Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File:                     uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier:          OSTGrPKETBqwneqNJPIWoaah5CCwH7ZDdV+ttgTbK7g=
Subject key identifier:   E8:89:3E:A5:90:2A:5C:DC:2A:83:CD:10:D7:00:F6:54:09:05:03:F9
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer:       /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial:       01962E992E695C63F0AAFE739816DA3623F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number:          1106
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: dKpw_-0HjSGrVaWJaUDvP77eqyY.roa (hash: QqA/x8rzftDJLWW2k4Vuop1woZfiPckz4TMZl5sc2Xs=)
                          2: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: se5HKqaHHKBi7vdRmbtC61pu781HP6CGhqk8ZHeyAQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2e:69:5c:63:f0:aa:fe:73:98:16:da:36:23:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=e8893ea5902a5cdc2a83cd10d700f654090503f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:4b:15:9a:90:17:cf:98:a1:c1:a4:e8:a0:
                    df:d1:cb:46:3e:bc:1b:c8:ab:7b:83:84:bf:c4:80:
                    e8:d7:29:3d:0d:c3:2d:a8:7d:0c:4a:cc:3e:ea:3d:
                    1c:1d:01:ad:41:46:c8:7d:1d:21:24:cd:34:06:70:
                    e2:6e:c4:18:88:64:a6:23:84:96:1e:fe:d8:99:77:
                    3f:ab:c9:4e:7e:20:bb:96:13:b1:90:74:8d:f3:13:
                    bd:03:18:f3:9e:b3:d8:e3:32:46:ff:cd:d1:79:a2:
                    98:b2:18:ed:31:7c:fd:03:fa:6e:0a:12:a9:6f:2b:
                    f8:1d:92:f3:5a:a1:6d:b9:c1:c1:00:e5:d5:b8:de:
                    bc:0e:be:b3:15:b7:90:68:fc:ec:97:24:6b:f6:d7:
                    2b:53:a2:8d:ea:03:2f:f2:a4:55:91:d9:4a:fd:ac:
                    cb:9f:17:8a:4d:79:82:2d:ec:9e:85:6e:79:2a:53:
                    b1:b1:9d:aa:37:f2:83:11:db:a9:12:d1:d1:5d:bb:
                    4a:c8:38:b1:0b:8a:33:8f:d2:e7:41:dd:02:cf:13:
                    c7:e0:aa:74:04:3d:6a:c6:64:81:a3:f8:8f:f2:69:
                    27:88:fc:7b:e2:30:b5:70:6c:66:be:50:38:c2:41:
                    22:40:d2:5e:0a:f7:d4:e4:40:aa:7e:64:f8:18:d0:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:3E:A5:90:2A:5C:DC:2A:83:CD:10:D7:00:F6:54:09:05:03:F9
            X509v3 Authority Key Identifier:
                keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:bd:b0:2b:40:f9:10:25:a6:82:6f:12:68:23:9e:60:6b:
         aa:d4:d3:e7:b3:71:a8:e1:0b:68:60:18:90:63:41:67:6e:d0:
         f2:fc:70:cf:8c:a6:d7:7a:af:42:4c:0e:62:14:37:5e:8e:89:
         e5:7e:d7:4b:38:16:af:84:b9:62:35:43:02:93:c9:34:ea:ce:
         08:a8:1c:f4:5d:54:bd:dc:1a:08:3a:51:8d:a9:cf:2a:fd:8d:
         c8:c1:af:31:33:a1:a8:69:10:3b:ef:13:fe:b4:51:cc:f3:18:
         9d:eb:3e:1d:c6:4d:9e:2c:41:88:c8:f3:d9:ec:48:c4:17:ab:
         1a:8b:37:48:c9:25:4c:37:b8:4f:46:2c:9b:4b:fb:db:bd:1e:
         dc:a7:dd:1e:06:18:14:b6:77:ea:af:b3:56:0c:66:d7:61:97:
         ec:9e:c2:33:b7:f0:bc:29:5e:01:7e:cf:8e:16:10:a7:08:2b:
         eb:04:dc:6e:bf:25:cf:f1:99:64:8c:91:ef:83:a0:7d:4d:3c:
         a0:bc:34:94:17:bf:c9:29:89:27:bd:bb:44:09:ca:a4:61:42:
         d0:37:a5:c8:ff:90:43:ff:32:8e:14:e8:12:b2:8e:5d:1b:71:
         37:05:6a:56:d8:7c:d9:65:b8:75:74:3f:eb:43:84:67:4e:3a:
         c7:57:12:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumS5pXGPwqv5zmBbaNiPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0
OGM3Y2QwHhcNMjUwNDEzMTAwMTUyWhcNMjUwNDE0MTAwMTUyWjAzMTEwLwYDVQQD
EyhlODg5M2VhNTkwMmE1Y2RjMmE4M2NkMTBkNzAwZjY1NDA5MDUwM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3FLFZqQF8+YocGk6KDf0ctGPrwb
yKt7g4S/xIDo1yk9DcMtqH0MSsw+6j0cHQGtQUbIfR0hJM00BnDibsQYiGSmI4SW
Hv7YmXc/q8lOfiC7lhOxkHSN8xO9AxjznrPY4zJG/83ReaKYshjtMXz9A/puChKp
byv4HZLzWqFtucHBAOXVuN68Dr6zFbeQaPzslyRr9tcrU6KN6gMv8qRVkdlK/azL
nxeKTXmCLeyehW55KlOxsZ2qN/KDEdupEtHRXbtKyDixC4ozj9LnQd0CzxPH4Kp0
BD1qxmSBo/iP8mkniPx74jC1cGxmvlA4wkEiQNJeCvfU5ECqfmT4GNCD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiJPqWQKlzcKoPNENcA9lQJBQP5MB8GA1UdIwQY
MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt
NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3
LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/m9sCtA
+RAlpoJvEmgjnmBrqtTT57NxqOELaGAYkGNBZ27Q8vxwz4ym13qvQkwOYhQ3Xo6J
5X7XSzgWr4S5YjVDApPJNOrOCKgc9F1UvdwaCDpRjanPKv2NyMGvMTOhqGkQO+8T
/rRRzPMYnes+HcZNnixBiMjz2exIxBerGos3SMklTDe4T0Ysm0v7270e3KfdHgYY
FLZ36q+zVgxm12GX7J7CM7fwvCleAX7PjhYQpwgr6wTcbr8lz/GZZIyR74OgfU08
oLw0lBe/ySmJJ727RAnKpGFC0DelyP+QQ/8yjhToErKOXRtxNwVqVth82WW4dXQ/
60OEZ046x1cSYA==
-----END CERTIFICATE-----