Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File:                     x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier:          E4Wp4StbGBWTJpgfggvBayV6UG6r2m2Nq/Ei99EJLJs=
Subject key identifier:   D5:F4:A2:41:3A:40:76:5F:64:C1:94:11:39:D4:62:FA:D3:5B:45:6C
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer:       /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial:       01962FABAAC48FCF22B442269B2F3141403C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:41 +0000
Files and hashes:         1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
                          2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
                          3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: HetNvnYY24JZhpf94TV1bNfkqdDJxVpmRF1D5Ogl614=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:aa:c4:8f:cf:22:b4:42:26:9b:2f:31:41:40:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
        Validity
            Not Before: Apr 13 15:01:41 2025 GMT
            Not After : Apr 14 15:01:41 2025 GMT
        Subject: CN=d5f4a2413a40765f64c1941139d462fad35b456c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:e2:3d:ad:8f:ca:29:8a:ea:8c:fb:4b:e3:
                    8a:95:0e:e5:ac:3c:c8:c5:9d:3b:db:c8:b0:aa:52:
                    c0:51:72:4d:91:43:e0:08:a9:01:f0:0b:65:ab:18:
                    77:49:40:32:c3:d1:11:7c:28:4f:18:d4:21:75:81:
                    05:64:fe:62:bb:4e:6b:39:ce:5c:69:c2:30:a0:ef:
                    04:55:4e:05:87:cd:45:e0:53:42:e2:21:47:b3:6c:
                    66:dc:2d:e1:be:cd:bc:58:ec:2b:c6:ac:79:47:f1:
                    74:54:1a:94:cf:81:fa:dd:1a:99:7d:78:0c:4a:71:
                    01:49:69:10:97:64:e9:a7:80:5b:0f:b8:d5:8f:12:
                    6a:e6:8b:7f:e9:eb:bd:22:1a:b3:48:96:ab:df:3a:
                    ef:47:5a:fc:ba:00:99:61:d2:39:20:0d:fd:0b:3c:
                    84:ec:6d:61:f6:b8:c3:2f:7f:32:21:e8:be:1a:76:
                    37:0f:f4:32:e6:70:77:eb:fd:82:80:e1:27:00:21:
                    32:11:db:95:dc:72:1f:8e:85:42:e9:8d:fb:b7:ee:
                    f4:62:fd:d3:bc:56:89:5e:ef:7e:18:78:78:5d:f4:
                    e0:d6:e1:ab:62:df:90:b0:f9:87:a3:e6:26:a0:ef:
                    29:8f:a5:4f:0f:a8:3b:3e:de:4f:fc:26:d1:5d:85:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:A2:41:3A:40:76:5F:64:C1:94:11:39:D4:62:FA:D3:5B:45:6C
            X509v3 Authority Key Identifier:
                keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:13:77:7d:98:92:8f:90:38:8e:e3:d0:77:6e:e8:20:09:
         95:63:7f:57:9f:63:de:3a:b7:de:e2:48:e2:ac:47:66:43:4f:
         df:16:c0:9f:9f:8b:fc:3a:03:df:eb:a3:18:7f:64:09:d1:43:
         bd:95:97:65:21:18:27:61:65:5c:59:04:b1:e0:f6:0a:0f:43:
         55:08:e8:bf:d2:55:0c:77:ae:aa:db:37:bb:c4:61:35:01:07:
         45:62:63:12:f5:a7:4a:cf:df:bb:2e:9a:b3:04:f2:ca:8e:c7:
         dc:96:3b:62:62:84:74:61:da:f9:2a:1e:47:13:8b:84:33:6a:
         fe:66:02:b2:dc:3a:07:ef:46:43:32:97:dc:e6:cf:e9:9c:6d:
         07:5e:b2:19:ac:6b:fb:a1:03:e5:42:96:d7:40:d9:aa:a6:3e:
         23:20:a3:13:05:6c:a7:d1:da:70:6f:7c:51:5d:de:4f:60:54:
         d1:b3:68:f4:63:19:83:91:24:1d:e3:6a:a1:5a:9d:99:f2:5b:
         04:a6:70:1a:ba:bb:a4:be:cb:73:be:69:7b:f0:62:5e:6a:d7:
         3c:a2:a4:75:36:53:2e:6f:7b:dd:f1:c9:e8:8c:5b:2d:7f:f8:
         73:25:ba:cf:d2:73:eb:03:06:a2:b6:b3:41:99:e1:a9:68:44:
         95:52:84:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6rEj88itEImmy8xQUA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw
NGQzM2YwHhcNMjUwNDEzMTUwMTQxWhcNMjUwNDE0MTUwMTQxWjAzMTEwLwYDVQQD
EyhkNWY0YTI0MTNhNDA3NjVmNjRjMTk0MTEzOWQ0NjJmYWQzNWI0NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWHiPa2PyimK6oz7S+OKlQ7lrDzI
xZ0728iwqlLAUXJNkUPgCKkB8Atlqxh3SUAyw9ERfChPGNQhdYEFZP5iu05rOc5c
acIwoO8EVU4Fh81F4FNC4iFHs2xm3C3hvs28WOwrxqx5R/F0VBqUz4H63RqZfXgM
SnEBSWkQl2Tpp4BbD7jVjxJq5ot/6eu9IhqzSJar3zrvR1r8ugCZYdI5IA39CzyE
7G1h9rjDL38yIei+GnY3D/Qy5nB36/2CgOEnACEyEduV3HIfjoVC6Y37t+70Yv3T
vFaJXu9+GHh4XfTg1uGrYt+QsPmHo+YmoO8pj6VPD6g7Pt5P/CbRXYXMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX0okE6QHZfZMGUETnUYvrTW0VsMB8GA1UdIwQY
MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt
ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl
LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMroTd32Y
ko+QOI7j0Hdu6CAJlWN/V59j3jq33uJI4qxHZkNP3xbAn5+L/DoD3+ujGH9kCdFD
vZWXZSEYJ2FlXFkEseD2Cg9DVQjov9JVDHeuqts3u8RhNQEHRWJjEvWnSs/fuy6a
swTyyo7H3JY7YmKEdGHa+SoeRxOLhDNq/mYCstw6B+9GQzKX3ObP6ZxtB16yGaxr
+6ED5UKW10DZqqY+IyCjEwVsp9HacG98UV3eT2BU0bNo9GMZg5EkHeNqoVqdmfJb
BKZwGrq7pL7Lc75pe/BiXmrXPKKkdTZTLm973fHJ6IxbLX/4cyW6z9Jz6wMGoraz
QZnhqWhElVKEQA==
-----END CERTIFICATE-----