Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File:                     cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier:          a/u7biDyRBhki9LqAi6Taz90TW+BfYZpEfsRSCVOZJY=
Subject key identifier:   19:DB:4B:D6:E8:71:11:F7:FA:B3:98:24:8A:F8:E3:F9:D9:83:8B:84
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer:       /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial:       01962E61BE454C40B687823E0AF7CCC02D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number:          13C6
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
                          2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
                          3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: LfoxInA7c7B5S2ePtCg/HaUEBYI7IgUNgUSPnri77HQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:be:45:4c:40:b6:87:82:3e:0a:f7:cc:c0:2d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=19db4bd6e87111f7fab398248af8e3f9d9838b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:f8:d1:73:e8:56:e1:bd:88:d9:7c:c3:1c:
                    c6:50:22:50:82:d4:03:fa:90:c2:dc:05:c6:ef:9b:
                    62:b0:6a:e2:90:2a:3b:e8:4c:11:b3:4b:e3:83:f1:
                    2b:41:94:f2:fb:70:b3:73:fe:df:87:67:eb:75:22:
                    3e:dd:9c:75:bf:32:d3:b0:3a:40:b7:45:9a:49:d5:
                    0e:53:b3:7f:1e:39:f7:54:27:68:1e:78:6b:26:c1:
                    ae:c1:2e:34:0a:e7:9d:a9:a0:86:f3:ab:5c:2d:8f:
                    a1:18:1a:b4:e6:cd:30:a1:80:a0:81:ec:ce:a2:e2:
                    61:6e:ef:97:c0:66:6b:22:82:11:f8:53:39:3c:b5:
                    11:c7:42:39:f5:41:64:04:a4:56:30:e3:ed:e3:26:
                    71:07:92:00:3b:96:52:0b:d9:5a:08:2a:c3:d9:71:
                    a1:b5:f8:28:fa:89:9b:4b:f8:bc:7d:8e:a0:fb:22:
                    45:06:cf:cf:f0:8f:65:7d:8a:78:a8:c0:d6:c2:66:
                    c3:79:53:89:6d:58:04:27:24:fb:36:8c:53:b5:68:
                    f9:11:31:1f:9e:48:51:25:38:9e:fb:1e:74:7f:ab:
                    0a:bc:1e:2a:7b:90:3a:35:3e:be:6e:6b:49:30:47:
                    aa:39:0d:75:5b:4e:2f:6b:f8:4b:8c:f3:05:e0:86:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DB:4B:D6:E8:71:11:F7:FA:B3:98:24:8A:F8:E3:F9:D9:83:8B:84
            X509v3 Authority Key Identifier:
                keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:bb:be:ad:0d:9e:bf:f6:c0:a4:f6:6f:ff:a5:6f:7f:97:
         8b:4d:2c:43:61:8a:c9:e5:73:31:fd:20:d5:33:f7:44:e2:59:
         d9:73:47:1d:b6:ea:ec:eb:ef:74:30:4f:03:33:ce:de:35:36:
         d0:18:e7:f3:53:09:39:61:7e:45:d7:64:99:74:4c:de:26:ed:
         58:f0:6a:70:15:92:1b:9f:b9:f7:be:9a:da:d1:b8:b2:85:a2:
         83:cd:1b:61:96:02:d5:4e:d3:23:4e:ed:51:18:95:c0:46:62:
         b9:3a:cc:d0:5c:ec:5e:82:e6:6e:42:cb:61:f5:6e:06:c4:45:
         d2:7b:55:f4:ab:93:97:c5:22:f1:33:3c:ca:09:84:7d:5d:b2:
         44:9e:11:ab:cd:07:aa:1c:39:fa:c5:fc:86:14:d7:42:24:cb:
         40:ad:72:1d:66:b4:f6:9a:cd:d8:ae:cd:5f:08:68:a2:d5:dc:
         00:c0:41:2c:76:84:41:40:68:22:ec:89:e5:3d:20:08:99:b1:
         35:ce:bf:10:7c:32:a7:81:81:5e:45:ca:fc:5b:21:b3:8b:e1:
         20:6b:9e:21:dc:68:10:d8:0a:9f:17:8e:f2:f2:61:04:4b:98:
         62:cf:67:f1:e4:c0:83:39:db:34:be:f5:8c:d9:66:a0:e0:ca:
         10:84:b7:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb5FTEC2h4I+CvfMwC2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx
ZDliNjIwHhcNMjUwNDEzMDkwMTE5WhcNMjUwNDE0MDkwMTE5WjAzMTEwLwYDVQQD
EygxOWRiNGJkNmU4NzExMWY3ZmFiMzk4MjQ4YWY4ZTNmOWQ5ODM4Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAL40XPoVuG9iNl8wxzGUCJQgtQD
+pDC3AXG75tisGrikCo76EwRs0vjg/ErQZTy+3Czc/7fh2frdSI+3Zx1vzLTsDpA
t0WaSdUOU7N/Hjn3VCdoHnhrJsGuwS40CuedqaCG86tcLY+hGBq05s0woYCggezO
ouJhbu+XwGZrIoIR+FM5PLURx0I59UFkBKRWMOPt4yZxB5IAO5ZSC9laCCrD2XGh
tfgo+ombS/i8fY6g+yJFBs/P8I9lfYp4qMDWwmbDeVOJbVgEJyT7NoxTtWj5ETEf
nkhRJTie+x50f6sKvB4qe5A6NT6+bmtJMEeqOQ11W04va/hLjPMF4IalowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnbS9bocRH3+rOYJIr44/nZg4uEMB8GA1UdIwQY
MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt
NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4
LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZu7vq0N
nr/2wKT2b/+lb3+Xi00sQ2GKyeVzMf0g1TP3ROJZ2XNHHbbq7OvvdDBPAzPO3jU2
0Bjn81MJOWF+RddkmXRM3ibtWPBqcBWSG5+5976a2tG4soWig80bYZYC1U7TI07t
URiVwEZiuTrM0FzsXoLmbkLLYfVuBsRF0ntV9KuTl8Ui8TM8ygmEfV2yRJ4Rq80H
qhw5+sX8hhTXQiTLQK1yHWa09prN2K7NXwhootXcAMBBLHaEQUBoIuyJ5T0gCJmx
Nc6/EHwyp4GBXkXK/Fshs4vhIGueIdxoENgKnxeO8vJhBEuYYs9n8eTAgznbNL71
jNlmoODKEIS3FA==
-----END CERTIFICATE-----