Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File:                     atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier:          dziwGLJgr5YLQ/Ak+bqy8W1Au3cfIAkz0Fsq5XCINAM=
Subject key identifier:   3C:0E:7B:25:6A:B3:4B:94:98:2F:94:FE:60:29:2B:0E:5A:CE:C8:B6
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer:       /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial:       01962ECFCFCCB9507EC9A14E8C6A702CC4C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number:          0132
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 7wo8i41Up9XbCW4B5tKeIytyMsA.roa (hash: yirWyb5pij+onS9AdwvB/WtmePzfdhsn+x4XqsoWk2E=)
                          2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: uPVmva95+T14M8ugKsibCG6dvae8pQTKqplrA+SBrFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:cc:b9:50:7e:c9:a1:4e:8c:6a:70:2c:c4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=3c0e7b256ab34b94982f94fe60292b0e5acec8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:c3:3e:6a:80:18:50:32:95:c8:48:d1:c4:
                    4c:5d:bc:9a:6a:9e:32:26:fc:e3:d1:df:74:07:2a:
                    16:d5:fe:0b:11:e9:2f:f6:4b:c2:0f:33:3f:a3:a0:
                    88:e9:a9:61:69:4c:b0:b0:73:32:ef:2d:37:e8:ed:
                    44:45:f1:08:0b:4a:c4:18:98:f8:ba:b7:ef:dd:38:
                    f9:77:b6:36:07:7e:b6:75:d8:a8:40:0c:89:f3:f0:
                    2b:85:9d:47:b2:27:db:5c:63:06:99:6a:a8:c2:f6:
                    ff:19:50:48:a8:03:c7:1c:d2:49:59:e2:55:4b:86:
                    d9:1b:ce:64:bb:6f:19:bf:06:5a:8d:69:2c:e6:96:
                    59:60:eb:a3:55:1e:e7:f2:ae:10:da:d8:6d:ec:e8:
                    ab:1c:45:09:ae:41:06:6d:b7:ee:30:4f:3b:6c:1d:
                    58:99:a9:20:97:02:b5:bf:51:ba:e1:87:57:a6:c0:
                    ad:19:0f:70:9d:24:a4:94:8e:89:09:6c:91:51:14:
                    36:b3:27:33:9c:0f:f6:0d:d3:ab:24:1a:57:5b:cd:
                    2b:6d:a0:8f:bc:6d:e2:4d:e2:9d:4e:6e:d1:a7:ab:
                    09:b1:e4:a9:eb:27:2a:30:c3:38:61:77:2b:8f:a1:
                    ca:1e:a5:a3:e9:25:e8:c0:36:59:c9:69:c8:cc:f3:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0E:7B:25:6A:B3:4B:94:98:2F:94:FE:60:29:2B:0E:5A:CE:C8:B6
            X509v3 Authority Key Identifier:
                keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:90:c4:4f:cd:d6:36:72:e3:73:b2:fa:f4:4a:1a:5f:00:49:
         12:83:f6:c6:17:bd:2b:79:c7:85:b1:03:1e:24:ed:29:49:12:
         e6:96:da:3c:00:86:25:6c:8b:1b:6a:96:23:1f:0b:73:3c:82:
         dc:6c:6a:c3:b3:87:70:ad:9e:87:b7:00:ba:08:0e:0a:fa:1f:
         95:8f:d9:76:0b:71:e6:62:5d:9c:c3:36:15:2f:92:85:9e:27:
         68:3d:3f:67:d9:f5:c5:b9:7a:3e:ae:b2:c3:03:12:14:66:35:
         0f:e8:a6:09:f8:69:8a:3d:3f:c1:26:81:45:72:71:bc:ae:fd:
         c4:be:fc:3a:bb:68:08:3d:d8:ca:2e:4c:59:93:85:15:02:8f:
         cc:47:e7:24:d0:2b:e1:73:ab:60:9c:0d:79:9d:c3:0a:a0:0a:
         9f:08:81:8d:ef:b5:0e:3b:5c:ad:0f:94:a1:88:77:77:72:05:
         5d:3d:6f:40:e5:5b:c8:16:54:e5:af:78:ed:7c:c8:bf:c2:ad:
         59:48:65:e3:82:3a:16:0a:97:38:6e:b8:5f:21:ea:7f:e1:f5:
         10:ce:b0:c4:7f:fa:e4:49:3b:bf:71:f9:d5:6a:33:54:99:10:
         c7:2e:f4:70:27:83:ee:98:5b:eb:c6:c5:d5:28:bc:43:85:7a:
         c8:88:5a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8/MuVB+yaFOjGpwLMTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDcwZWYyNWU1MjJjMGQyNmU5NzdhMWQyNGZmNzdlYWQz
YWRhMTkwHhcNMjUwNDEzMTEwMTMyWhcNMjUwNDE0MTEwMTMyWjAzMTEwLwYDVQQD
EygzYzBlN2IyNTZhYjM0Yjk0OTgyZjk0ZmU2MDI5MmIwZTVhY2VjOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTnDPmqAGFAylchI0cRMXbyaap4y
Jvzj0d90ByoW1f4LEekv9kvCDzM/o6CI6alhaUywsHMy7y036O1ERfEIC0rEGJj4
urfv3Tj5d7Y2B362ddioQAyJ8/ArhZ1HsifbXGMGmWqowvb/GVBIqAPHHNJJWeJV
S4bZG85ku28ZvwZajWks5pZZYOujVR7n8q4Q2tht7OirHEUJrkEGbbfuME87bB1Y
makglwK1v1G64YdXpsCtGQ9wnSSklI6JCWyRURQ2sycznA/2DdOrJBpXW80rbaCP
vG3iTeKdTm7Rp6sJseSp6ycqMMM4YXcrj6HKHqWj6SXowDZZyWnIzPMwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwOeyVqs0uUmC+U/mApKw5azsi2MB8GA1UdIwQY
MBaAFGrXDvJeUiwNJul3odJP936tOtoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYt
OTQwNGUxNzcyMDBlLzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYtOTQwNGUxNzcyMDBl
LzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZDET83W
NnLjc7L69EoaXwBJEoP2xhe9K3nHhbEDHiTtKUkS5pbaPACGJWyLG2qWIx8LczyC
3Gxqw7OHcK2eh7cAuggOCvoflY/Zdgtx5mJdnMM2FS+ShZ4naD0/Z9n1xbl6Pq6y
wwMSFGY1D+imCfhpij0/wSaBRXJxvK79xL78OrtoCD3Yyi5MWZOFFQKPzEfnJNAr
4XOrYJwNeZ3DCqAKnwiBje+1DjtcrQ+UoYh3d3IFXT1vQOVbyBZU5a947XzIv8Kt
WUhl44I6FgqXOG64XyHqf+H1EM6wxH/65Ek7v3H51WozVJkQxy70cCeD7phb68bF
1Si8Q4V6yIhaPw==
-----END CERTIFICATE-----