Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File:                     CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier:          +lmffzTWVAoWeEKTdLohysCOcfvu3nUQgEYXDvwRw9k=
Subject key identifier:   F3:B8:94:F9:0D:24:6A:65:C3:A4:C6:80:02:B2:31:1A:99:37:CF:38
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer:       /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial:       01962DF3A8BB210245F23CE962F7841939FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
                          2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: jqW4W7CE8JankLH1he3oSx1vQZHflB/93yEvRBXWv70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:bb:21:02:45:f2:3c:e9:62:f7:84:19:39:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=f3b894f90d246a65c3a4c68002b2311a9937cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:31:9a:7c:cd:ec:f3:14:9f:df:6d:88:f4:
                    2e:73:e0:08:8b:50:4f:12:39:1e:c5:26:75:1b:56:
                    c0:f3:1a:70:8b:d3:13:e5:24:b4:8f:19:2b:d7:c9:
                    6a:94:6a:82:09:18:c8:c5:02:54:c6:e7:af:ae:31:
                    14:00:73:8f:26:de:36:c0:b0:6a:2d:89:fa:70:ba:
                    75:67:46:80:c9:e2:33:dd:35:15:ca:49:fc:3b:01:
                    93:8a:7a:2c:a8:b5:74:62:10:01:02:10:d1:aa:f4:
                    8a:45:7e:cf:a8:66:4d:42:21:2e:01:81:9a:c1:6e:
                    85:06:07:c2:1f:08:53:16:51:52:99:c8:d3:44:2f:
                    c6:b3:b9:33:fa:e4:d1:37:e0:4c:ce:59:c3:3c:1c:
                    46:50:fa:27:7d:d2:b2:dc:4e:e9:b0:6c:d2:b1:52:
                    20:f3:a1:25:1b:b3:f6:50:6c:b1:00:3e:3d:61:0f:
                    83:38:5d:3e:8b:a9:ac:b7:f4:7e:e8:2f:fd:62:09:
                    e2:37:2e:54:e2:d0:16:39:ac:4e:eb:77:18:8a:0f:
                    be:89:9e:a5:a1:cb:4e:15:2f:86:c6:5e:71:4c:77:
                    9b:b8:02:6f:a8:c2:8d:24:36:af:95:3f:97:ca:0d:
                    31:5c:e3:8d:cc:42:cb:fb:1a:30:4a:57:3b:13:de:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B8:94:F9:0D:24:6A:65:C3:A4:C6:80:02:B2:31:1A:99:37:CF:38
            X509v3 Authority Key Identifier:
                keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b8:e6:f3:7b:42:5f:5f:ab:6a:f2:e8:10:71:9b:ee:c2:76:
         9d:af:23:68:b7:77:94:fb:c2:8a:69:0a:4a:70:3e:b6:ea:9a:
         6d:1c:33:68:6c:92:c1:d5:53:df:41:dc:77:b7:87:0f:0e:06:
         62:cb:09:8f:b8:19:01:f5:24:b1:4e:cb:16:f3:e5:79:4e:af:
         a5:48:94:b8:69:2d:cd:68:4c:fc:00:bd:24:8c:70:3a:f0:89:
         4d:43:66:da:07:04:c1:36:d3:f9:c2:d5:00:b4:9f:fc:2c:85:
         8b:66:af:b9:34:bb:8f:a5:cf:90:1b:73:d1:b6:37:df:b9:79:
         4c:81:db:c4:d5:aa:3a:c3:e5:3d:cd:1d:7c:4f:7f:68:d3:ac:
         d8:b0:c7:cc:72:65:d0:8a:9f:28:1d:fa:cb:90:a9:87:dc:86:
         d6:3d:01:6a:fa:8d:46:4f:91:2f:7e:8a:27:cb:a1:bd:25:d4:
         94:37:e5:54:20:72:f4:5a:6c:da:b6:21:3c:86:89:37:33:45:
         39:e7:41:f3:da:4c:ba:9e:5c:ae:d5:56:46:b1:1f:36:a7:c4:
         65:44:cc:3f:cf:c8:a1:d3:80:61:c0:93:b0:aa:51:4c:ef:a4:
         64:7f:da:74:2e:60:74:89:8b:68:02:f2:ee:44:53:a5:ee:29:
         ac:e4:f4:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86i7IQJF8jzpYveEGTn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl
MTZmOWYwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
EyhmM2I4OTRmOTBkMjQ2YTY1YzNhNGM2ODAwMmIyMzExYTk5MzdjZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGExmnzN7PMUn99tiPQuc+AIi1BP
EjkexSZ1G1bA8xpwi9MT5SS0jxkr18lqlGqCCRjIxQJUxuevrjEUAHOPJt42wLBq
LYn6cLp1Z0aAyeIz3TUVykn8OwGTinosqLV0YhABAhDRqvSKRX7PqGZNQiEuAYGa
wW6FBgfCHwhTFlFSmcjTRC/Gs7kz+uTRN+BMzlnDPBxGUPonfdKy3E7psGzSsVIg
86ElG7P2UGyxAD49YQ+DOF0+i6mst/R+6C/9YgniNy5U4tAWOaxO63cYig++iZ6l
octOFS+Gxl5xTHebuAJvqMKNJDavlT+Xyg0xXOONzELL+xowSlc7E94QowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPO4lPkNJGplw6TGgAKyMRqZN884MB8GA1UdIwQY
MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt
ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx
LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLjm83tC
X1+ravLoEHGb7sJ2na8jaLd3lPvCimkKSnA+tuqabRwzaGySwdVT30Hcd7eHDw4G
YssJj7gZAfUksU7LFvPleU6vpUiUuGktzWhM/AC9JIxwOvCJTUNm2gcEwTbT+cLV
ALSf/CyFi2avuTS7j6XPkBtz0bY337l5TIHbxNWqOsPlPc0dfE9/aNOs2LDHzHJl
0IqfKB36y5Cph9yG1j0BavqNRk+RL36KJ8uhvSXUlDflVCBy9Fps2rYhPIaJNzNF
OedB89pMup5crtVWRrEfNqfEZUTMP8/IodOAYcCTsKpRTO+kZH/adC5gdImLaALy
7kRTpe4prOT0CA==
-----END CERTIFICATE-----