Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          XRLc5rsLUVMXx3Jly+z6b+fGVRH6tbdQ8WyMLgttOq8=
Subject key identifier:   94:47:52:DA:C2:31:0D:5C:3B:5C:E1:8D:0B:41:20:48:9F:07:36:F6
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       01962DF42161E473F7D155EACAF0BD188AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          13B0
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: aaHknlUjlDjUZYRkpuYLWcxtqIL13f0Fc3M0vA8l+uE=)
                          2: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
                          3: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:61:e4:73:f7:d1:55:ea:ca:f0:bd:18:8a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=944752dac2310d5c3b5ce18d0b4120489f0736f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a5:66:e8:d6:24:9a:32:64:d7:e5:df:e5:00:
                    c8:62:86:5e:59:3b:a7:ad:84:f1:a7:3e:e2:f4:dd:
                    2a:71:cf:80:b5:4a:f3:aa:3b:5a:f8:67:ef:64:94:
                    70:dd:22:ec:2b:a8:40:3d:19:6d:c4:30:74:3a:39:
                    5a:45:0b:b4:07:df:8e:1b:0f:e0:b4:b2:09:d4:3a:
                    8c:1d:c1:78:12:11:9e:09:01:71:9d:57:7e:8b:f6:
                    e8:88:dd:63:99:bb:12:76:13:fa:47:8b:ed:0f:95:
                    f2:34:69:c3:27:e8:14:3e:77:48:1f:08:c1:ee:fb:
                    39:fe:22:02:61:6f:5e:f8:64:21:aa:2e:33:50:c6:
                    80:7e:2f:c1:3d:bc:f4:3b:c2:47:a2:9c:4a:89:5c:
                    97:f8:82:0a:48:2b:61:15:4e:12:e3:74:e3:58:72:
                    ab:59:ad:84:1e:67:76:c8:cc:5f:78:f6:13:36:95:
                    73:fb:38:9d:58:ce:36:5a:27:89:0f:08:03:e3:7d:
                    60:28:18:db:8e:ed:9b:b8:b8:80:68:62:76:8b:ae:
                    d4:30:f7:17:47:52:20:6a:30:0e:3d:1c:26:5e:8c:
                    8b:1d:10:70:bf:0a:7e:f0:de:f4:60:47:c7:c4:51:
                    94:32:34:26:08:8a:a4:cc:df:d7:de:03:c7:14:11:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:47:52:DA:C2:31:0D:5C:3B:5C:E1:8D:0B:41:20:48:9F:07:36:F6
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:22:d1:8e:bd:cd:e9:53:f4:a2:c1:ec:fa:96:29:c4:af:e7:
         be:eb:8f:34:3d:55:41:6d:9c:89:d9:01:48:68:d3:75:4f:d0:
         3e:37:60:e1:2e:f7:9a:7b:46:83:40:72:07:77:00:0a:80:59:
         20:a5:5f:2d:a4:ca:4a:73:99:39:ed:0b:44:13:65:00:da:16:
         8f:20:78:c4:6a:f9:10:dd:9d:0c:3f:df:b5:36:9c:46:43:85:
         6b:12:6d:e7:f1:6b:ab:09:7f:96:d0:0a:0f:80:41:e8:7f:e7:
         cf:6a:ed:8d:d6:6c:f0:87:64:d7:55:bc:38:4b:a5:1a:13:09:
         03:c7:c4:63:6a:60:51:e2:3e:84:2e:b3:1e:2d:ec:ea:11:be:
         0c:10:aa:41:c2:92:f9:3f:f4:0c:d5:77:b3:6c:10:d5:b9:11:
         60:cf:94:d7:39:69:ae:df:b1:9b:ce:1e:a2:04:bc:f6:b5:c5:
         43:a3:44:65:1a:68:e5:56:4e:6f:a7:da:aa:14:e1:74:71:91:
         82:52:0d:fb:cf:ac:e5:ee:9a:f5:e5:e6:1b:e0:45:51:91:60:
         7b:3f:73:ce:63:07:a7:40:a8:cc:de:b3:f2:b0:20:ed:a1:81:
         b6:46:b5:9b:0b:02:31:82:ab:14:52:57:92:86:7f:4a:1a:df:
         f5:55:75:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CFh5HP30VXqyvC9GIqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0
YzUwMTkwHhcNMjUwNDEzMDcwMTM2WhcNMjUwNDE0MDcwMTM2WjAzMTEwLwYDVQQD
Eyg5NDQ3NTJkYWMyMzEwZDVjM2I1Y2UxOGQwYjQxMjA0ODlmMDczNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KVm6NYkmjJk1+Xf5QDIYoZeWTun
rYTxpz7i9N0qcc+AtUrzqjta+GfvZJRw3SLsK6hAPRltxDB0OjlaRQu0B9+OGw/g
tLIJ1DqMHcF4EhGeCQFxnVd+i/boiN1jmbsSdhP6R4vtD5XyNGnDJ+gUPndIHwjB
7vs5/iICYW9e+GQhqi4zUMaAfi/BPbz0O8JHopxKiVyX+IIKSCthFU4S43TjWHKr
Wa2EHmd2yMxfePYTNpVz+zidWM42WieJDwgD431gKBjbju2buLiAaGJ2i67UMPcX
R1IgajAOPRwmXoyLHRBwvwp+8N70YEfHxFGUMjQmCIqkzN/X3gPHFBEIYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRHUtrCMQ1cO1zhjQtBIEifBzb2MB8GA1UdIwQY
MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt
NzViZDk0NmE3MzU1LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1
LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCLRjr3N
6VP0osHs+pYpxK/nvuuPND1VQW2cidkBSGjTdU/QPjdg4S73mntGg0ByB3cACoBZ
IKVfLaTKSnOZOe0LRBNlANoWjyB4xGr5EN2dDD/ftTacRkOFaxJt5/Frqwl/ltAK
D4BB6H/nz2rtjdZs8Idk11W8OEulGhMJA8fEY2pgUeI+hC6zHi3s6hG+DBCqQcKS
+T/0DNV3s2wQ1bkRYM+U1zlprt+xm84eogS89rXFQ6NEZRpo5VZOb6faqhThdHGR
glIN+8+s5e6a9eXmG+BFUZFgez9zzmMHp0CozN6z8rAg7aGBtka1mwsCMYKrFFJX
koZ/Shrf9VV1DQ==
-----END CERTIFICATE-----