Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File:                     agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier:          tocRbXqcQSBrLmPtsris4+BMuG/FoVdx88HG+3AeKCg=
Subject key identifier:   41:79:F4:F5:9B:6D:3D:44:DE:7A:F9:FF:E2:4C:DB:E2:10:8D:C3:82
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer:       /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial:       01962F74E4F883E1B7A67DCD78C2C8601AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
                          2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: x+G+fhqPayZIXb7GxRfPeEbOi3Y235dsJHkYNDWvadU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e4:f8:83:e1:b7:a6:7d:cd:78:c2:c8:60:1a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=4179f4f59b6d3d44de7af9ffe24cdbe2108dc382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:6b:ba:b3:8b:0b:71:a0:cc:0d:c8:fc:dd:
                    e4:14:58:f6:3b:2f:58:a1:fa:fa:9c:21:c2:bf:a1:
                    9e:67:3a:91:4a:ad:37:23:1c:21:b4:31:42:17:39:
                    c9:12:4b:3e:b7:ad:84:e9:50:7d:e7:be:3c:03:a8:
                    f0:8e:78:66:e3:de:fa:73:ff:e7:50:6b:3a:f9:2a:
                    2c:b5:fe:3f:a2:12:b6:0b:91:c1:c0:7f:0d:32:15:
                    23:c5:af:2e:f5:57:50:92:53:bf:d5:71:bb:f2:a6:
                    fe:16:67:ed:a8:9a:3c:a8:7c:77:5e:7b:0c:30:ca:
                    e1:c3:37:14:f0:1f:9d:b3:4e:18:e5:27:87:e0:10:
                    c5:01:8d:c5:ee:ca:75:d5:94:9c:a8:4f:3e:51:ee:
                    f1:8c:e7:d5:2d:bb:60:84:87:de:d0:5b:b7:ef:29:
                    87:23:3f:13:2c:de:c9:2f:d7:4c:84:eb:9f:63:ba:
                    5f:4b:6e:ef:07:3a:09:9e:e4:c0:98:60:55:ba:4e:
                    aa:86:be:7e:6f:cc:2a:94:84:7f:e3:5b:1b:3d:53:
                    d1:55:52:95:c7:5c:ba:b5:31:82:c4:06:72:b2:0f:
                    28:b3:13:d7:50:16:15:66:e6:09:53:08:48:da:ee:
                    bd:b2:81:07:dc:ad:d4:bb:f7:74:25:a3:66:9e:6e:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:79:F4:F5:9B:6D:3D:44:DE:7A:F9:FF:E2:4C:DB:E2:10:8D:C3:82
            X509v3 Authority Key Identifier:
                keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:0f:39:cd:0f:9d:2d:ee:06:0f:12:cc:9b:35:62:38:16:
         df:72:82:b3:4e:28:17:88:ca:23:91:8d:2d:0b:d0:aa:6d:b5:
         68:23:83:df:be:ce:8f:91:d4:20:e6:88:eb:d1:84:f5:b2:20:
         4e:aa:72:1c:28:7d:c6:15:ed:43:8d:91:0d:20:1c:4a:d8:38:
         e5:b8:b0:ab:5b:d4:10:d6:39:09:2d:57:01:88:d5:d7:2f:c8:
         12:9b:61:09:76:96:a8:8d:32:a7:2b:c2:28:c2:c1:9d:8d:07:
         d3:69:12:77:63:2b:66:9e:c3:e7:5d:2c:f1:a0:76:6b:60:d5:
         8d:59:56:4c:6c:9a:7f:4d:7c:3c:bb:e2:d2:91:b8:70:8e:ab:
         39:8c:d9:4d:9f:98:03:dd:27:86:c9:aa:6c:0c:71:df:a6:58:
         8c:8f:dc:66:cd:6c:60:23:28:87:ca:1b:5f:c2:41:30:af:c1:
         85:e0:c2:a1:a8:f6:12:74:fc:c9:df:01:22:79:a1:af:dc:b5:
         35:0e:f9:6a:af:33:c1:63:b2:ec:8d:28:f4:56:90:59:36:e1:
         18:c8:d3:d1:e7:be:6d:07:01:f8:59:26:43:ac:0f:bc:89:20:
         24:8f:44:3c:88:1d:48:5f:2b:5b:f4:0e:a3:02:12:44:56:e3:
         c9:57:91:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOT4g+G3pn3NeMLIYBrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw
ZGNmNDkwHhcNMjUwNDEzMTQwMTUxWhcNMjUwNDE0MTQwMTUxWjAzMTEwLwYDVQQD
Eyg0MTc5ZjRmNTliNmQzZDQ0ZGU3YWY5ZmZlMjRjZGJlMjEwOGRjMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD5rurOLC3GgzA3I/N3kFFj2Oy9Y
ofr6nCHCv6GeZzqRSq03IxwhtDFCFznJEks+t62E6VB95748A6jwjnhm4976c//n
UGs6+Sostf4/ohK2C5HBwH8NMhUjxa8u9VdQklO/1XG78qb+FmftqJo8qHx3XnsM
MMrhwzcU8B+ds04Y5SeH4BDFAY3F7sp11ZScqE8+Ue7xjOfVLbtghIfe0Fu37ymH
Iz8TLN7JL9dMhOufY7pfS27vBzoJnuTAmGBVuk6qhr5+b8wqlIR/41sbPVPRVVKV
x1y6tTGCxAZysg8osxPXUBYVZuYJUwhI2u69soEH3K3Uu/d0JaNmnm4JnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF59PWbbT1E3nr5/+JM2+IQjcOCMB8GA1UdIwQY
MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt
ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1
LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoAPOc0P
nS3uBg8SzJs1YjgW33KCs04oF4jKI5GNLQvQqm21aCOD377Oj5HUIOaI69GE9bIg
TqpyHCh9xhXtQ42RDSAcStg45biwq1vUENY5CS1XAYjV1y/IEpthCXaWqI0ypyvC
KMLBnY0H02kSd2MrZp7D510s8aB2a2DVjVlWTGyaf018PLvi0pG4cI6rOYzZTZ+Y
A90nhsmqbAxx36ZYjI/cZs1sYCMoh8obX8JBMK/BheDCoaj2EnT8yd8BInmhr9y1
NQ75aq8zwWOy7I0o9FaQWTbhGMjT0ee+bQcB+FkmQ6wPvIkgJI9EPIgdSF8rW/QO
owISRFbjyVeRRg==
-----END CERTIFICATE-----