Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File:                     rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier:          uqC51BZd4mlNUjwAQzmGhYOfrtnSwL2WC3QBPxyzThA=
Subject key identifier:   CE:67:2C:92:70:15:88:FA:52:1B:33:F5:BE:28:AD:1D:6C:7C:5D:6F
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer:       /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial:       01962F3D4BB68773A6AA45332417DB9FD0DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number:          03D3
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
                          2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: YPQAryG3yz5bKewJFfRTSdw8BrCkzFPa+dRfvj/wDYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:b6:87:73:a6:aa:45:33:24:17:db:9f:d0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=ce672c92701588fa521b33f5be28ad1d6c7c5d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:22:4a:06:e6:fb:32:81:55:50:8f:ee:aa:
                    46:50:1b:05:75:ec:b8:6a:32:6a:55:a3:2a:98:d9:
                    ac:b5:1a:a2:f7:6f:7f:3e:27:32:2e:d7:4c:2f:73:
                    7b:c7:3e:38:f3:58:f2:6f:53:dd:e8:a0:8e:f2:f0:
                    b3:ec:aa:39:59:b3:bc:3e:af:c3:e5:15:5f:5c:70:
                    e3:a3:fa:9b:a6:f2:5a:59:b9:27:d5:a9:cb:ef:d0:
                    35:27:f9:fe:ea:b3:bf:88:d6:40:bc:9b:3c:3d:6e:
                    e1:98:56:75:26:4b:22:20:f7:53:e6:6f:e2:5f:38:
                    b1:f9:cc:48:64:20:f3:15:8a:85:be:a0:5a:ec:fd:
                    a5:0b:fb:be:17:7c:48:f3:84:87:31:4c:76:ba:f7:
                    b6:5d:60:9c:a2:6d:f8:6e:b9:6e:6f:04:bb:30:fc:
                    5a:4e:c0:20:30:ee:6a:5e:60:73:04:93:78:13:e5:
                    01:97:06:d1:b3:e1:10:d9:b0:44:33:33:f0:f3:58:
                    e0:03:0e:9a:d2:92:c4:5d:c9:cc:7b:e4:5e:16:24:
                    7b:df:40:ff:11:6a:9e:56:18:05:e2:6b:6d:e6:1f:
                    ff:4f:2e:e2:24:35:e2:ca:27:94:64:b0:a8:5d:f8:
                    6b:73:18:75:6f:4f:2a:ba:f8:2c:23:91:c0:fe:8e:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:67:2C:92:70:15:88:FA:52:1B:33:F5:BE:28:AD:1D:6C:7C:5D:6F
            X509v3 Authority Key Identifier:
                keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:9d:7b:da:6a:c5:04:65:ac:8f:e9:73:c1:38:43:c8:27:
         ca:e2:af:e0:90:bb:10:da:ef:1a:00:7a:2f:b8:8a:da:71:b3:
         55:a2:c6:35:9a:fb:34:a9:d9:c7:0c:1c:6b:13:d9:30:14:84:
         97:60:eb:8f:42:18:4d:91:a7:31:ba:d8:bf:27:f7:a2:38:6e:
         14:51:0d:06:62:6a:8e:f4:2c:1b:8e:9d:92:09:cd:e9:d3:02:
         2a:94:d2:db:6d:d5:18:7d:5e:2e:cd:bc:e3:6e:fb:f9:3b:30:
         48:ec:72:e3:13:09:3a:38:e2:15:3a:69:1b:fd:b8:e0:e7:bf:
         94:30:32:d4:47:3a:56:8f:9b:ee:ab:69:c7:6d:ba:bd:68:55:
         41:30:fb:44:e1:be:13:34:24:5b:60:2d:f8:49:7f:09:25:3b:
         b7:c3:15:bb:d2:ad:10:bd:b6:a1:bd:85:a9:f3:7e:b5:f2:f1:
         c2:29:38:39:66:b4:ef:38:33:cd:8e:ee:49:a9:aa:58:d5:b4:
         69:f7:d3:c8:f2:d1:ff:00:8f:4a:43:e5:75:94:7c:76:75:cf:
         b7:44:89:95:f1:1d:1b:bb:92:df:3b:b1:b6:44:24:3d:a9:90:
         24:ea:0d:4d:53:10:79:85:46:72:36:54:fb:b0:6c:6c:fc:e5:
         4f:90:5e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUu2h3OmqkUzJBfbn9DdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjUwNDEzMTMwMTA4WhcNMjUwNDE0MTMwMTA4WjAzMTEwLwYDVQQD
EyhjZTY3MmM5MjcwMTU4OGZhNTIxYjMzZjViZTI4YWQxZDZjN2M1ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+4iSgbm+zKBVVCP7qpGUBsFdey4
ajJqVaMqmNmstRqi929/PicyLtdML3N7xz4481jyb1Pd6KCO8vCz7Ko5WbO8Pq/D
5RVfXHDjo/qbpvJaWbkn1anL79A1J/n+6rO/iNZAvJs8PW7hmFZ1JksiIPdT5m/i
Xzix+cxIZCDzFYqFvqBa7P2lC/u+F3xI84SHMUx2uve2XWCcom34brlubwS7MPxa
TsAgMO5qXmBzBJN4E+UBlwbRs+EQ2bBEMzPw81jgAw6a0pLEXcnMe+ReFiR730D/
EWqeVhgF4mtt5h//Ty7iJDXiyieUZLCoXfhrcxh1b08quvgsI5HA/o4muwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5nLJJwFYj6Uhsz9b4orR1sfF1vMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotSde9pq
xQRlrI/pc8E4Q8gnyuKv4JC7ENrvGgB6L7iK2nGzVaLGNZr7NKnZxwwcaxPZMBSE
l2Drj0IYTZGnMbrYvyf3ojhuFFENBmJqjvQsG46dkgnN6dMCKpTS223VGH1eLs28
4277+TswSOxy4xMJOjjiFTppG/244Oe/lDAy1Ec6Vo+b7qtpx226vWhVQTD7ROG+
EzQkW2At+El/CSU7t8MVu9KtEL22ob2FqfN+tfLxwik4OWa07zgzzY7uSamqWNW0
affTyPLR/wCPSkPldZR8dnXPt0SJlfEdG7uS3zuxtkQkPamQJOoNTVMQeYVGcjZU
+7BsbPzlT5BeDQ==
-----END CERTIFICATE-----