Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
File:                     aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json)
Hash identifier:          ncUduzSKTaubaCLPt+7ITF0rq8axT/sGAaD4VxujG9w=
Subject key identifier:   19:14:F7:FD:46:D2:68:36:AA:AF:E4:D8:85:A0:9F:EE:99:DF:C4:0D
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Certificate issuer:       /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial:       01962F3D9E91CB6DDB0BD2F8B5043AEC81C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
Manifest number:          0BF4
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (hash: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=)
                          2: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: hunnf474l31tNaJ61i5LZ0e/1H7Ilg5rw7HauuKLY7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9e:91:cb:6d:db:0b:d2:f8:b5:04:3a:ec:81:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=1914f7fd46d26836aaafe4d885a09fee99dfc40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:ba:59:37:21:ff:54:b7:98:61:a2:e4:8f:
                    d6:46:91:6c:81:7c:9b:8c:c4:da:1e:90:9d:9d:0a:
                    76:a0:75:9d:d0:2b:bd:9f:da:54:4a:f6:8c:70:f8:
                    ee:91:dc:78:92:8f:a4:ca:38:64:e4:e4:ea:5c:c9:
                    5e:3b:20:01:69:4f:05:f5:87:1f:2a:11:45:03:4f:
                    49:ba:fe:f7:8d:26:90:0e:7f:b8:4a:24:71:7f:b8:
                    dc:43:2c:f6:97:4d:bd:d9:6f:ce:c1:b7:f0:f8:dd:
                    81:15:df:b5:d4:ef:52:16:52:94:13:e6:98:79:07:
                    92:8b:bd:b7:a9:69:a9:d6:b6:99:4e:24:97:10:af:
                    01:6a:65:98:e2:08:ec:62:03:4b:b8:9d:00:da:fc:
                    c7:dd:b3:9e:4b:f2:60:fb:45:6e:69:12:a9:c6:45:
                    ea:ca:ed:49:05:5e:5f:4b:27:cd:1e:e3:c7:bc:a6:
                    fd:50:64:8d:36:89:54:44:35:81:87:b1:5e:2c:65:
                    9b:38:76:82:9b:fb:53:4a:66:94:f3:3b:2e:46:64:
                    6d:13:a6:e5:e2:ef:22:6e:c8:e4:c0:13:d9:e6:dc:
                    c2:2c:44:b9:d8:f8:08:d9:7a:46:e9:1c:92:c7:36:
                    7c:df:a9:7c:8c:03:cd:00:49:53:ae:50:bf:ae:21:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:F7:FD:46:D2:68:36:AA:AF:E4:D8:85:A0:9F:EE:99:DF:C4:0D
            X509v3 Authority Key Identifier:
                keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:74:95:99:53:16:b4:0a:00:3f:97:06:a7:4a:64:78:c0:
         60:1c:7b:86:a6:2f:7a:aa:1f:ce:bb:56:fc:0e:30:d7:99:db:
         87:b3:d6:ac:c5:bf:78:76:23:87:97:29:c4:a3:29:ee:f0:b2:
         e8:5c:f2:1c:2f:44:93:03:99:ca:d2:cd:a9:73:4b:a6:9f:41:
         36:63:0b:a0:ac:73:ed:79:ac:30:39:55:c8:59:fe:b0:ed:b0:
         9c:f6:22:62:e1:5d:59:25:1e:96:88:d5:c3:36:0a:d7:82:5c:
         93:c9:ab:ad:15:49:89:d1:29:23:e2:d9:22:9b:8d:41:df:4e:
         86:6a:d1:47:58:05:62:ce:59:70:b2:76:c8:fc:9f:09:e1:af:
         90:d7:4e:d3:38:f6:e4:1a:64:82:d5:40:51:03:df:db:76:84:
         ce:95:1f:7f:1c:30:24:5e:7a:2d:17:9e:38:a9:de:bf:cb:0e:
         9c:64:82:c7:45:c8:90:0c:be:1c:83:bf:61:e3:13:91:fe:45:
         05:48:8e:ca:cc:8b:fb:91:e0:a5:81:f9:36:ca:41:8a:48:57:
         e0:5a:df:51:62:29:f7:5f:d3:6a:eb:66:b4:52:d5:30:ec:26:
         63:37:ec:ee:88:58:50:c9:bb:d9:a3:44:d8:d4:3e:7c:05:d6:
         2b:14:03:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZ6Ry23bC9L4tQQ67IHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGI3NWRjNjcyOTVkNTg2MWI3N2Q1MWEwMjExOGI2MGRj
NTU4NjgwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
EygxOTE0ZjdmZDQ2ZDI2ODM2YWFhZmU0ZDg4NWEwOWZlZTk5ZGZjNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY+6WTch/1S3mGGi5I/WRpFsgXyb
jMTaHpCdnQp2oHWd0Cu9n9pUSvaMcPjukdx4ko+kyjhk5OTqXMleOyABaU8F9Ycf
KhFFA09Juv73jSaQDn+4SiRxf7jcQyz2l0292W/Owbfw+N2BFd+11O9SFlKUE+aY
eQeSi723qWmp1raZTiSXEK8BamWY4gjsYgNLuJ0A2vzH3bOeS/Jg+0VuaRKpxkXq
yu1JBV5fSyfNHuPHvKb9UGSNNolURDWBh7FeLGWbOHaCm/tTSmaU8zsuRmRtE6bl
4u8ibsjkwBPZ5tzCLES52PgI2XpG6RySxzZ836l8jAPNAElTrlC/riEAiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkU9/1G0mg2qq/k2IWgn+6Z38QNMB8GA1UdIwQY
MBaAFGiLddxnKV1YYbd9UaAhGLYNxVhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YTQ1NjEtNTA5Mi00YzI4LTlkNWYt
NTE4ZWU3YmRlMWY4LzEvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YTQ1NjEtNTA5Mi00YzI4LTlkNWYtNTE4ZWU3YmRlMWY4
LzEvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcd0lZlT
FrQKAD+XBqdKZHjAYBx7hqYveqofzrtW/A4w15nbh7PWrMW/eHYjh5cpxKMp7vCy
6FzyHC9EkwOZytLNqXNLpp9BNmMLoKxz7XmsMDlVyFn+sO2wnPYiYuFdWSUelojV
wzYK14Jck8mrrRVJidEpI+LZIpuNQd9OhmrRR1gFYs5ZcLJ2yPyfCeGvkNdO0zj2
5BpkgtVAUQPf23aEzpUffxwwJF56LReeOKnev8sOnGSCx0XIkAy+HIO/YeMTkf5F
BUiOysyL+5HgpYH5NspBikhX4FrfUWIp91/TautmtFLVMOwmYzfs7ohYUMm72aNE
2NQ+fAXWKxQDpg==
-----END CERTIFICATE-----