Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File:                     RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier:          TI6s+5h9+1b+CXA/2v+XsU2Jjp+r6vagV8Ke6B2alQI=
Subject key identifier:   FC:3D:51:61:C4:19:F9:B1:74:84:EF:22:94:21:95:D7:9D:F5:D0:32
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer:       /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial:       01962E61E8929A6F8FF7A68A5E1483EAFD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number:          033F
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
                          2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
                          3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: 53iCNdE1siYGDLGOc9MZZsxgw5rtHqGnLaitJwv0kZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e8:92:9a:6f:8f:f7:a6:8a:5e:14:83:ea:fd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452e7d87922129df90c4870da2a7738404724858
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=fc3d5161c419f9b17484ef22942195d79df5d032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:0f:49:f2:dd:f2:8a:6c:90:04:5f:0c:cd:
                    0a:40:b9:a7:9e:f9:64:e0:8b:41:76:23:9a:04:b1:
                    35:e0:9e:31:b0:f2:03:14:f4:46:9f:9b:c3:f8:56:
                    53:8e:23:db:3e:04:52:28:1d:96:31:10:d5:15:54:
                    0d:1d:50:a5:b6:2d:59:77:e0:54:51:3a:9e:c2:17:
                    1e:a0:31:db:44:a1:84:15:6b:b0:e6:c8:c7:c2:38:
                    c9:70:37:61:5c:85:d3:30:3a:b8:89:bc:9d:04:5b:
                    79:6c:57:c1:ae:51:b5:f4:72:44:af:20:6a:9a:89:
                    c8:d5:4d:62:60:a0:c0:71:bd:bd:ef:12:f6:59:4f:
                    b0:0a:58:50:32:fe:2c:c3:29:29:3d:d8:92:38:08:
                    25:f3:2a:62:38:bb:c2:50:9f:da:15:0b:88:fc:96:
                    e9:0f:2f:f5:5d:f4:7d:b3:32:ca:6d:a1:1f:85:53:
                    be:60:ed:cd:df:e8:c1:99:7a:8d:90:06:db:65:e3:
                    fb:3e:c9:3a:db:63:ef:a3:8d:12:41:00:d8:6e:14:
                    b5:67:3d:63:dc:e4:72:75:c5:e7:98:95:0b:83:95:
                    67:05:87:42:94:7b:dc:c9:dc:9e:7c:a2:c3:1c:a1:
                    76:32:3e:39:32:31:de:3b:7c:cb:83:04:0e:9a:13:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:51:61:C4:19:F9:B1:74:84:EF:22:94:21:95:D7:9D:F5:D0:32
            X509v3 Authority Key Identifier:
                keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:7b:88:73:ab:b2:f0:16:dd:6b:f5:2b:43:ea:a3:9d:6e:
         19:4a:29:12:76:e9:1f:62:e4:46:60:be:b8:03:39:4f:c0:46:
         f8:9a:dc:d4:b0:05:72:bf:1c:bd:74:58:89:3a:3d:f8:79:e5:
         af:76:3c:8d:1f:db:96:2a:af:75:92:c0:9f:a7:16:cf:81:8b:
         de:1c:82:9b:ae:9c:af:b0:3e:7d:14:12:75:97:fa:46:aa:f7:
         3f:1e:2a:a2:12:f7:df:b2:9f:b7:cf:17:3b:70:8f:04:33:ea:
         04:6a:c7:0a:66:4a:2c:67:4f:d1:17:53:8d:11:bd:bb:68:fa:
         af:ee:43:ad:b3:fd:4b:f1:5a:5b:d2:41:83:62:6e:00:32:65:
         df:22:7f:ca:38:e8:02:cc:b8:1a:d4:f6:c1:a2:d9:15:84:b9:
         78:47:74:c9:6a:3d:aa:c9:fb:a8:50:0b:66:41:a4:3d:86:f0:
         1e:f1:54:86:f5:39:8f:e0:1f:ed:d0:ae:73:5c:e6:28:e6:c4:
         c1:b6:c8:fe:0b:13:e7:20:05:8f:ff:78:a9:0c:8e:f8:d4:07:
         32:e9:5c:98:65:4c:62:fe:c2:b4:98:7c:cb:c4:d7:b1:4a:38:
         c7:62:80:c0:78:7e:20:4f:b2:b0:6b:b0:f8:42:06:68:fb:5f:
         9f:66:bb:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeiSmm+P96aKXhSD6v0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3
MjQ4NTgwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhmYzNkNTE2MWM0MTlmOWIxNzQ4NGVmMjI5NDIxOTVkNzlkZjVkMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/8PSfLd8opskARfDM0KQLmnnvlk
4ItBdiOaBLE14J4xsPIDFPRGn5vD+FZTjiPbPgRSKB2WMRDVFVQNHVClti1Zd+BU
UTqewhceoDHbRKGEFWuw5sjHwjjJcDdhXIXTMDq4ibydBFt5bFfBrlG19HJEryBq
monI1U1iYKDAcb297xL2WU+wClhQMv4swykpPdiSOAgl8ypiOLvCUJ/aFQuI/Jbp
Dy/1XfR9szLKbaEfhVO+YO3N3+jBmXqNkAbbZeP7Psk622Pvo40SQQDYbhS1Zz1j
3ORydcXnmJULg5VnBYdClHvcydyefKLDHKF2Mj45MjHeO3zLgwQOmhPJDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw9UWHEGfmxdITvIpQhlded9dAyMB8GA1UdIwQY
MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt
YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj
LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW57iHOr
svAW3Wv1K0Pqo51uGUopEnbpH2LkRmC+uAM5T8BG+Jrc1LAFcr8cvXRYiTo9+Hnl
r3Y8jR/bliqvdZLAn6cWz4GL3hyCm66cr7A+fRQSdZf6Rqr3Px4qohL337Kft88X
O3CPBDPqBGrHCmZKLGdP0RdTjRG9u2j6r+5DrbP9S/FaW9JBg2JuADJl3yJ/yjjo
Asy4GtT2waLZFYS5eEd0yWo9qsn7qFALZkGkPYbwHvFUhvU5j+Af7dCuc1zmKObE
wbbI/gsT5yAFj/94qQyO+NQHMulcmGVMYv7CtJh8y8TXsUo4x2KAwHh+IE+ysGuw
+EIGaPtfn2a7OQ==
-----END CERTIFICATE-----