Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File:                     tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier:          uNDLYuUaCIaU7a2XgoSX+kOuoNWi7ORvgkt/qdY0Oj8=
Subject key identifier:   59:0F:20:7C:88:0C:7F:83:1D:62:09:69:3F:1E:CA:B3:E7:19:DF:92
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer:       /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial:       01962E62168087A3C7FA805CBBDB49241036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:42 +0000
Files and hashes:         1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
                          2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: MhTZMW1IDwgQ+UZX0K7tUCJBRkYk4u0LbVWluHzfqLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:16:80:87:a3:c7:fa:80:5c:bb:db:49:24:10:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b46320188098520c366277f749a4f77a1d444439
        Validity
            Not Before: Apr 13 09:01:42 2025 GMT
            Not After : Apr 14 09:01:42 2025 GMT
        Subject: CN=590f207c880c7f831d6209693f1ecab3e719df92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:88:49:95:40:42:e9:11:50:98:1e:d5:e1:57:
                    70:48:e9:1c:33:ed:65:6f:d5:f4:d9:57:95:bc:10:
                    fd:31:ce:7b:d8:56:dc:7f:30:62:3d:f9:f7:dd:92:
                    22:20:df:95:be:08:19:57:e5:e7:c8:78:90:e0:bb:
                    1e:c1:9c:18:94:f2:00:69:ff:dd:60:44:59:c4:c9:
                    6b:7e:c6:df:fe:d3:6c:50:8c:93:aa:3f:a1:69:39:
                    54:ae:60:af:21:8b:5d:85:b0:69:2b:d9:ba:d6:f1:
                    7e:51:62:51:a9:32:9f:ef:d4:ee:9a:58:b9:4d:ef:
                    4e:42:01:96:00:10:7d:55:d1:5e:83:68:20:d0:9f:
                    cd:a3:35:29:3f:bb:87:b8:1f:e3:fb:5b:02:7b:f5:
                    60:b7:0d:c1:96:e0:bd:46:99:e8:db:50:b2:57:f7:
                    f7:45:5e:40:59:db:58:36:52:72:ab:6f:cc:ff:53:
                    9b:d8:9b:28:79:dd:a7:21:33:b3:f3:bd:14:ee:7f:
                    42:d4:3a:ae:fc:12:79:82:d6:38:54:7e:ee:a1:76:
                    be:93:a0:1c:14:63:c1:82:09:44:36:bf:be:bb:04:
                    d7:df:67:f0:64:ff:69:df:e6:92:bb:de:d7:7e:ae:
                    78:2b:26:cb:a0:47:c8:59:4c:20:7c:ba:ea:a6:b1:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0F:20:7C:88:0C:7F:83:1D:62:09:69:3F:1E:CA:B3:E7:19:DF:92
            X509v3 Authority Key Identifier:
                keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:5c:32:73:a3:e3:5c:70:97:19:04:a4:85:25:08:28:1c:
         13:8c:5f:df:d1:a6:fe:e2:5d:00:e8:19:ed:3e:ee:71:d2:4f:
         0f:65:cf:1d:79:bd:fb:5a:db:5c:11:18:4b:91:1c:77:6a:2a:
         f9:fa:e7:11:a4:d3:9a:ed:d2:f3:a5:07:e8:59:3a:3d:37:c4:
         72:4c:de:0f:b1:34:66:73:d3:91:cb:a2:24:61:ca:1c:ab:2a:
         37:b8:27:6f:00:36:6a:70:ca:7c:b1:80:11:f7:e6:f5:24:89:
         88:65:e3:4d:e8:5f:98:d5:91:67:5d:fb:e9:00:0c:17:b4:8a:
         bd:df:7b:be:98:a7:a7:73:4f:ab:99:f3:ec:a5:ca:2a:93:04:
         b2:b2:fc:5b:b6:9b:f4:17:68:09:1d:4b:3c:0e:ec:80:33:d1:
         7d:6b:c8:5c:f1:3b:e0:dc:38:55:26:78:06:19:e8:0b:4e:8c:
         b0:ff:4c:f5:6f:3a:d5:7b:d1:23:f7:7a:22:8e:eb:2f:82:79:
         82:0d:3b:35:bb:dc:0d:4b:4f:19:df:76:12:de:fb:bb:31:98:
         0f:0d:40:47:d7:0e:14:5f:fe:33:12:a7:f5:49:53:21:ea:7c:
         52:22:71:2f:32:34:14:4b:2b:65:55:90:4d:85:d3:b6:4c:1c:
         33:7f:6a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYhaAh6PH+oBcu9tJJBA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjMyMDE4ODA5ODUyMGMzNjYyNzdmNzQ5YTRmNzdhMWQ0
NDQ0MzkwHhcNMjUwNDEzMDkwMTQyWhcNMjUwNDE0MDkwMTQyWjAzMTEwLwYDVQQD
Eyg1OTBmMjA3Yzg4MGM3ZjgzMWQ2MjA5NjkzZjFlY2FiM2U3MTlkZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YhJlUBC6RFQmB7V4VdwSOkcM+1l
b9X02VeVvBD9Mc572FbcfzBiPfn33ZIiIN+VvggZV+XnyHiQ4LsewZwYlPIAaf/d
YERZxMlrfsbf/tNsUIyTqj+haTlUrmCvIYtdhbBpK9m61vF+UWJRqTKf79Tumli5
Te9OQgGWABB9VdFeg2gg0J/NozUpP7uHuB/j+1sCe/Vgtw3BluC9Rpno21CyV/f3
RV5AWdtYNlJyq2/M/1Ob2Jsoed2nITOz870U7n9C1Dqu/BJ5gtY4VH7uoXa+k6Ac
FGPBgglENr++uwTX32fwZP9p3+aSu97Xfq54KybLoEfIWUwgfLrqprF6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkPIHyIDH+DHWIJaT8eyrPnGd+SMB8GA1UdIwQY
MBaAFLRjIBiAmFIMNmJ390mk93odREQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTkt
NjA4ZTdkNzc5YmM3LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTktNjA4ZTdkNzc5YmM3
LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuNcMnOj
41xwlxkEpIUlCCgcE4xf39Gm/uJdAOgZ7T7ucdJPD2XPHXm9+1rbXBEYS5Ecd2oq
+frnEaTTmu3S86UH6Fk6PTfEckzeD7E0ZnPTkcuiJGHKHKsqN7gnbwA2anDKfLGA
Effm9SSJiGXjTehfmNWRZ1376QAMF7SKvd97vpinp3NPq5nz7KXKKpMEsrL8W7ab
9BdoCR1LPA7sgDPRfWvIXPE74Nw4VSZ4BhnoC06MsP9M9W861XvRI/d6Io7rL4J5
gg07NbvcDUtPGd92Et77uzGYDw1AR9cOFF/+MxKn9UlTIep8UiJxLzI0FEsrZVWQ
TYXTtkwcM39qeg==
-----END CERTIFICATE-----