Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File:                     EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier:          uovVOootUfPyWtDlHBRcLUur6Yoh+Qk2a2BqISeGCXc=
Subject key identifier:   0E:59:79:B9:E5:F5:6A:BB:D4:C5:0B:97:15:C3:A9:4D:C7:8F:B5:14
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer:       /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial:       01962E61A9FA758B17260E4D57B8246418DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number:          0949
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: kVSSylTl8Ej+kNN2qXi6XY9OIe7Kj0ERcDvAR+/p7hM=)
                          2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:fa:75:8b:17:26:0e:4d:57:b8:24:64:18:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=0e5979b9e5f56abbd4c50b9715c3a94dc78fb514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:b7:45:c2:6c:83:99:c2:8b:5a:71:21:68:
                    91:49:56:d6:fe:f8:8f:96:3c:d1:cf:44:72:43:36:
                    d3:74:07:00:fb:69:85:3d:92:2a:e5:2b:13:67:a3:
                    0b:3b:ec:ba:01:c6:ea:32:d9:2d:77:82:94:e8:5e:
                    e1:d8:99:bf:5a:cc:a6:03:1d:6c:9b:73:c1:e5:a5:
                    ab:dc:82:b5:4f:74:33:42:7f:b3:8e:5e:8e:06:ac:
                    3c:72:68:25:c1:31:65:34:c7:82:f1:c0:72:c5:1b:
                    69:9c:79:ca:c6:98:52:53:64:11:0d:f9:0d:73:98:
                    b2:2f:ff:89:2f:cd:d7:e5:b5:41:c0:01:a7:bf:e0:
                    57:c0:ea:e5:ab:56:f3:59:97:a7:a9:a3:f4:31:90:
                    5c:09:60:cd:c7:d3:36:f4:bf:2e:61:4c:1c:df:10:
                    c1:4f:a9:a7:41:e4:50:ca:e5:55:1a:13:03:38:03:
                    ab:7f:4f:5c:b2:68:a8:ff:61:d7:16:61:f4:0c:43:
                    32:63:94:21:59:f0:4f:4e:41:95:eb:94:f5:b1:1e:
                    2a:fb:3c:5e:6d:6f:0b:dc:e8:94:e0:9a:ec:48:a4:
                    99:d4:aa:83:7d:50:7d:c0:ad:88:ef:08:f9:74:13:
                    25:e1:1f:a3:17:01:de:e5:99:08:cb:3c:cf:ba:d4:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:59:79:B9:E5:F5:6A:BB:D4:C5:0B:97:15:C3:A9:4D:C7:8F:B5:14
            X509v3 Authority Key Identifier:
                keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:18:ed:74:8d:00:4a:f4:98:05:b6:68:01:d2:e6:41:18:
         6c:6c:70:93:66:ee:0f:ad:f1:87:dd:b2:13:d4:b0:42:fd:5e:
         82:1e:b4:4c:8a:56:9a:0c:38:a8:0f:d0:e2:f1:d4:54:33:90:
         f8:50:39:f5:0f:58:83:80:ff:92:02:d7:bf:a7:12:e9:d2:77:
         d0:f8:8d:bd:30:85:7f:18:dc:c6:ca:3e:9f:f4:a5:64:c5:eb:
         5f:88:9c:5f:de:2c:e1:d5:fb:5d:a4:01:bb:9a:5a:8c:c1:43:
         2e:60:58:d7:7b:b7:06:1f:3f:de:ae:db:0d:8d:a4:60:12:af:
         c1:03:41:99:aa:18:a1:8f:91:14:92:b5:e7:46:bf:0e:8b:2e:
         75:03:b3:a8:ca:07:8e:e6:f7:3c:ed:89:f1:2c:8c:7c:89:64:
         c3:56:d6:7f:dd:bc:03:1b:e6:8d:53:e5:05:9b:f2:8c:b2:a2:
         9d:e3:3d:87:f8:10:41:e8:15:c6:0a:77:e4:3a:ee:49:bc:9a:
         f4:d4:48:1a:a1:d6:f6:22:a7:37:2f:e8:8f:0c:aa:c8:da:a3:
         94:40:f6:74:2d:3c:13:f8:04:51:a5:5e:26:ba:65:3b:3e:e7:
         35:c1:11:84:8c:e2:9a:b4:85:28:c6:88:8b:51:3b:2e:44:d5:
         ac:bd:e2:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYan6dYsXJg5NV7gkZBjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2
YmE2MjUwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EygwZTU5NzliOWU1ZjU2YWJiZDRjNTBiOTcxNWMzYTk0ZGM3OGZiNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9C3RcJsg5nCi1pxIWiRSVbW/viP
ljzRz0RyQzbTdAcA+2mFPZIq5SsTZ6MLO+y6AcbqMtktd4KU6F7h2Jm/WsymAx1s
m3PB5aWr3IK1T3QzQn+zjl6OBqw8cmglwTFlNMeC8cByxRtpnHnKxphSU2QRDfkN
c5iyL/+JL83X5bVBwAGnv+BXwOrlq1bzWZenqaP0MZBcCWDNx9M29L8uYUwc3xDB
T6mnQeRQyuVVGhMDOAOrf09csmio/2HXFmH0DEMyY5QhWfBPTkGV65T1sR4q+zxe
bW8L3OiU4JrsSKSZ1KqDfVB9wK2I7wj5dBMl4R+jFwHe5ZkIyzzPutRuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5Zebnl9Wq71MULlxXDqU3Hj7UUMB8GA1UdIwQY
MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt
MWNjNWZkMjU0NGU5LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5
LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBAY7XSN
AEr0mAW2aAHS5kEYbGxwk2buD63xh92yE9SwQv1egh60TIpWmgw4qA/Q4vHUVDOQ
+FA59Q9Yg4D/kgLXv6cS6dJ30PiNvTCFfxjcxso+n/SlZMXrX4icX94s4dX7XaQB
u5pajMFDLmBY13u3Bh8/3q7bDY2kYBKvwQNBmaoYoY+RFJK150a/DosudQOzqMoH
jub3PO2J8SyMfIlkw1bWf928AxvmjVPlBZvyjLKineM9h/gQQegVxgp35DruSbya
9NRIGqHW9iKnNy/ojwyqyNqjlED2dC08E/gEUaVeJrplOz7nNcERhIzimrSFKMaI
i1E7LkTVrL3i1g==
-----END CERTIFICATE-----