Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File:                     4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier:          z2IlWFtdELpyrE3yen+td58pXwQo8/AZFWs/zSGzvW8=
Subject key identifier:   66:FE:AE:90:77:98:EC:3B:25:95:15:44:32:76:21:F1:C8:AF:51:8F
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer:       /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial:       01962F072DCF35298A77954284239A9F56D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number:          066F
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: miEWDK8zbTKJSdWAeQBZ2r+L1HK+18dJ6b5H7hLNjQs=)
                          2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2d:cf:35:29:8a:77:95:42:84:23:9a:9f:56:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=66feae907798ec3b25951544327621f1c8af518f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:ae:e5:95:8b:1e:d9:9b:cc:f9:82:98:c2:
                    a6:85:16:53:54:17:ff:51:15:c1:85:fa:15:62:ca:
                    1f:6d:54:8f:b9:1b:dc:4c:69:ef:0e:c5:a0:af:30:
                    5a:2d:ea:eb:a8:cb:22:78:f8:45:e4:52:03:bf:7a:
                    27:3b:6f:1d:2b:2a:7d:07:dc:be:37:32:6e:d5:12:
                    54:4f:83:07:2b:65:49:89:fc:5e:d6:5b:54:bc:af:
                    ac:d8:0b:84:54:de:6d:25:de:93:1e:fe:8b:b1:f7:
                    5d:9d:4b:45:c8:f9:1b:9f:97:7f:b4:7f:4f:b4:44:
                    53:b1:02:81:ca:6a:41:98:1d:9c:07:82:10:89:07:
                    56:d0:5e:c0:4c:4e:dd:0f:cf:65:0f:ea:6e:0c:92:
                    dc:25:e0:1f:9b:c0:85:b3:e9:19:47:b3:5e:bf:df:
                    92:24:3a:6e:6f:f8:49:4c:89:5e:a8:5f:0a:33:79:
                    48:96:1f:91:d9:3a:b9:7e:d4:b5:20:05:f4:be:40:
                    94:85:86:e8:dc:52:48:29:19:ed:c0:f9:50:d4:9d:
                    9b:62:19:28:5d:76:ae:f0:e7:2c:3e:9c:63:96:36:
                    f7:5e:6d:f8:98:e9:76:4a:79:65:2c:36:d3:a3:c3:
                    92:dc:9b:93:55:96:f5:0b:da:1a:14:27:6e:f8:51:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:AE:90:77:98:EC:3B:25:95:15:44:32:76:21:F1:C8:AF:51:8F
            X509v3 Authority Key Identifier:
                keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:29:a4:89:8b:f6:5b:ae:4e:78:a8:62:28:f1:cf:02:ad:98:
         48:2c:61:44:06:32:59:62:b0:09:76:a3:af:e3:d4:33:51:df:
         1a:20:61:28:59:84:9a:5b:42:08:a6:72:ef:f0:ca:d2:52:de:
         dc:9a:ab:f1:6f:fc:4b:de:f5:21:88:d4:92:8f:f2:24:f5:42:
         27:95:42:5f:b8:cb:1f:af:15:9b:ad:f7:be:8d:b7:de:1b:5d:
         20:da:99:bc:2e:bd:45:8b:c0:79:74:a3:57:c8:a7:e6:5a:da:
         a0:c1:9f:8f:f6:20:aa:cc:01:4c:b5:2d:d9:3e:38:09:8f:76:
         72:32:99:53:d1:cc:ac:21:c2:2f:68:cc:bf:e4:37:6b:e4:04:
         6d:96:10:54:c1:27:b2:67:fd:22:ce:e9:a8:ab:43:0a:24:68:
         81:1d:64:98:34:bb:5f:e4:cf:15:e3:07:d5:93:60:59:da:1b:
         1d:f5:dc:12:76:e0:c1:81:f2:0e:fb:c7:39:ae:6a:78:2c:09:
         6b:70:83:90:f8:80:a3:28:b9:0d:5f:6b:e4:8d:99:09:37:31:
         9d:ae:82:ff:2d:76:f2:76:13:17:dc:77:14:aa:91:28:81:3d:
         dd:d6:d0:7b:13:8a:6f:7e:86:45:da:01:72:c7:79:b3:0c:f0:
         62:e9:53:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBy3PNSmKd5VChCOan1bRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5
YzUzZDkwHhcNMjUwNDEzMTIwMjAxWhcNMjUwNDE0MTIwMjAxWjAzMTEwLwYDVQQD
Eyg2NmZlYWU5MDc3OThlYzNiMjU5NTE1NDQzMjc2MjFmMWM4YWY1MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMmu5ZWLHtmbzPmCmMKmhRZTVBf/
URXBhfoVYsofbVSPuRvcTGnvDsWgrzBaLerrqMsiePhF5FIDv3onO28dKyp9B9y+
NzJu1RJUT4MHK2VJifxe1ltUvK+s2AuEVN5tJd6THv6LsfddnUtFyPkbn5d/tH9P
tERTsQKBympBmB2cB4IQiQdW0F7ATE7dD89lD+puDJLcJeAfm8CFs+kZR7Nev9+S
JDpub/hJTIleqF8KM3lIlh+R2Tq5ftS1IAX0vkCUhYbo3FJIKRntwPlQ1J2bYhko
XXau8OcsPpxjljb3Xm34mOl2SnllLDbTo8OS3JuTVZb1C9oaFCdu+FERmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb+rpB3mOw7JZUVRDJ2IfHIr1GPMB8GA1UdIwQY
MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt
NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx
LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUymkiYv2
W65OeKhiKPHPAq2YSCxhRAYyWWKwCXajr+PUM1HfGiBhKFmEmltCCKZy7/DK0lLe
3Jqr8W/8S971IYjUko/yJPVCJ5VCX7jLH68Vm633vo233htdINqZvC69RYvAeXSj
V8in5lraoMGfj/YgqswBTLUt2T44CY92cjKZU9HMrCHCL2jMv+Q3a+QEbZYQVMEn
smf9Is7pqKtDCiRogR1kmDS7X+TPFeMH1ZNgWdobHfXcEnbgwYHyDvvHOa5qeCwJ
a3CDkPiAoyi5DV9r5I2ZCTcxna6C/y128nYTF9x3FKqRKIE93dbQexOKb36GRdoB
csd5swzwYulTOQ==
-----END CERTIFICATE-----