Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
File:                     Mm9RyiOYIQP_40-YkNC3To-nga8.mft (raw, json)
Hash identifier:          6VtRcTyNj7e9M+RuSUGdqEWZNAU6D7brtdiRZ3fuCJA=
Subject key identifier:   C6:72:C3:DA:E4:50:1A:C7:6E:4A:6E:D7:93:E0:F1:CF:F7:33:4D:1D
Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Certificate issuer:       /CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Certificate serial:       01962E2ABDFA8B6ECC128E8A7B1004328444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
Manifest number:          054E
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: Mm9RyiOYIQP_40-YkNC3To-nga8.crl (hash: pYsZCnYwvApytDzUK61L+dqEim1xIeSAmLlvYpWxTEc=)
                          2: XS-Ybz0hvV9BojCYEUiidWOyx20.roa (hash: rQhYc9pPbBgv4YgNdF82ibLtydUp9AsYJJ57Y6MS2So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:fa:8b:6e:cc:12:8e:8a:7b:10:04:32:84:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=c672c3dae4501ac76e4a6ed793e0f1cff7334d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:bb:62:41:e8:0d:b8:12:9c:59:02:a0:55:
                    60:37:05:44:aa:dc:88:d8:28:06:e3:95:60:e3:98:
                    b6:60:be:47:58:fb:4a:04:2a:1a:51:c7:de:c4:36:
                    a0:80:a1:c2:69:88:db:ed:d1:35:8c:89:ca:e5:52:
                    38:fb:8d:49:38:eb:71:82:0a:24:40:de:69:e7:2d:
                    5f:89:19:c4:17:19:de:4d:7e:1f:a6:2e:6c:f0:f1:
                    6c:13:bc:a9:95:5a:de:fe:fa:6b:e6:63:6a:f5:bc:
                    fd:59:b4:bb:46:d0:c1:8a:9c:7e:06:44:4b:52:6d:
                    95:5b:51:b4:c6:a1:11:d5:69:15:18:77:a2:bf:26:
                    3c:96:34:b3:05:f1:29:44:c5:1f:d1:1b:cc:b5:32:
                    47:c6:60:e4:65:47:a1:f3:0d:1a:e8:3d:1a:0d:b3:
                    bc:8e:9b:5a:05:66:33:02:2d:33:7a:cc:9f:b8:6a:
                    01:64:16:97:18:52:36:0a:d0:52:ab:20:27:2f:2f:
                    01:e9:f0:75:2c:80:23:64:66:6f:40:7d:0f:18:f3:
                    ab:77:e8:af:f3:53:72:fc:ea:1e:5f:60:c4:17:80:
                    df:2b:5c:29:11:c3:56:6f:e3:c4:c5:dd:0e:e8:d6:
                    61:09:c6:fe:b2:9b:17:10:ac:14:33:a8:78:91:74:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:C3:DA:E4:50:1A:C7:6E:4A:6E:D7:93:E0:F1:CF:F7:33:4D:1D
            X509v3 Authority Key Identifier:
                keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:ef:42:d9:72:1a:64:8b:7d:33:40:5a:5b:d0:6e:38:9e:
         e1:cc:b8:bf:90:2b:ef:68:49:5d:23:61:5d:f1:a9:e9:b1:e0:
         a6:f6:ba:06:c2:68:2c:6e:d7:17:2e:22:2c:03:d0:b9:22:19:
         38:5a:6b:9b:df:6e:c0:33:8a:1c:14:ec:f6:cf:c3:35:ea:e8:
         b3:0a:14:e3:a0:04:bc:a9:5b:3c:64:27:12:b6:a8:6f:7f:09:
         65:af:70:89:0e:62:e8:b5:ca:f6:81:bd:ed:8a:0c:19:c2:70:
         a5:2c:73:b8:47:f0:b7:ad:f3:af:0c:60:19:34:c9:2d:38:cd:
         bc:12:75:4c:7e:d4:ed:11:d8:a6:e8:99:83:f9:e5:d0:e0:31:
         f6:de:e0:1e:11:7e:53:c6:bb:f2:a9:55:b4:ec:b3:05:a1:86:
         bf:07:68:f5:d0:5d:3a:b9:bd:e8:ba:c9:2e:ea:82:b8:50:fb:
         09:0f:f3:1e:30:57:4b:b1:37:f8:dd:e1:99:75:70:45:25:60:
         74:52:c7:6c:10:6c:82:9d:1b:3b:58:2e:bb:0a:eb:4f:58:2b:
         d0:5e:47:00:33:19:18:2d:0d:aa:96:82:ec:9b:fa:4b:be:a6:
         6b:90:f0:31:24:71:18:60:47:f6:d6:00:11:9f:56:0b:80:9f:
         02:af:01:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr36i27MEo6KexAEMoREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNmY1MWNhMjM5ODIxMDNmZmUzNGY5ODkwZDBiNzRlOGZh
NzgxYWYwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
EyhjNjcyYzNkYWU0NTAxYWM3NmU0YTZlZDc5M2UwZjFjZmY3MzM0ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6y7YkHoDbgSnFkCoFVgNwVEqtyI
2CgG45Vg45i2YL5HWPtKBCoaUcfexDaggKHCaYjb7dE1jInK5VI4+41JOOtxggok
QN5p5y1fiRnEFxneTX4fpi5s8PFsE7yplVre/vpr5mNq9bz9WbS7RtDBipx+BkRL
Um2VW1G0xqER1WkVGHeivyY8ljSzBfEpRMUf0RvMtTJHxmDkZUeh8w0a6D0aDbO8
jptaBWYzAi0zesyfuGoBZBaXGFI2CtBSqyAnLy8B6fB1LIAjZGZvQH0PGPOrd+iv
81Ny/OoeX2DEF4DfK1wpEcNWb+PExd0O6NZhCcb+spsXEKwUM6h4kXSUGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZyw9rkUBrHbkpu15Pg8c/3M00dMB8GA1UdIwQY
MBaAFDJvUcojmCED/+NPmJDQt06Pp4GvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYt
OTY2ZmE5NmJlZmYyLzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYtOTY2ZmE5NmJlZmYy
LzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtDvQtly
GmSLfTNAWlvQbjie4cy4v5Ar72hJXSNhXfGp6bHgpva6BsJoLG7XFy4iLAPQuSIZ
OFprm99uwDOKHBTs9s/DNeroswoU46AEvKlbPGQnEraob38JZa9wiQ5i6LXK9oG9
7YoMGcJwpSxzuEfwt63zrwxgGTTJLTjNvBJ1TH7U7RHYpuiZg/nl0OAx9t7gHhF+
U8a78qlVtOyzBaGGvwdo9dBdOrm96LrJLuqCuFD7CQ/zHjBXS7E3+N3hmXVwRSVg
dFLHbBBsgp0bO1guuwrrT1gr0F5HADMZGC0NqpaC7Jv6S76ma5DwMSRxGGBH9tYA
EZ9WC4CfAq8BhA==
-----END CERTIFICATE-----