Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File:                     _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier:          LiPHto/H2tsmj9Lrhs4CW79NO2p4hEq5MIBJurErgGQ=
Subject key identifier:   5B:1A:CD:33:37:0B:7D:DE:64:E5:4C:4C:FF:B1:B2:C6:9D:EE:85:7B
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer:       /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial:       01962F7471056ED8E6FD10B963B6BB3C49FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number:          10D1
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
                          2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: 9tD4oasgCH2rhmeZ1SYS2f501Mk+nDHZFNkQUfiaUz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:71:05:6e:d8:e6:fd:10:b9:63:b6:bb:3c:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=5b1acd33370b7dde64e54c4cffb1b2c69dee857b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:18:1f:2c:e2:6e:4a:0e:fe:a5:52:b1:97:
                    5b:08:57:df:fc:84:58:d4:53:72:55:92:99:1c:38:
                    c8:09:46:a6:1f:53:06:01:88:1b:ed:bb:34:bf:03:
                    1f:a8:5e:14:18:06:3f:13:cb:77:c4:5d:c5:7f:e9:
                    a2:d6:97:a3:24:a3:40:b9:e5:a7:34:4b:fd:0f:bf:
                    e7:5c:4a:20:01:da:46:b2:21:2d:1b:c6:22:52:c0:
                    f4:91:88:0c:48:2a:9d:af:19:18:6a:74:d2:e2:3f:
                    09:65:aa:2d:51:10:42:7a:27:35:5a:87:39:02:44:
                    2a:94:6b:99:e9:0d:14:be:cf:59:97:3a:a8:c4:a9:
                    22:89:fd:cb:cc:99:fb:02:9f:6f:6c:99:55:16:ba:
                    8d:1f:06:c2:51:1e:9e:78:88:86:81:4d:af:08:ce:
                    53:e2:eb:35:22:da:0a:d2:4a:76:63:5d:a1:20:24:
                    53:ec:d5:4b:69:08:78:a9:89:9b:35:06:bd:ab:76:
                    58:3e:3d:2a:6d:f4:d1:64:02:b2:96:b6:55:af:57:
                    97:8c:36:93:d4:85:09:0f:f6:16:6b:2d:b9:41:72:
                    35:cd:f6:a3:57:f1:c9:f1:2d:76:d6:7c:35:c2:dd:
                    1a:71:80:5b:b8:d3:41:20:c8:94:12:2e:23:3d:f7:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:CD:33:37:0B:7D:DE:64:E5:4C:4C:FF:B1:B2:C6:9D:EE:85:7B
            X509v3 Authority Key Identifier:
                keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:f4:03:49:50:06:d4:6c:a1:ee:a4:a5:25:88:2c:cc:6a:
         96:52:90:15:ed:2c:db:1d:28:e6:11:88:6c:f1:01:39:f2:a0:
         95:72:d7:9e:ee:aa:19:4f:3e:75:fc:0a:29:fe:b4:69:87:6f:
         ff:63:d5:de:4e:dd:62:8a:49:07:65:ad:1a:07:bd:b9:5a:27:
         99:86:60:e1:b9:75:2a:33:f3:ce:8c:3f:af:16:dc:b4:33:65:
         f8:f8:a2:78:30:1d:aa:7c:38:9a:18:bf:b3:ac:c0:54:42:46:
         6e:4f:44:21:1d:3c:05:8b:6d:14:3b:90:c5:ac:4e:33:a0:1c:
         be:5d:0a:b9:aa:ad:cb:74:55:d0:51:08:4e:f8:2f:f3:05:f4:
         38:37:8a:9e:89:09:e6:de:60:97:f5:d8:6d:ef:1c:e3:22:d8:
         d8:5c:48:5e:1e:7b:7b:38:52:c3:a3:c4:53:39:cc:19:cc:d8:
         c2:db:4d:d0:c9:0e:4f:9f:b1:d2:d2:40:23:f1:35:e0:58:a5:
         e8:20:dd:e8:ff:04:ac:c2:d1:f1:7a:ae:19:2c:89:81:ca:92:
         90:7c:1d:71:de:e2:83:0f:b4:d3:73:eb:eb:6d:54:77:b5:e5:
         ad:01:e7:2b:44:c9:d9:31:b6:d9:5d:a7:7c:34:6c:ca:b0:ff:
         58:07:7c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHEFbtjm/RC5Y7a7PEn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODBiNzcxMGIxMzk4NDQyNzVjOWRlOWM4ZTc2NGViNjQy
ZTE4YzMwHhcNMjUwNDEzMTQwMTIyWhcNMjUwNDE0MTQwMTIyWjAzMTEwLwYDVQQD
Eyg1YjFhY2QzMzM3MGI3ZGRlNjRlNTRjNGNmZmIxYjJjNjlkZWU4NTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52UYHyzibkoO/qVSsZdbCFff/IRY
1FNyVZKZHDjICUamH1MGAYgb7bs0vwMfqF4UGAY/E8t3xF3Ff+mi1pejJKNAueWn
NEv9D7/nXEogAdpGsiEtG8YiUsD0kYgMSCqdrxkYanTS4j8JZaotURBCeic1Woc5
AkQqlGuZ6Q0Uvs9ZlzqoxKkiif3LzJn7Ap9vbJlVFrqNHwbCUR6eeIiGgU2vCM5T
4us1ItoK0kp2Y12hICRT7NVLaQh4qYmbNQa9q3ZYPj0qbfTRZAKylrZVr1eXjDaT
1IUJD/YWay25QXI1zfajV/HJ8S121nw1wt0acYBbuNNBIMiUEi4jPfeoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsazTM3C33eZOVMTP+xssad7oV7MB8GA1UdIwQY
MBaAFP+At3ELE5hEJ1yd6cjnZOtkLhjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQt
MTMzZWZmNzg0NDJiLzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQtMTMzZWZmNzg0NDJi
LzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzj0A0lQ
BtRsoe6kpSWILMxqllKQFe0s2x0o5hGIbPEBOfKglXLXnu6qGU8+dfwKKf60aYdv
/2PV3k7dYopJB2WtGge9uVonmYZg4bl1KjPzzow/rxbctDNl+PiieDAdqnw4mhi/
s6zAVEJGbk9EIR08BYttFDuQxaxOM6Acvl0Kuaqty3RV0FEITvgv8wX0ODeKnokJ
5t5gl/XYbe8c4yLY2FxIXh57ezhSw6PEUznMGczYwttN0MkOT5+x0tJAI/E14Fil
6CDd6P8ErMLR8XquGSyJgcqSkHwdcd7igw+003Pr621Ud7XlrQHnK0TJ2TG22V2n
fDRsyrD/WAd8mA==
-----END CERTIFICATE-----