Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File:                     P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier:          ui4kODK6RlenfKl13/GStBPIkKQydFmMTn8KS1NlcjQ=
Subject key identifier:   E3:C8:44:5D:E1:38:23:EA:BA:27:CD:7B:63:6B:63:80:8B:32:A1:74
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer:       /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial:       01962F746E9D475FE307294F2146D5CAD4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number:          0428
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
                          2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: zQOTDQ69wGtovlLLkHFMTG9dPS6cK9Bz6hLOqQdhDo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6e:9d:47:5f:e3:07:29:4f:21:46:d5:ca:d4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=e3c8445de13823eaba27cd7b636b63808b32a174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d4:bc:6e:fe:a7:96:ca:97:64:57:a4:b0:99:
                    65:90:c1:72:f0:14:ac:1f:51:b1:2b:94:95:07:5d:
                    05:18:1c:ac:26:2b:53:9e:e8:b7:45:99:51:80:ab:
                    fa:62:5c:38:e3:3d:c6:28:a7:02:76:04:4c:c6:c7:
                    df:d3:b3:ac:67:39:6b:c7:b9:d6:7d:b3:7a:e6:59:
                    2a:0f:82:1d:94:cd:19:46:ec:56:90:60:f4:2b:11:
                    26:cf:cd:44:e5:e8:37:c1:9f:0d:5c:6c:c5:3c:04:
                    fa:8a:b2:da:3e:11:c5:b4:8f:79:a8:d1:2b:df:35:
                    99:f7:e5:a5:c9:60:fe:b4:11:70:13:9d:8a:24:a7:
                    16:df:15:3a:bd:bd:6d:2b:b4:3f:bb:b6:88:51:03:
                    f0:f3:19:db:12:16:ee:f0:8c:f5:e0:fa:15:c2:5e:
                    06:ac:89:a9:f8:e8:20:67:98:eb:03:a6:90:bf:80:
                    4a:21:f0:25:95:e9:d2:90:49:02:6d:53:57:83:e5:
                    aa:55:04:dc:49:cf:89:9d:be:35:ef:41:f7:76:1a:
                    14:63:7d:75:17:3f:76:c8:32:b4:8a:5e:95:44:7b:
                    ad:3d:ff:16:55:13:00:58:3a:2c:ee:09:49:fb:76:
                    72:ae:f1:91:6c:ce:19:cb:49:b1:f8:6a:06:20:95:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:44:5D:E1:38:23:EA:BA:27:CD:7B:63:6B:63:80:8B:32:A1:74
            X509v3 Authority Key Identifier:
                keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:48:fd:a6:58:f4:68:41:d1:1d:3e:96:82:c4:26:b9:94:
         a5:5b:67:a5:22:67:a8:16:4f:51:08:e4:7f:d0:20:ca:fb:e1:
         de:a6:37:c5:26:26:c8:80:ed:a2:2c:47:97:43:50:29:f7:dd:
         f3:4d:6c:c0:41:1b:76:32:3b:9e:e0:41:c1:6c:75:71:60:f1:
         32:99:90:8b:3a:08:01:87:fe:d1:6e:8a:11:8c:5c:06:7d:12:
         a1:03:8c:36:b1:6e:99:83:52:9e:b4:4f:77:08:e2:c8:3c:8e:
         30:3c:8c:60:6f:ab:8a:19:99:05:52:90:e4:e0:d9:14:d5:c9:
         89:65:d9:7c:ba:bf:5c:65:21:fa:24:24:c8:c9:e8:37:b7:bc:
         1d:48:5a:10:9e:7a:8b:ff:29:40:87:8b:93:e6:39:13:22:ed:
         17:96:72:16:12:50:1d:9c:c5:08:09:c6:49:5b:88:3a:35:34:
         af:65:3e:68:cd:b4:2d:af:d5:1f:56:24:5b:d0:e4:83:cc:b0:
         4e:77:16:e6:a1:96:60:a8:cb:36:2f:58:e2:b5:83:ec:bb:00:
         9c:86:c9:ce:80:76:2c:5b:e7:7c:50:d3:2a:90:b8:ec:e0:28:
         63:3f:c5:20:cd:48:c4:18:b6:a3:e7:5e:fa:e7:f6:d2:63:dc:
         2f:00:65:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdG6dR1/jBylPIUbVytS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx
MjIxMDcwHhcNMjUwNDEzMTQwMTIxWhcNMjUwNDE0MTQwMTIxWjAzMTEwLwYDVQQD
EyhlM2M4NDQ1ZGUxMzgyM2VhYmEyN2NkN2I2MzZiNjM4MDhiMzJhMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tS8bv6nlsqXZFeksJllkMFy8BSs
H1GxK5SVB10FGBysJitTnui3RZlRgKv6Ylw44z3GKKcCdgRMxsff07OsZzlrx7nW
fbN65lkqD4IdlM0ZRuxWkGD0KxEmz81E5eg3wZ8NXGzFPAT6irLaPhHFtI95qNEr
3zWZ9+WlyWD+tBFwE52KJKcW3xU6vb1tK7Q/u7aIUQPw8xnbEhbu8Iz14PoVwl4G
rImp+OggZ5jrA6aQv4BKIfAllenSkEkCbVNXg+WqVQTcSc+Jnb4170H3dhoUY311
Fz92yDK0il6VRHutPf8WVRMAWDos7glJ+3ZyrvGRbM4Zy0mx+GoGIJW7lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPIRF3hOCPquifNe2NrY4CLMqF0MB8GA1UdIwQY
MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt
NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5
LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOpI/aZY
9GhB0R0+loLEJrmUpVtnpSJnqBZPUQjkf9Agyvvh3qY3xSYmyIDtoixHl0NQKffd
801swEEbdjI7nuBBwWx1cWDxMpmQizoIAYf+0W6KEYxcBn0SoQOMNrFumYNSnrRP
dwjiyDyOMDyMYG+rihmZBVKQ5ODZFNXJiWXZfLq/XGUh+iQkyMnoN7e8HUhaEJ56
i/8pQIeLk+Y5EyLtF5ZyFhJQHZzFCAnGSVuIOjU0r2U+aM20La/VH1YkW9Dkg8yw
TncW5qGWYKjLNi9Y4rWD7LsAnIbJzoB2LFvnfFDTKpC47OAoYz/FIM1IxBi2o+de
+uf20mPcLwBlOw==
-----END CERTIFICATE-----