Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
File:                     c3PB_1VAPUeSNGST92n40DO-8Cw.mft (raw, json)
Hash identifier:          HgLuBnaMfkEjHRw2qkKa1NQ4D0BWemuILarHWS+0SRw=
Subject key identifier:   B2:CC:49:6C:AF:61:F9:FC:55:CC:BC:47:53:84:9F:82:32:F9:78:26
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       01962E2AF9820DD99ADE2D4D6E72499078EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: NGx97u5kA3dUDgSnZsO_ai0a5zE.roa (hash: NM6MYaekH4qBVbHzQFehYG5HnPWSemWzqr91LDcaFoc=)
                          2: _VuqWh_9zLum_t2LzmiL-bKUpwU.roa (hash: fjTMbmjav2QqlRjLRKV5RKbBW9ZGH9k7F0uicD/W2jc=)
                          3: c3PB_1VAPUeSNGST92n40DO-8Cw.crl (hash: x2RFKjVVDUj+CtMjx47H5mHfISZCrUPQaoSL7MS+LL4=)
                          4: dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa (hash: JZO95le0AT9qZyGk77wE0TYV+xtaUVyy4hxb89m5QEk=)
                          5: vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa (hash: s+4rmOMySoNQOi+H+sRt31xxTfChmW9KgSsCZve3tZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f9:82:0d:d9:9a:de:2d:4d:6e:72:49:90:78:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=b2cc496caf61f9fc55ccbc4753849f8232f97826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:83:71:17:9e:70:35:4b:03:d9:c0:1a:65:
                    cf:1f:b1:26:84:4b:bc:e7:27:c1:e6:5e:52:30:29:
                    5d:07:e5:5f:f2:c9:05:34:ae:6b:cc:2d:6e:29:ca:
                    66:78:11:57:4d:fb:c5:32:bd:c6:51:68:48:d8:a8:
                    6b:66:d8:9c:0e:31:62:ad:2b:a8:af:87:fb:e3:79:
                    db:60:c2:65:6f:45:83:9b:c2:85:2f:0e:ee:c2:90:
                    70:bd:ea:ca:f4:ec:96:b5:b9:fc:b1:90:9e:01:37:
                    c0:58:16:5a:2a:90:34:e8:3d:fb:bd:58:ac:17:01:
                    37:15:24:6f:a5:2f:43:9d:bc:8d:55:54:58:6f:94:
                    f0:a3:58:c9:ea:9f:5a:04:c2:11:a5:a9:55:b7:f9:
                    c0:47:e7:13:56:5f:e0:e0:03:9a:72:0d:c8:e7:8d:
                    25:d3:d5:b9:47:91:9a:da:a9:4e:3d:6f:6c:16:9d:
                    ef:37:f4:5b:3c:65:7a:c9:8c:55:d2:55:84:aa:4b:
                    e7:5e:0b:c7:a0:3e:d0:fd:84:3e:1a:38:c8:3d:fb:
                    e6:a1:72:db:b0:3d:58:6d:b7:ce:c0:25:38:68:57:
                    59:cb:0b:fe:9f:01:c7:7b:5f:be:be:0b:f3:93:50:
                    62:75:87:99:4e:99:b6:c7:92:3e:1b:99:d2:91:c9:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:49:6C:AF:61:F9:FC:55:CC:BC:47:53:84:9F:82:32:F9:78:26
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:2a:0c:eb:d9:4d:5a:d7:59:bd:ad:61:24:b3:3d:40:3d:
         52:17:db:bc:ce:01:32:a0:5b:01:eb:15:ac:3e:8d:35:69:af:
         e2:40:b1:5e:d5:62:85:96:8b:f2:5e:ee:9a:86:14:e6:32:da:
         46:94:57:81:b0:35:8e:28:9e:5b:37:d6:67:1a:55:51:41:3d:
         de:38:8d:17:46:c1:84:60:08:c2:cb:80:86:21:6f:b8:94:11:
         cc:24:f0:27:54:44:02:4c:0c:74:58:c0:8f:29:5c:67:0c:0e:
         20:45:94:4c:bb:71:23:bf:00:10:fc:53:6a:81:2b:0a:be:da:
         82:f2:aa:f3:8d:fa:04:8e:16:2f:82:09:50:2c:9b:4c:b2:52:
         c1:2b:d3:e1:ad:48:38:01:4c:70:af:b5:fa:be:46:23:7d:fe:
         37:2c:20:66:62:dd:96:e6:29:a7:9e:05:8c:91:94:ab:c2:b1:
         ea:e3:e6:eb:db:a7:c1:32:e9:0d:37:33:96:5f:da:5d:7b:8f:
         3e:87:ae:26:71:ac:3c:74:86:4e:02:8e:45:7b:41:d4:f2:1d:
         be:ca:4b:e0:a7:7c:d1:09:17:63:c5:8b:69:7d:12:2b:30:de:
         a8:3f:e7:27:0e:01:01:d5:5e:ea:0e:e4:94:b3:0d:01:6c:19:
         ae:27:8d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvmCDdma3i1NbnJJkHjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi
ZWYwMmMwHhcNMjUwNDEzMDgwMTMwWhcNMjUwNDE0MDgwMTMwWjAzMTEwLwYDVQQD
EyhiMmNjNDk2Y2FmNjFmOWZjNTVjY2JjNDc1Mzg0OWY4MjMyZjk3ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUCDcReecDVLA9nAGmXPH7EmhEu8
5yfB5l5SMCldB+Vf8skFNK5rzC1uKcpmeBFXTfvFMr3GUWhI2KhrZticDjFirSuo
r4f743nbYMJlb0WDm8KFLw7uwpBwverK9OyWtbn8sZCeATfAWBZaKpA06D37vVis
FwE3FSRvpS9DnbyNVVRYb5Two1jJ6p9aBMIRpalVt/nAR+cTVl/g4AOacg3I540l
09W5R5Ga2qlOPW9sFp3vN/RbPGV6yYxV0lWEqkvnXgvHoD7Q/YQ+GjjIPfvmoXLb
sD1YbbfOwCU4aFdZywv+nwHHe1++vgvzk1BidYeZTpm2x5I+G5nSkckJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLMSWyvYfn8Vcy8R1OEn4Iy+XgmMB8GA1UdIwQY
MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt
YmM5YTVmNjYwNWZjLzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMtYmM5YTVmNjYwNWZj
LzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqkqDOvZ
TVrXWb2tYSSzPUA9UhfbvM4BMqBbAesVrD6NNWmv4kCxXtVihZaL8l7umoYU5jLa
RpRXgbA1jiieWzfWZxpVUUE93jiNF0bBhGAIwsuAhiFvuJQRzCTwJ1REAkwMdFjA
jylcZwwOIEWUTLtxI78AEPxTaoErCr7agvKq8436BI4WL4IJUCybTLJSwSvT4a1I
OAFMcK+1+r5GI33+NywgZmLdluYpp54FjJGUq8Kx6uPm69unwTLpDTczll/aXXuP
PoeuJnGsPHSGTgKORXtB1PIdvspL4Kd80QkXY8WLaX0SKzDeqD/nJw4BAdVe6g7k
lLMNAWwZrieNsg==
-----END CERTIFICATE-----