Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File:                     l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier:          QqNDeW5qTuhSZ7GGeapVK+piFq84iGAEjFyDt9N+2yw=
Subject key identifier:   36:19:7F:9C:65:B7:C1:9B:B7:53:08:75:B3:02:B4:69:0D:89:E2:6A
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer:       /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial:       01962FAB6718EA11D3B254B765029684F986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number:          0778
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
                          2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: 7SN+4ezupvIhPyPmhMjZ2tv+b0pZLINtn2mZWTRiLC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:67:18:ea:11:d3:b2:54:b7:65:02:96:84:f9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=36197f9c65b7c19bb7530875b302b4690d89e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:a9:22:5f:31:6e:03:4a:73:3c:fb:e5:7c:
                    72:b8:5d:ed:fd:fe:7a:a6:e8:d1:31:d7:cf:18:9c:
                    d9:67:06:b2:35:29:13:95:a3:dc:79:09:15:8e:28:
                    11:b8:d5:fe:eb:b6:d2:4b:7c:48:43:f0:cc:12:c4:
                    c4:68:1d:f8:09:93:e4:ad:a5:a9:49:8a:1b:7d:47:
                    7b:76:a9:f1:e9:cc:dd:7c:29:93:df:ca:4e:a7:f6:
                    82:9b:55:01:14:78:29:d4:a1:12:54:7e:a5:f6:34:
                    e4:00:cd:63:8f:6e:69:c8:d1:cd:f4:2d:b4:ec:c0:
                    c8:61:14:75:a0:e9:c0:f1:d3:47:fd:3e:ce:90:fe:
                    52:79:f9:f8:43:77:c4:52:d4:61:eb:1e:0c:2e:f8:
                    3d:db:56:70:11:f4:89:8e:38:b3:95:78:ad:bc:ad:
                    a2:5a:29:d7:ae:a8:15:ba:31:5f:e0:69:5a:0e:f7:
                    00:f6:1c:fa:58:e3:ca:48:a3:71:e2:fc:db:99:b2:
                    15:88:70:87:62:78:bd:7c:7f:97:1f:60:84:28:46:
                    c5:6b:f2:9b:d1:65:6c:b3:57:4f:be:07:80:46:8f:
                    5e:b3:02:b2:07:82:3f:b0:41:4d:3e:00:f2:e4:3e:
                    b6:ad:8d:a6:b3:bc:6a:5b:a4:41:d2:28:cd:a3:7c:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:19:7F:9C:65:B7:C1:9B:B7:53:08:75:B3:02:B4:69:0D:89:E2:6A
            X509v3 Authority Key Identifier:
                keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:91:c9:b4:48:12:da:e8:49:8e:96:e6:88:20:e6:9d:db:b1:
         cb:1e:4d:b7:8b:0b:52:b6:7b:1e:ab:0d:25:91:40:d3:1a:7f:
         b5:23:97:88:15:f8:ba:0f:38:f1:9f:66:ad:7f:4b:97:6d:c9:
         4b:e4:c8:e3:18:a3:1c:1e:af:ab:92:a1:30:ed:da:75:d6:23:
         ea:1c:79:4f:85:0e:da:9a:49:b7:88:5f:f2:1d:0d:ca:df:e0:
         21:bb:4a:ed:3e:b3:ba:27:26:06:2b:58:1d:b4:bd:68:d9:ff:
         25:23:e6:a2:d4:a1:c2:bd:e4:1d:19:01:77:e7:ec:8e:28:63:
         e8:9f:0f:c6:bc:34:f5:f5:c6:1f:53:d2:4a:c5:d7:6c:12:d6:
         70:c9:63:ec:a9:c0:79:ad:b8:d0:b4:99:ee:03:26:37:e4:ab:
         00:20:0a:60:d9:d0:4c:f2:a8:1a:f8:59:90:a5:d4:0e:a8:c6:
         4e:8e:00:c4:0f:02:a1:53:b1:3a:32:20:76:c5:de:89:b0:34:
         82:cb:d9:73:4e:3d:6a:01:38:b3:fd:eb:91:10:fd:73:f2:80:
         ea:50:ac:38:64:ee:2c:70:d9:04:ce:cf:71:98:66:21:0c:fa:
         f0:29:88:18:fb:0f:1b:98:38:2f:2d:10:e3:a4:29:59:f9:fa:
         64:39:57:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2cY6hHTslS3ZQKWhPmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk
ZjUxODIwHhcNMjUwNDEzMTUwMTI0WhcNMjUwNDE0MTUwMTI0WjAzMTEwLwYDVQQD
EygzNjE5N2Y5YzY1YjdjMTliYjc1MzA4NzViMzAyYjQ2OTBkODllMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgapIl8xbgNKczz75XxyuF3t/f56
pujRMdfPGJzZZwayNSkTlaPceQkVjigRuNX+67bSS3xIQ/DMEsTEaB34CZPkraWp
SYobfUd7dqnx6czdfCmT38pOp/aCm1UBFHgp1KESVH6l9jTkAM1jj25pyNHN9C20
7MDIYRR1oOnA8dNH/T7OkP5Sefn4Q3fEUtRh6x4MLvg921ZwEfSJjjizlXitvK2i
WinXrqgVujFf4GlaDvcA9hz6WOPKSKNx4vzbmbIViHCHYni9fH+XH2CEKEbFa/Kb
0WVss1dPvgeARo9eswKyB4I/sEFNPgDy5D62rY2ms7xqW6RB0ijNo3xxWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYZf5xlt8Gbt1MIdbMCtGkNieJqMB8GA1UdIwQY
MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt
YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw
LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJHJtEgS
2uhJjpbmiCDmnduxyx5Nt4sLUrZ7HqsNJZFA0xp/tSOXiBX4ug848Z9mrX9Ll23J
S+TI4xijHB6vq5KhMO3addYj6hx5T4UO2ppJt4hf8h0Nyt/gIbtK7T6zuicmBitY
HbS9aNn/JSPmotShwr3kHRkBd+fsjihj6J8Pxrw09fXGH1PSSsXXbBLWcMlj7KnA
ea240LSZ7gMmN+SrACAKYNnQTPKoGvhZkKXUDqjGTo4AxA8CoVOxOjIgdsXeibA0
gsvZc049agE4s/3rkRD9c/KA6lCsOGTuLHDZBM7PcZhmIQz68CmIGPsPG5g4Ly0Q
46QpWfn6ZDlXzQ==
-----END CERTIFICATE-----