Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File:                     MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier:          SalkIjaAb/H/yqJLH/RncoJTYa2HthgfPpI+e0kWW1U=
Subject key identifier:   AB:7B:8C:6B:D1:80:56:5F:D2:9F:EA:90:5D:00:FE:33:BF:00:7C:E5
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer:       /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial:       01962F3D39062FE213FD5EEDC172675AEA0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
                          2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: /DXHZ9gH5tef2yEdA4o7uPQaj9UxwbxN5myDo+D5GAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:39:06:2f:e2:13:fd:5e:ed:c1:72:67:5a:ea:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=ab7b8c6bd180565fd29fea905d00fe33bf007ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:3c:ae:1f:ed:b6:27:dd:b9:d3:f2:84:33:
                    96:0c:e3:8e:53:99:24:47:6c:c5:ce:69:af:37:1c:
                    43:b9:4e:13:a6:f7:db:fd:98:c3:9a:d5:a1:5a:61:
                    69:8a:ae:c1:4e:a6:23:05:86:e5:d2:40:58:bf:17:
                    10:cb:5e:2a:73:24:bf:f5:5b:b6:d5:f1:a3:1f:59:
                    3a:9f:e7:72:7b:e2:e0:36:20:0f:23:03:17:1d:49:
                    ce:89:06:65:93:4c:5b:13:cd:30:8c:2f:16:cd:1a:
                    e3:7c:d4:b1:04:d3:89:bf:4b:57:d8:77:65:c2:81:
                    78:b4:80:0d:60:83:94:7a:ca:46:df:05:a6:ab:b8:
                    8b:33:f9:df:55:6e:7f:64:fe:c1:44:b0:b6:a0:c5:
                    b3:05:87:68:47:13:e2:5a:cf:80:3a:15:e5:a3:f0:
                    77:b3:36:0f:25:90:62:e1:3b:e9:c8:7a:d3:19:aa:
                    f4:71:bc:62:8a:af:a7:01:49:26:85:bb:c5:82:fe:
                    73:5b:f1:00:ac:f6:ff:ee:a4:49:9c:b8:b8:58:fb:
                    b7:85:02:d4:99:f3:ad:6b:09:a9:4b:97:f5:83:10:
                    23:2f:ba:6c:7f:35:1e:3c:99:a8:de:c9:ed:0d:48:
                    4f:84:49:5c:35:d7:c2:ac:47:98:23:0e:5d:56:85:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7B:8C:6B:D1:80:56:5F:D2:9F:EA:90:5D:00:FE:33:BF:00:7C:E5
            X509v3 Authority Key Identifier:
                keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:da:1d:a3:eb:5c:de:d7:94:f2:2a:2c:09:99:a3:3d:df:04:
         ff:a5:e3:90:d4:d6:29:66:fe:41:f4:e6:a2:38:76:08:47:06:
         ad:b4:b7:67:28:98:3d:6b:b7:6e:37:42:69:2e:a7:ca:98:f7:
         2f:36:e5:0e:99:75:71:c3:57:60:c3:3a:83:79:e8:59:3c:32:
         80:0a:80:38:f3:29:c6:4b:dc:ee:f3:8c:b1:ba:1f:7f:1d:02:
         52:ff:46:f9:df:d9:d8:f3:a7:9f:fa:7b:72:16:c2:39:e6:2c:
         9c:a0:d4:1b:61:90:4b:61:38:d7:95:f6:8e:f3:bb:38:f1:ce:
         c8:af:0f:4a:1c:1f:15:cc:00:d9:ba:79:e8:dc:7c:2a:30:03:
         15:5e:ba:48:7d:94:6d:de:fa:4d:6d:e3:a0:67:e1:46:1f:ef:
         ba:bf:fb:b3:c4:cb:45:30:63:a1:1a:72:81:9e:70:51:50:27:
         36:30:2f:ae:fe:8a:b6:79:48:4f:f2:66:50:d7:8c:aa:59:7f:
         46:5a:ec:7b:62:f4:99:fb:90:0a:5c:37:24:d2:f8:6f:ad:5b:
         b6:f5:9d:39:02:b4:94:4f:ab:f5:97:29:e1:1e:8b:84:15:a7:
         e8:d5:bd:c2:11:5c:71:43:57:3c:5a:53:b9:71:e7:d5:c3:bd:
         c9:45:98:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTkGL+IT/V7twXJnWuoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTdmZDIyN2U5ZGNlOTc4MDVjMDNlNWYzMzAwMmFlYTE4
YzM3ZGQwHhcNMjUwNDEzMTMwMTAzWhcNMjUwNDE0MTMwMTAzWjAzMTEwLwYDVQQD
EyhhYjdiOGM2YmQxODA1NjVmZDI5ZmVhOTA1ZDAwZmUzM2JmMDA3Y2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2I8rh/ttifdudPyhDOWDOOOU5kk
R2zFzmmvNxxDuU4Tpvfb/ZjDmtWhWmFpiq7BTqYjBYbl0kBYvxcQy14qcyS/9Vu2
1fGjH1k6n+dye+LgNiAPIwMXHUnOiQZlk0xbE80wjC8WzRrjfNSxBNOJv0tX2Hdl
woF4tIANYIOUespG3wWmq7iLM/nfVW5/ZP7BRLC2oMWzBYdoRxPiWs+AOhXlo/B3
szYPJZBi4TvpyHrTGar0cbxiiq+nAUkmhbvFgv5zW/EArPb/7qRJnLi4WPu3hQLU
mfOtawmpS5f1gxAjL7psfzUePJmo3sntDUhPhElcNdfCrEeYIw5dVoVRjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt7jGvRgFZf0p/qkF0A/jO/AHzlMB8GA1UdIwQY
MBaAFDEX/SJ+nc6XgFwD5fMwAq6hjDfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAt
OTk3MTkwN2E5NWE3LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAtOTk3MTkwN2E5NWE3
LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktodo+tc
3teU8iosCZmjPd8E/6XjkNTWKWb+QfTmojh2CEcGrbS3ZyiYPWu3bjdCaS6nypj3
LzblDpl1ccNXYMM6g3noWTwygAqAOPMpxkvc7vOMsboffx0CUv9G+d/Z2POnn/p7
chbCOeYsnKDUG2GQS2E415X2jvO7OPHOyK8PShwfFcwA2bp56Nx8KjADFV66SH2U
bd76TW3joGfhRh/vur/7s8TLRTBjoRpygZ5wUVAnNjAvrv6KtnlIT/JmUNeMqll/
Rlrse2L0mfuQClw3JNL4b61btvWdOQK0lE+r9Zcp4R6LhBWn6NW9whFccUNXPFpT
uXHn1cO9yUWYSA==
-----END CERTIFICATE-----