Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File:                     S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier:          zRKZo1epxVzlLGOz0jZ8r+n1ktvk0dGNECy97uluf7w=
Subject key identifier:   2A:97:0B:B5:6A:7C:51:0A:B5:B9:89:9D:78:98:A1:5E:96:ED:60:26
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer:       /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial:       01962ECF97CFBCF60D3499EE159DE5D7356F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number:          14A0
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: KUunDuTR9yTJHNa2NEz+FASwSquOgl3W5gbK0fXkVhY=)
                          2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:97:cf:bc:f6:0d:34:99:ee:15:9d:e5:d7:35:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=2a970bb56a7c510ab5b9899d7898a15e96ed6026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:b8:e8:79:f9:b5:03:e5:8b:a1:a8:bf:da:
                    95:d3:78:70:aa:94:46:46:ce:9c:cb:49:65:13:7d:
                    c8:da:82:3d:b5:cd:0e:e6:4f:68:f0:3b:d6:0b:83:
                    b0:b1:14:19:e7:e8:74:5e:56:96:b4:d9:29:8d:40:
                    ad:2f:90:42:8d:bb:c6:4d:24:ee:c8:b9:04:a7:60:
                    41:fa:76:ee:66:a6:53:f2:4d:f5:10:b3:67:bf:30:
                    69:1d:b9:4d:04:c7:b1:09:79:84:74:67:e4:4d:e2:
                    95:d7:5d:2e:ab:ed:b4:08:56:f1:d3:03:97:e3:e2:
                    3a:41:ef:04:b6:8b:12:fe:6c:4e:98:84:ca:17:7f:
                    cf:04:f8:5b:9d:49:1b:29:46:32:1b:1f:23:55:fc:
                    fd:b1:49:c4:2d:c9:41:47:5f:ed:ee:5b:b2:e3:4c:
                    f0:6f:da:58:a1:97:31:f5:99:90:5f:18:1b:79:cc:
                    7f:09:53:fb:b2:2b:10:6b:e4:9c:e7:d7:5f:c3:e2:
                    19:f1:4c:83:e3:01:c8:db:e7:56:0a:cd:15:8e:14:
                    4f:af:a1:da:fd:3e:79:8f:0e:de:f0:09:ff:b5:4e:
                    cf:1c:95:97:97:02:1d:42:0f:0c:aa:84:85:ca:19:
                    89:53:dd:23:45:b4:15:6d:c5:bc:e9:9f:2f:44:cd:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:97:0B:B5:6A:7C:51:0A:B5:B9:89:9D:78:98:A1:5E:96:ED:60:26
            X509v3 Authority Key Identifier:
                keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:a3:5d:ce:44:2b:6e:e9:b0:74:78:2d:2e:04:30:68:72:
         42:04:cd:bf:d9:db:56:38:b6:60:70:06:ee:cc:08:d4:cd:31:
         ae:b2:f1:20:b8:2d:fd:47:64:bc:40:c9:7d:fa:31:42:d2:f8:
         38:96:7d:17:c4:5f:33:5d:a0:fd:65:8f:10:ae:f5:11:20:12:
         f0:99:77:f5:33:f7:9b:a4:cf:9d:ff:b9:f1:9f:c7:8a:b2:18:
         d9:1b:4c:92:d6:fb:da:3b:cf:bb:00:23:43:cf:41:bc:69:bb:
         fc:9a:1c:23:4b:29:b4:23:cc:bc:d2:bb:26:17:00:06:93:1d:
         ca:03:2a:65:22:53:7b:0a:a0:a1:b9:1c:b2:31:8b:f3:10:a1:
         07:30:6a:9d:ec:82:3b:8e:bd:34:be:0f:65:8c:14:f8:d6:57:
         9c:c1:69:e9:79:1b:8a:de:f0:e9:89:ea:06:61:cb:ac:25:d1:
         6b:59:0f:17:fb:2e:67:2f:3d:19:20:81:d1:fb:25:0c:b7:e6:
         3d:00:be:25:f0:bb:3d:e5:d2:c5:3d:5d:e0:db:90:d2:9f:dd:
         8e:68:4e:20:6b:fc:c1:b6:40:6d:c4:68:a3:0f:eb:6c:60:2e:
         61:d2:16:45:88:12:e6:8d:b2:1c:b7:df:a9:fd:b2:42:49:6c:
         85:75:1b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5fPvPYNNJnuFZ3l1zVvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjNkMTgzMzY2NDJiNmE5YWM4YWVkZmZiZjdhZWU2ZTVl
NjI5ZjQwHhcNMjUwNDEzMTEwMTE4WhcNMjUwNDE0MTEwMTE4WjAzMTEwLwYDVQQD
EygyYTk3MGJiNTZhN2M1MTBhYjViOTg5OWQ3ODk4YTE1ZTk2ZWQ2MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBW46Hn5tQPli6Gov9qV03hwqpRG
Rs6cy0llE33I2oI9tc0O5k9o8DvWC4OwsRQZ5+h0XlaWtNkpjUCtL5BCjbvGTSTu
yLkEp2BB+nbuZqZT8k31ELNnvzBpHblNBMexCXmEdGfkTeKV110uq+20CFbx0wOX
4+I6Qe8EtosS/mxOmITKF3/PBPhbnUkbKUYyGx8jVfz9sUnELclBR1/t7luy40zw
b9pYoZcx9ZmQXxgbecx/CVP7sisQa+Sc59dfw+IZ8UyD4wHI2+dWCs0VjhRPr6Ha
/T55jw7e8An/tU7PHJWXlwIdQg8MqoSFyhmJU90jRbQVbcW86Z8vRM36wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqXC7VqfFEKtbmJnXiYoV6W7WAmMB8GA1UdIwQY
MBaAFEvz0YM2ZCtqmsiu3/v3rubl5in0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDI4OTctNTMwZS00NjEzLWFmODQt
MGRhMzAwYzdjNjNkLzEvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NDI4OTctNTMwZS00NjEzLWFmODQtMGRhMzAwYzdjNjNk
LzEvU19QUmd6WmtLMnFheUs3Zi1fZXU1dVhtS2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUu+jXc5E
K27psHR4LS4EMGhyQgTNv9nbVji2YHAG7swI1M0xrrLxILgt/UdkvEDJffoxQtL4
OJZ9F8RfM12g/WWPEK71ESAS8Jl39TP3m6TPnf+58Z/HirIY2RtMktb72jvPuwAj
Q89BvGm7/JocI0sptCPMvNK7JhcABpMdygMqZSJTewqgobkcsjGL8xChBzBqneyC
O469NL4PZYwU+NZXnMFp6Xkbit7w6YnqBmHLrCXRa1kPF/suZy89GSCB0fslDLfm
PQC+JfC7PeXSxT1d4NuQ0p/djmhOIGv8wbZAbcRoow/rbGAuYdIWRYgS5o2yHLff
qf2yQklshXUbbw==
-----END CERTIFICATE-----