Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File:                     xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier:          rYURhbzJgBSwQjx+/oFBrqQpQSS98DhRM4/KuNouBQ4=
Subject key identifier:   46:57:1B:73:10:6F:85:F8:7D:80:19:F2:A6:C1:76:E3:14:13:4C:06
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer:       /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial:       01962F7499036D50E940DCAC8F45448860A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number:          10E6
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
                          2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: 77VBi0oLS0B5R7MGzbevyJlOSgnBwWPWCXztEZRUtlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:03:6d:50:e9:40:dc:ac:8f:45:44:88:60:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=46571b73106f85f87d8019f2a6c176e314134c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:6d:79:b9:8c:2e:eb:d9:c5:93:2d:5c:35:
                    12:4e:a6:48:80:8e:4f:80:e6:6d:72:d1:4b:73:ec:
                    af:cf:6f:02:1c:a1:d6:4f:2c:95:c3:64:aa:01:56:
                    11:72:e7:93:98:ca:ed:ca:31:3a:d3:3c:b3:fe:63:
                    24:ca:e0:01:26:a1:c2:51:10:6b:07:6d:0d:d1:b1:
                    c9:9e:13:83:4e:b5:a8:bd:ed:6b:1d:ac:18:43:3b:
                    ce:03:84:e7:0b:b9:da:df:25:9b:06:a1:d6:cd:4e:
                    2c:3f:3c:41:63:6a:1d:9f:45:dc:da:89:b4:fc:a8:
                    8f:5b:03:7c:e6:b0:ab:83:18:e1:40:c4:4c:74:50:
                    39:2b:a2:e0:c1:b2:b4:4b:8a:78:fa:49:97:3f:54:
                    79:96:db:ba:79:33:9d:cb:8e:e5:9f:08:8e:06:cf:
                    2e:a0:61:c7:dd:1c:36:96:fe:e3:32:14:2f:17:23:
                    60:a2:e7:f8:89:21:c6:68:e1:f0:93:b0:66:81:93:
                    0a:b3:3b:03:e2:d6:5e:cf:2a:02:a9:98:04:37:72:
                    66:8f:c8:d3:23:41:f6:11:ec:11:db:15:ac:2f:bc:
                    7a:92:d3:15:4b:e7:ba:2d:2f:08:60:af:2e:93:6f:
                    95:40:7c:98:d0:f1:24:ca:1a:2a:83:cc:e7:96:bc:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:1B:73:10:6F:85:F8:7D:80:19:F2:A6:C1:76:E3:14:13:4C:06
            X509v3 Authority Key Identifier:
                keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:b8:88:6a:44:32:68:2b:e0:8b:26:55:de:15:8b:f7:ae:
         07:d2:a7:d2:9d:e4:23:a3:fb:09:42:b0:5d:38:eb:78:b1:1a:
         5f:94:69:bc:bf:57:9f:32:40:ac:10:ab:16:89:14:2c:8b:91:
         ca:b6:3a:3f:ce:6b:ed:51:d2:ce:7b:2e:8c:1c:74:88:b2:b4:
         8d:eb:7a:1b:3d:42:6a:0c:e5:1f:93:9c:ee:a4:c0:21:76:11:
         88:91:c9:18:7a:5e:e5:1f:06:cb:98:b8:fb:b0:db:61:35:04:
         4e:57:9b:56:4a:c6:8d:c6:7e:45:d0:0c:30:99:c9:37:3d:66:
         de:b9:f3:e2:13:99:94:3b:ea:4d:37:f8:5d:31:29:02:01:03:
         4f:02:55:f1:d2:da:48:4b:0c:ac:21:90:33:3c:03:42:a1:53:
         27:3b:57:c6:ee:d0:8e:14:85:33:67:94:5c:7b:7d:d1:8d:9e:
         b3:57:59:82:28:a7:e9:15:76:4b:75:e0:a4:51:e2:2c:4d:93:
         13:19:b1:43:ef:0a:25:41:90:2c:fe:7a:e3:78:0c:35:fd:d8:
         0b:b0:8c:1e:0e:b0:b5:16:e1:8d:d8:af:61:c7:32:76:97:32:
         25:10:7b:d6:fe:19:b4:5d:52:65:c0:99:7d:8c:53:45:dd:29:
         b5:10:6b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJkDbVDpQNysj0VEiGCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MmYwODAzYzQyOThlMTU2ZDU2M2JkNGYyMDdjYjViODM2
MTAyNmUwHhcNMjUwNDEzMTQwMTMyWhcNMjUwNDE0MTQwMTMyWjAzMTEwLwYDVQQD
Eyg0NjU3MWI3MzEwNmY4NWY4N2Q4MDE5ZjJhNmMxNzZlMzE0MTM0YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVttebmMLuvZxZMtXDUSTqZIgI5P
gOZtctFLc+yvz28CHKHWTyyVw2SqAVYRcueTmMrtyjE60zyz/mMkyuABJqHCURBr
B20N0bHJnhODTrWove1rHawYQzvOA4TnC7na3yWbBqHWzU4sPzxBY2odn0Xc2om0
/KiPWwN85rCrgxjhQMRMdFA5K6LgwbK0S4p4+kmXP1R5ltu6eTOdy47lnwiOBs8u
oGHH3Rw2lv7jMhQvFyNgouf4iSHGaOHwk7BmgZMKszsD4tZezyoCqZgEN3Jmj8jT
I0H2EewR2xWsL7x6ktMVS+e6LS8IYK8uk2+VQHyY0PEkyhoqg8znlrwn6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZXG3MQb4X4fYAZ8qbBduMUE0wGMB8GA1UdIwQY
MBaAFMYvCAPEKY4VbVY71PIHy1uDYQJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWIt
M2RlYmExNjY2ZTliLzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWItM2RlYmExNjY2ZTli
LzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+e4iGpE
Mmgr4IsmVd4Vi/euB9Kn0p3kI6P7CUKwXTjreLEaX5RpvL9XnzJArBCrFokULIuR
yrY6P85r7VHSznsujBx0iLK0jet6Gz1CagzlH5Oc7qTAIXYRiJHJGHpe5R8Gy5i4
+7DbYTUETlebVkrGjcZ+RdAMMJnJNz1m3rnz4hOZlDvqTTf4XTEpAgEDTwJV8dLa
SEsMrCGQMzwDQqFTJztXxu7QjhSFM2eUXHt90Y2es1dZgiin6RV2S3XgpFHiLE2T
ExmxQ+8KJUGQLP5643gMNf3YC7CMHg6wtRbhjdivYccydpcyJRB71v4ZtF1SZcCZ
fYxTRd0ptRBrZQ==
-----END CERTIFICATE-----