Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          NoDV5pRcsR9QACfVz1FSFqHEq9+hjv3W4FrKH386DJA=
Subject key identifier:   3D:60:84:B7:AE:CD:64:A9:44:93:2A:D7:ED:91:33:94:11:86:83:28
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       01962FABA6EFE3C168175A0431B40162C1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          09B4
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: dTW+axOVpyKWDWfFkAqnJlnnvOyix2lyj+ZfjGToQhU=)
                          2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a6:ef:e3:c1:68:17:5a:04:31:b4:01:62:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=3d6084b7aecd64a944932ad7ed91339411868328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:00:8e:10:fc:98:7a:08:29:8a:60:a8:20:
                    50:44:4e:40:0f:24:2c:62:c5:2e:cc:e6:be:0a:26:
                    f8:63:66:94:17:36:67:ba:f9:5f:9f:5d:62:f4:8c:
                    c9:b9:2c:95:97:7d:93:2d:06:c6:3c:f3:fe:e3:4a:
                    47:d4:f1:07:c7:2f:14:a7:6b:87:4a:c1:e5:6f:da:
                    89:bc:be:df:3f:a3:8e:04:d7:75:a0:a9:0d:41:7f:
                    5e:8b:f4:49:de:41:75:4f:d7:22:02:87:68:bd:01:
                    13:11:5c:a2:62:c5:34:b3:ac:7a:45:bd:e2:69:c0:
                    f3:51:70:e5:9a:a0:84:ae:d5:36:2c:df:d1:f4:96:
                    b4:fe:3b:29:b7:a2:21:31:d7:15:29:f1:c0:b9:91:
                    34:69:6e:70:22:50:26:72:60:f1:75:a5:b3:7a:16:
                    5d:db:80:f0:48:8e:3d:95:31:b0:3d:e5:7d:19:68:
                    37:33:08:fe:a8:c8:24:92:45:a5:0a:c6:c3:0b:5f:
                    82:90:60:ea:ee:e4:b6:3d:d6:75:f4:44:c4:d9:93:
                    cb:9a:d4:66:3c:7b:d0:26:e2:f6:c9:12:42:25:92:
                    e8:e2:da:a3:2e:f1:33:c6:0b:2f:b6:46:a7:73:cb:
                    5a:8c:d3:ef:f4:81:9b:47:fa:41:71:7d:5d:42:96:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:84:B7:AE:CD:64:A9:44:93:2A:D7:ED:91:33:94:11:86:83:28
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:1d:5d:cc:f3:48:0f:0a:1d:30:46:3f:50:a9:51:82:83:
         63:3c:6b:09:d4:a9:ad:56:46:00:e9:9a:f1:c3:06:92:c6:86:
         8a:d4:fc:e3:a8:c6:05:e3:7a:eb:2e:7d:a2:de:78:64:7e:1d:
         5b:12:fa:46:03:07:b9:4d:16:ec:2f:67:0f:15:24:64:48:9a:
         21:37:bb:9a:c8:45:78:0f:f2:ec:26:4a:cc:e1:e2:f1:e6:d4:
         05:03:a7:3b:66:f5:f7:2b:8f:24:e5:de:af:43:bc:5e:23:79:
         03:0e:80:75:fe:e1:bb:31:ea:2b:0b:d8:48:45:a5:b7:06:95:
         9e:a9:05:36:24:cf:77:fe:4e:e5:a4:9d:3a:a7:bd:59:27:00:
         f0:c6:76:41:e0:b7:93:9f:ba:3b:5d:3f:03:71:f2:31:69:68:
         83:a5:ad:79:0c:ea:63:cc:8c:1b:3e:5f:99:98:c8:74:09:13:
         26:f7:29:13:b8:2a:41:18:a6:a6:98:c6:43:59:85:f3:ea:f4:
         e3:a2:fe:cd:b2:1b:a6:78:d7:00:4b:57:03:b8:74:81:ab:33:
         63:ae:7a:69:25:8b:c8:fb:30:9d:f8:f3:71:78:34:9f:5b:2c:
         4a:c4:09:0b:e3:27:81:49:91:24:af:c7:54:8e:da:0e:65:72:
         bc:bc:4c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6bv48FoF1oEMbQBYsHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz
NmVjZDQwHhcNMjUwNDEzMTUwMTQwWhcNMjUwNDE0MTUwMTQwWjAzMTEwLwYDVQQD
EygzZDYwODRiN2FlY2Q2NGE5NDQ5MzJhZDdlZDkxMzM5NDExODY4MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzkAjhD8mHoIKYpgqCBQRE5ADyQs
YsUuzOa+Cib4Y2aUFzZnuvlfn11i9IzJuSyVl32TLQbGPPP+40pH1PEHxy8Up2uH
SsHlb9qJvL7fP6OOBNd1oKkNQX9ei/RJ3kF1T9ciAodovQETEVyiYsU0s6x6Rb3i
acDzUXDlmqCErtU2LN/R9Ja0/jspt6IhMdcVKfHAuZE0aW5wIlAmcmDxdaWzehZd
24DwSI49lTGwPeV9GWg3Mwj+qMgkkkWlCsbDC1+CkGDq7uS2PdZ19ETE2ZPLmtRm
PHvQJuL2yRJCJZLo4tqjLvEzxgsvtkanc8tajNPv9IGbR/pBcX1dQpZ/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1ghLeuzWSpRJMq1+2RM5QRhoMoMB8GA1UdIwQY
MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt
ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3
LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy0dXczz
SA8KHTBGP1CpUYKDYzxrCdSprVZGAOma8cMGksaGitT846jGBeN66y59ot54ZH4d
WxL6RgMHuU0W7C9nDxUkZEiaITe7mshFeA/y7CZKzOHi8ebUBQOnO2b19yuPJOXe
r0O8XiN5Aw6Adf7huzHqKwvYSEWltwaVnqkFNiTPd/5O5aSdOqe9WScA8MZ2QeC3
k5+6O10/A3HyMWlog6WteQzqY8yMGz5fmZjIdAkTJvcpE7gqQRimppjGQ1mF8+r0
46L+zbIbpnjXAEtXA7h0gaszY656aSWLyPswnfjzcXg0n1ssSsQJC+MngUmRJK/H
VI7aDmVyvLxMwA==
-----END CERTIFICATE-----