1d:51:09:22:19:7d:6f:d2:6d:27:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:1F:25:C8:0E:E2:00:15:0B:BA:B6:07:C7:6F:61:8C:30:A1:93
            X509v3 Authority Key Identifier:
                keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:ab:ad:69:96:66:40:95:33:f9:34:86:70:bd:8e:e2:07:
         fe:c4:1d:a9:3d:97:a7:bb:47:8e:35:4f:e5:c9:55:32:62:7a:
         71:30:92:8f:97:51:06:a5:53:65:b6:7b:7f:fb:cb:a9:a8:9a:
         2f:fa:a7:55:23:04:f2:ec:83:33:20:13:f8:2b:38:6d:96:f4:
         96:fb:36:f5:94:06:18:c4:e5:37:e4:e5:ab:f1:5a:2e:74:92:
         fd:82:52:94:c6:a9:07:b3:4c:1c:89:ff:b8:e0:5a:ea:12:b0:
         a8:e3:cd:b3:51:df:6e:ea:22:5a:fb:03:b0:25:c5:64:28:f9:
         64:b5:46:13:ce:59:79:77:40:c0:46:99:39:12:05:16:ef:55:
         41:cd:32:88:7b:cf:04:18:72:3c:17:67:70:dc:05:35:31:f3:
         9f:45:41:56:d0:26:86:1b:58:d4:0b:42:a6:19:52:61:a8:df:
         fd:83:69:a2:39:6b:82:3c:2c:d6:8d:11:4d:ca:32:e2:11:fc:
         94:1b:22:13:58:e2:d7:81:06:61:9b:52:66:8d:c5:ee:1e:5a:
         36:55:4f:bb:59:ef:9b:49:3f:f3:5c:25:d3:a8:5d:9d:ad:7d:
         b5:da:4d:6c:58:7d:e1:af:b8:73:1c:17:14:d4:71:5d:39:ab:
         cf:67:c2:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByBx6h3Ted/0sU1rUNo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDQ5NjA0NzM3Yzc4YmQyNGRiYjI1ZWIzMzZmNGE0MTZl
NjQ1ZjYwHhcNMjUwNDEzMTIwMTU4WhcNMjUwNDE0MTIwMTU4WjAzMTEwLwYDVQQD
EyhiODAyMWYyNWM4MGVlMjAwMTUwYmJhYjYwN2M3NmY2MThjMzBhMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoxt4FNboXO2p14dbj59re0RVJev
11qfKAGG+8y8Wb6HNxQUbvIq+MHkfnJ+YCyv8rkZOni8WDP+uAFwI6fSd9zhFoGy
C9hFmdvIm4FZGrvVPXZN1Sih8rO1eRnrc2kvxq6xrTL5/PvY7itTPQE/E+uXC7uE
U60a7ZewC4vB8wKd/unvxwWzp+jjx4IX8soLhA5xEqBV0mVn4C9yqb/fefwYejyl
leSYaOjbPufOfGpc7zLIDymJaIXZVeVV8gkQu9BgftBGScYPvOlIFc21ixMMAx8n
t8+Zu9+eJ7jeCVBX7ZiyqiQK8ciaPJJnXKe06MkIKh1RCSIZfW/SbSfDOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgCHyXIDuIAFQu6tgfHb2GMMKGTMB8GA1UdIwQY
MBaAFAMElgRzfHi9JNuyXrM29KQW5kX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEt
MTY5ZTUzN2E4OTBjLzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEtMTY5ZTUzN2E4OTBj
LzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKyrrWmW
ZkCVM/k0hnC9juIH/sQdqT2Xp7tHjjVP5clVMmJ6cTCSj5dRBqVTZbZ7f/vLqaia
L/qnVSME8uyDMyAT+Cs4bZb0lvs29ZQGGMTlN+Tlq/FaLnSS/YJSlMapB7NMHIn/
uOBa6hKwqOPNs1HfbuoiWvsDsCXFZCj5ZLVGE85ZeXdAwEaZORIFFu9VQc0yiHvP
BBhyPBdncNwFNTHzn0VBVtAmhhtY1AtCphlSYajf/YNpojlrgjws1o0RTcoy4hH8
lBsiE1ji14EGYZtSZo3F7h5aNlVPu1nvm0k/81wl06hdna19tdpNbFh94a+4cxwX
FNRxXTmrz2fCOg==
-----END CERTIFICATE-----