Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File:                     C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier:          EBQ6mCTmwtv0La5LR2cimcglp/4prX/ITpg/GL/R6vc=
Subject key identifier:   A2:B4:C3:B4:0E:49:DD:C6:E0:52:92:12:7B:50:4B:4C:35:E8:4C:E2
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer:       /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial:       01962E99A9A1A5551144CE76EDB922DE8230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number:          0BB9
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
                          2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: 1x8PeeZGMVy8ZoGcNcuB87lphob63+RjOSxZwnUrIYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a9:a1:a5:55:11:44:ce:76:ed:b9:22:de:82:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=a2b4c3b40e49ddc6e05292127b504b4c35e84ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:ef:99:3c:7d:a7:72:ce:52:76:95:aa:af:
                    a4:9b:7d:d0:ec:74:be:3e:b0:65:d2:53:5c:3e:e0:
                    c3:95:a6:6b:a3:46:b4:50:9a:71:6e:80:c1:f5:7e:
                    6b:a7:93:ab:13:57:01:75:2a:b6:30:e2:be:7d:3e:
                    f9:cc:37:4f:b6:30:20:ee:b3:7e:f2:c1:a2:53:ab:
                    5a:33:a4:74:b8:0c:0c:d4:50:53:d9:45:26:aa:90:
                    15:c6:81:4a:d8:30:b5:dd:bf:ad:44:5f:e8:67:d4:
                    de:c0:64:23:be:23:81:ea:2b:11:7b:e8:b7:08:cb:
                    8c:55:88:99:76:42:09:28:72:2d:36:39:44:55:d5:
                    da:3d:f0:36:62:13:15:75:cb:b0:df:87:77:57:20:
                    aa:6d:6b:85:ca:fd:a1:4e:72:f6:9f:b9:d1:0c:64:
                    2e:2d:08:47:83:3f:e2:7f:f0:e5:70:17:a8:53:07:
                    33:92:99:ca:45:96:ff:dc:cd:cf:7d:c8:4d:05:1a:
                    60:69:ec:3b:9f:5e:79:79:53:aa:71:52:bf:5c:72:
                    35:93:82:f7:b4:56:14:c8:db:5a:d6:8d:58:53:40:
                    c6:1e:2c:5e:a1:60:02:8e:2c:78:62:cf:7b:9f:f0:
                    e6:dd:5b:7b:ce:1c:5a:0e:fc:61:3a:03:7f:08:f0:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B4:C3:B4:0E:49:DD:C6:E0:52:92:12:7B:50:4B:4C:35:E8:4C:E2
            X509v3 Authority Key Identifier:
                keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:ff:7f:09:a8:e4:56:d4:4f:6b:fc:2b:93:c7:38:81:f3:
         b7:73:94:fe:19:b7:9a:9c:02:93:4a:ca:2d:9a:3a:0a:ff:9e:
         f9:3d:9f:e0:33:2d:3f:4e:6f:41:c5:0f:be:4d:ba:3f:88:93:
         a7:40:c9:c3:1a:53:06:1b:b0:81:20:36:03:b5:37:1a:d5:01:
         cf:36:70:62:57:11:45:d8:3f:d7:5d:4b:01:66:3a:eb:26:2a:
         c2:18:e4:51:c4:02:c8:5a:8d:59:9c:b3:16:38:70:91:f6:00:
         51:b8:2f:71:ea:65:06:ff:52:e5:49:e2:54:ec:ec:49:cf:8c:
         7e:00:aa:bf:00:84:55:68:5e:99:57:22:12:3f:3f:f5:4e:62:
         f7:1b:42:e3:82:cb:30:78:5a:b2:e7:2e:84:a5:1d:1f:dd:11:
         aa:c2:e7:ec:09:1d:c4:5a:3e:62:f4:45:6e:e0:54:e1:6e:15:
         9b:5c:db:f1:53:70:71:25:b9:7a:f3:e6:13:c4:9a:04:6f:b1:
         ca:28:54:96:c5:48:6b:d9:89:81:fa:ee:39:3f:52:e8:2d:ae:
         47:22:46:7e:45:79:32:fc:8e:ad:8e:7f:b5:97:bc:d1:3b:7a:
         aa:a8:c1:66:75:a3:bb:dc:0a:23:8e:6c:53:ce:93:7f:96:90:
         ec:c8:d2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumamhpVURRM527bki3oIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh
NGQ2MzUwHhcNMjUwNDEzMTAwMjI0WhcNMjUwNDE0MTAwMjI0WjAzMTEwLwYDVQQD
EyhhMmI0YzNiNDBlNDlkZGM2ZTA1MjkyMTI3YjUwNGI0YzM1ZTg0Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KLvmTx9p3LOUnaVqq+km33Q7HS+
PrBl0lNcPuDDlaZro0a0UJpxboDB9X5rp5OrE1cBdSq2MOK+fT75zDdPtjAg7rN+
8sGiU6taM6R0uAwM1FBT2UUmqpAVxoFK2DC13b+tRF/oZ9TewGQjviOB6isRe+i3
CMuMVYiZdkIJKHItNjlEVdXaPfA2YhMVdcuw34d3VyCqbWuFyv2hTnL2n7nRDGQu
LQhHgz/if/DlcBeoUwczkpnKRZb/3M3PfchNBRpgaew7n155eVOqcVK/XHI1k4L3
tFYUyNta1o1YU0DGHixeoWACjix4Ys97n/Dm3Vt7zhxaDvxhOgN/CPBHWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK0w7QOSd3G4FKSEntQS0w16EziMB8GA1UdIwQY
MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt
ZmMwMTQ4MTE5NjM4LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4
LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqan/fwmo
5FbUT2v8K5PHOIHzt3OU/hm3mpwCk0rKLZo6Cv+e+T2f4DMtP05vQcUPvk26P4iT
p0DJwxpTBhuwgSA2A7U3GtUBzzZwYlcRRdg/111LAWY66yYqwhjkUcQCyFqNWZyz
FjhwkfYAUbgvceplBv9S5UniVOzsSc+MfgCqvwCEVWhemVciEj8/9U5i9xtC44LL
MHhasucuhKUdH90RqsLn7AkdxFo+YvRFbuBU4W4Vm1zb8VNwcSW5evPmE8SaBG+x
yihUlsVIa9mJgfruOT9S6C2uRyJGfkV5MvyOrY5/tZe80Tt6qqjBZnWju9wKI45s
U86Tf5aQ7MjS+Q==
-----END CERTIFICATE-----