Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
File:                     USt7qR3DDrtBPNBVvUMpLi0UAY8.mft (raw, json)
Hash identifier:          4AvIBICqQR4AA1WRCc1cNynqOphGxR2brqW7PSC+k4g=
Subject key identifier:   E5:EB:F1:C0:62:EA:94:79:F8:44:DE:42:A9:9A:EE:C2:B2:8C:47:41
Authority key identifier: 51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
Certificate issuer:       /CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Certificate serial:       01962ECFD1C13A2E0CF0C90F8DFD7ECCC304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
Manifest number:          046D
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: USt7qR3DDrtBPNBVvUMpLi0UAY8.crl (hash: F1wlJPN5BwtY++gLu8D92KBBJgT6b5kQCe13i3Ui6HI=)
                          2: vloVVT9ufVGR6rj5SefMS3qmK1c.roa (hash: /V+TKP3WFA5NtQkzEdfMB+4hHPZcd6oAqeonzaeqn0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d1:c1:3a:2e:0c:f0:c9:0f:8d:fd:7e:cc:c3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=e5ebf1c062ea9479f844de42a99aeec2b28c4741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:48:77:b0:e7:86:bb:3b:a3:ad:24:94:71:
                    94:1f:1a:8b:ae:55:07:04:c0:b3:31:3b:3f:64:08:
                    35:9d:88:ae:4a:df:db:e0:30:d2:50:4d:ca:c5:23:
                    ec:61:93:77:d1:65:4e:f4:39:f4:80:6b:d4:ef:9b:
                    fe:fd:b4:bd:63:77:09:64:94:01:c2:9f:37:f9:94:
                    3f:06:9a:27:ec:19:b7:b6:2a:a8:59:dc:5f:c7:f2:
                    10:18:b1:97:cf:6b:7c:41:63:73:bd:ab:47:af:dd:
                    bb:a3:51:3c:bc:4b:54:46:e0:83:43:26:d7:1a:cf:
                    de:1e:1b:87:5e:ff:0a:d0:5c:08:16:17:66:2b:00:
                    eb:04:1b:3d:30:cd:2e:c3:f3:5a:40:c4:f2:6a:e3:
                    85:94:58:22:42:24:9d:f5:50:68:a4:74:60:5e:c2:
                    a4:13:e9:53:dc:9e:2d:bd:ef:34:12:f1:2b:00:ad:
                    09:45:8b:c2:6d:63:d8:39:87:fa:3a:fd:10:cc:79:
                    8c:53:ce:ca:04:eb:53:e1:5b:19:ec:29:49:95:55:
                    d0:8f:4b:94:53:d9:64:89:0e:30:55:5b:62:f2:83:
                    7f:70:0b:41:08:cf:1c:f0:3c:80:09:e3:50:0b:4d:
                    40:18:44:f4:ef:44:6f:2f:f0:6b:70:a4:9a:f6:0d:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:F1:C0:62:EA:94:79:F8:44:DE:42:A9:9A:EE:C2:B2:8C:47:41
            X509v3 Authority Key Identifier:
                keyid:51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:31:b0:fc:d1:6a:c0:38:6b:fb:fb:d8:e7:e3:db:dd:9c:76:
         00:6a:2f:d5:ba:37:98:08:5b:27:38:5d:45:bd:fa:3f:3e:75:
         40:64:21:ec:1a:55:1b:6e:b3:db:e7:b8:3a:15:59:73:18:7e:
         12:55:75:c9:73:39:ec:89:3f:ae:76:b6:d9:c5:44:bd:b0:f6:
         89:2a:7b:da:55:40:6e:2c:b0:67:75:8e:66:05:c3:50:0d:9c:
         98:f7:53:ba:ea:ba:79:c8:45:d7:9b:04:be:16:8f:7b:8f:7a:
         b1:43:71:b6:21:14:66:be:ba:cf:d5:de:2c:58:36:55:73:c9:
         81:aa:4f:ec:a7:44:96:20:46:b3:61:3f:86:7e:f9:00:12:64:
         ce:b1:11:1a:8a:42:76:c4:2d:46:44:d5:20:89:7e:8b:33:cf:
         6b:29:26:92:6d:43:07:bd:1d:4b:16:ab:32:78:7a:54:b1:ee:
         9c:c7:20:64:f0:b6:d9:03:31:74:62:0f:97:49:4b:50:c4:aa:
         15:e2:0a:fa:b5:fa:d1:89:18:c0:b7:4c:94:bb:92:f1:f5:3f:
         bb:c7:75:81:55:0b:07:62:11:1e:9d:22:58:56:c9:93:32:8c:
         a1:27:26:fe:ae:34:a8:50:16:bd:9d:68:ab:91:b0:0c:20:bb:
         0a:f0:75:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9HBOi4M8MkPjf1+zMMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMmI3YmE5MWRjMzBlYmI0MTNjZDA1NWJkNDMyOTJlMmQx
NDAxOGYwHhcNMjUwNDEzMTEwMTMzWhcNMjUwNDE0MTEwMTMzWjAzMTEwLwYDVQQD
EyhlNWViZjFjMDYyZWE5NDc5Zjg0NGRlNDJhOTlhZWVjMmIyOGM0NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXNId7Dnhrs7o60klHGUHxqLrlUH
BMCzMTs/ZAg1nYiuSt/b4DDSUE3KxSPsYZN30WVO9Dn0gGvU75v+/bS9Y3cJZJQB
wp83+ZQ/Bpon7Bm3tiqoWdxfx/IQGLGXz2t8QWNzvatHr927o1E8vEtURuCDQybX
Gs/eHhuHXv8K0FwIFhdmKwDrBBs9MM0uw/NaQMTyauOFlFgiQiSd9VBopHRgXsKk
E+lT3J4tve80EvErAK0JRYvCbWPYOYf6Ov0QzHmMU87KBOtT4VsZ7ClJlVXQj0uU
U9lkiQ4wVVti8oN/cAtBCM8c8DyACeNQC01AGET070RvL/BrcKSa9g3bxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXr8cBi6pR5+ETeQqma7sKyjEdBMB8GA1UdIwQY
MBaAFFEre6kdww67QTzQVb1DKS4tFAGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEt
MTY3Mzc0OWJjZWVjLzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82M2ZlOWUtNjBhMC00ZjgwLThjMDEtMTY3Mzc0OWJjZWVj
LzEvVVN0N3FSM0REcnRCUE5CVnZVTXBMaTBVQVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTGw/NFq
wDhr+/vY5+Pb3Zx2AGov1bo3mAhbJzhdRb36Pz51QGQh7BpVG26z2+e4OhVZcxh+
ElV1yXM57Ik/rna22cVEvbD2iSp72lVAbiywZ3WOZgXDUA2cmPdTuuq6echF15sE
vhaPe496sUNxtiEUZr66z9XeLFg2VXPJgapP7KdEliBGs2E/hn75ABJkzrERGopC
dsQtRkTVIIl+izPPaykmkm1DB70dSxarMnh6VLHunMcgZPC22QMxdGIPl0lLUMSq
FeIK+rX60YkYwLdMlLuS8fU/u8d1gVULB2IRHp0iWFbJkzKMoScm/q40qFAWvZ1o
q5GwDCC7CvB1lQ==
-----END CERTIFICATE-----