Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File:                     EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier:          NyJ7R/00IZdtFCQ9V+BgZXKloVs+utF/Yh1S5wlXTyk=
Subject key identifier:   10:68:08:D6:C2:2A:A5:4D:67:4A:4F:6A:B9:72:34:36:75:33:33:18
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer:       /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial:       01962E988DC690C69C7763C6C47F228A6617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
                          2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: Xvgg1n0FlE/guUjWKMrOdxsvUSmHRzSWd1D50kHVCkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:c6:90:c6:9c:77:63:c6:c4:7f:22:8a:66:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=106808d6c22aa54d674a4f6ab972343675333318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:66:4f:f6:9f:d6:7c:16:8d:d8:fe:49:c5:
                    37:69:90:63:e6:83:ab:49:8e:93:e1:c3:f5:56:20:
                    b1:67:65:a9:75:58:09:21:45:a8:64:01:c9:86:76:
                    09:9e:88:f4:c3:9e:f5:bc:1f:c0:ce:86:1f:45:37:
                    32:66:4c:d7:10:e9:7f:ec:11:2b:b5:45:b1:fa:0a:
                    fc:9a:75:b9:da:fd:21:2a:d3:cb:8b:f4:ce:88:46:
                    be:f3:6a:b6:de:48:53:a2:13:16:1b:36:56:aa:ec:
                    65:d4:1e:10:a3:86:20:1e:7f:c7:96:09:02:66:ca:
                    2f:fe:39:7c:3e:d7:27:74:d7:1e:5a:bb:9b:be:95:
                    b8:20:33:dc:17:54:17:dd:e7:96:fe:02:d3:37:46:
                    d8:23:26:62:4e:b8:86:3a:50:11:55:37:c7:17:f1:
                    30:2d:87:4d:43:70:94:50:93:da:39:ee:0a:84:fc:
                    ac:af:d4:bc:39:cc:20:87:51:8b:80:f3:33:7d:22:
                    61:18:c2:9e:a1:22:14:32:c1:47:ba:ab:c5:76:ca:
                    ce:7d:58:bf:e1:38:36:02:38:14:ff:b8:a3:0a:18:
                    82:1b:7f:ce:76:b9:bb:ca:ef:75:2a:c7:65:8d:b7:
                    2a:2d:4e:6f:16:72:f8:cc:68:eb:6b:8b:61:f9:47:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:08:D6:C2:2A:A5:4D:67:4A:4F:6A:B9:72:34:36:75:33:33:18
            X509v3 Authority Key Identifier:
                keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:51:3a:23:7f:ff:dd:c7:66:34:d6:bb:6d:e2:d5:bd:21:bd:
         bb:02:91:1d:89:5d:e5:f6:84:a5:fe:25:d3:8d:90:ee:ab:1f:
         85:26:41:a4:32:35:8c:ae:99:7b:3d:f2:e2:53:6c:82:28:0f:
         d5:e2:a6:aa:c6:6a:c0:9d:73:05:88:45:f2:21:b7:bd:70:ac:
         be:e7:4f:61:7f:b3:02:f8:39:75:74:fd:94:29:7a:54:f1:d3:
         d5:18:16:87:dc:24:21:d4:ed:ce:3f:14:24:19:55:71:8f:01:
         d0:18:d6:d8:16:c3:89:6c:99:4a:74:6f:45:d8:1d:b3:8d:55:
         1d:4b:4f:d2:23:20:99:1a:79:8b:2a:d3:ab:25:e2:21:98:b0:
         69:c0:18:1f:5f:53:85:08:31:bd:21:68:2d:f3:13:b2:8e:81:
         21:24:24:06:28:39:e9:46:d2:c3:8a:65:97:88:dc:60:66:da:
         8e:ff:17:c5:d1:d3:82:1c:ae:e5:73:0c:62:cb:77:97:90:1c:
         78:20:ce:51:8b:bb:cc:d7:5d:35:ff:3e:2d:70:8a:d1:ef:df:
         a7:8e:a5:b2:d7:26:94:d5:cb:d2:02:01:84:43:cb:f2:ee:2c:
         2e:4f:0b:4f:5a:74:d1:9e:28:c4:af:34:e3:a5:9d:35:7e:a8:
         14:aa:1b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumI3GkMacd2PGxH8iimYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzAzNTYxMzVhZGY0N2VkOTcwOGNiMGExMzY4MDg5NGMy
MzM5ZWEwHhcNMjUwNDEzMTAwMTExWhcNMjUwNDE0MTAwMTExWjAzMTEwLwYDVQQD
EygxMDY4MDhkNmMyMmFhNTRkNjc0YTRmNmFiOTcyMzQzNjc1MzMzMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SVmT/af1nwWjdj+ScU3aZBj5oOr
SY6T4cP1ViCxZ2WpdVgJIUWoZAHJhnYJnoj0w571vB/AzoYfRTcyZkzXEOl/7BEr
tUWx+gr8mnW52v0hKtPLi/TOiEa+82q23khTohMWGzZWquxl1B4Qo4YgHn/HlgkC
Zsov/jl8PtcndNceWrubvpW4IDPcF1QX3eeW/gLTN0bYIyZiTriGOlARVTfHF/Ew
LYdNQ3CUUJPaOe4KhPysr9S8Ocwgh1GLgPMzfSJhGMKeoSIUMsFHuqvFdsrOfVi/
4Tg2AjgU/7ijChiCG3/Odrm7yu91KsdljbcqLU5vFnL4zGjra4th+UfE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBoCNbCKqVNZ0pParlyNDZ1MzMYMB8GA1UdIwQY
MBaAFBFwNWE1rfR+2XCMsKE2gIlMIznqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEt
ZTYzMTQ2M2IxMjNiLzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEtZTYzMTQ2M2IxMjNi
LzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAylE6I3//
3cdmNNa7beLVvSG9uwKRHYld5faEpf4l042Q7qsfhSZBpDI1jK6Zez3y4lNsgigP
1eKmqsZqwJ1zBYhF8iG3vXCsvudPYX+zAvg5dXT9lCl6VPHT1RgWh9wkIdTtzj8U
JBlVcY8B0BjW2BbDiWyZSnRvRdgds41VHUtP0iMgmRp5iyrTqyXiIZiwacAYH19T
hQgxvSFoLfMTso6BISQkBig56UbSw4pll4jcYGbajv8XxdHTghyu5XMMYst3l5Ac
eCDOUYu7zNddNf8+LXCK0e/fp46lstcmlNXL0gIBhEPL8u4sLk8LT1p00Z4oxK80
46WdNX6oFKobyQ==
-----END CERTIFICATE-----