Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File:                     TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier:          CKy2EF9blR9yekCIABt4i9cZxgiL6md9ED5L2jppXqQ=
Subject key identifier:   8F:C0:0A:C5:D7:E0:BD:05:D8:39:D1:A5:F8:CC:BD:1C:7D:66:A0:F1
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer:       /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial:       01962F3DC718EDE7B66427214C020DAEB102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: z2SqmYVo9nREEhMuogQhY9aY2NwYTxrAv2zf2/ar8W0=)
                          2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c7:18:ed:e7:b6:64:27:21:4c:02:0d:ae:b1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=8fc00ac5d7e0bd05d839d1a5f8ccbd1c7d66a0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:49:ca:ae:3c:7d:d9:a6:48:20:e7:da:02:
                    48:7c:63:93:3f:12:61:34:d8:f0:f0:11:f4:0a:e9:
                    80:41:85:8f:bd:47:b9:f7:fa:7d:a0:cb:3c:ed:e4:
                    1d:fd:fb:e4:3e:6e:c4:e9:07:92:d5:df:f9:35:78:
                    a4:d7:5f:54:02:84:5c:66:8c:bf:a5:0d:d7:4c:f0:
                    94:e2:25:08:8c:d5:f0:7f:a8:ba:ad:f4:86:fe:2d:
                    6c:66:25:91:3d:3d:a2:7c:db:48:8a:2c:ff:81:e0:
                    d5:5a:51:c8:e3:a0:c4:c3:ce:0d:56:0a:68:56:e1:
                    5d:3c:6c:6d:a6:19:e9:44:76:91:bf:a2:ec:a0:18:
                    08:15:5d:e2:c9:58:2c:29:ac:83:ac:b0:98:4a:80:
                    2c:23:22:3a:63:4e:2e:d9:b5:60:f4:b3:d9:64:c6:
                    e5:23:d8:fe:27:92:57:9d:e7:11:10:d8:60:a4:6b:
                    a8:f0:0f:a8:a0:79:85:52:e6:6b:4e:f4:d7:a0:d9:
                    a8:03:62:55:99:1a:e2:e5:3b:7e:13:9f:41:07:c0:
                    3f:d1:ea:49:6f:c5:a5:d0:b6:a1:30:92:ca:7c:1e:
                    73:9d:fe:bd:bd:c2:24:49:e4:ad:e3:a8:c9:bd:59:
                    b3:95:b8:1b:6b:bd:ff:d4:36:83:72:5c:84:a5:84:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:0A:C5:D7:E0:BD:05:D8:39:D1:A5:F8:CC:BD:1C:7D:66:A0:F1
            X509v3 Authority Key Identifier:
                keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:55:e2:eb:4e:c4:cd:a3:36:71:1d:9b:07:22:00:5c:30:2e:
         d5:2a:3b:30:b9:a1:d3:5e:c7:07:9c:b2:35:2b:96:77:a4:e7:
         12:d0:df:9e:c2:9e:0f:81:be:30:c5:5c:94:ed:e6:de:2d:de:
         53:12:81:a2:85:08:59:d9:93:0a:2b:8e:0b:98:6b:76:ad:47:
         a1:4e:2b:a9:5d:61:b1:c8:54:ce:2b:1d:33:ff:fc:a5:d6:bc:
         90:a2:7d:92:fa:6e:ba:6a:15:1b:c8:1b:25:8b:d3:4b:15:2b:
         fb:cb:49:34:86:f9:14:8b:0b:1e:9c:80:52:98:7d:2f:49:29:
         af:e3:0d:53:ac:f4:44:83:78:db:ce:63:73:52:dc:6e:6f:da:
         80:d3:59:31:d3:2b:5b:1e:e5:32:b8:77:b6:1c:ab:ee:fd:40:
         d9:fa:64:2e:e2:2b:23:25:c3:a1:87:9e:5d:95:c6:bc:7f:41:
         e2:c0:b8:50:41:88:e3:72:35:21:c0:2b:df:c7:19:6e:93:7a:
         02:87:53:a9:a3:ab:77:ee:98:ba:ce:94:a0:6c:58:3d:19:50:
         1c:78:cf:a1:29:72:86:27:e4:70:c5:4d:8d:a8:48:a1:c5:a1:
         27:df:e4:ca:a0:ab:2d:f2:3d:b3:a1:3b:58:5e:80:f3:2c:8c:
         84:ad:58:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPccY7ee2ZCchTAINrrECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjg3ZDg2MjgwODIyNWI0NTlmYTM5OWU2NWY4YTA2OTQ2
OWFiYTMwHhcNMjUwNDEzMTMwMTM5WhcNMjUwNDE0MTMwMTM5WjAzMTEwLwYDVQQD
Eyg4ZmMwMGFjNWQ3ZTBiZDA1ZDgzOWQxYTVmOGNjYmQxYzdkNjZhMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNZJyq48fdmmSCDn2gJIfGOTPxJh
NNjw8BH0CumAQYWPvUe59/p9oMs87eQd/fvkPm7E6QeS1d/5NXik119UAoRcZoy/
pQ3XTPCU4iUIjNXwf6i6rfSG/i1sZiWRPT2ifNtIiiz/geDVWlHI46DEw84NVgpo
VuFdPGxtphnpRHaRv6LsoBgIFV3iyVgsKayDrLCYSoAsIyI6Y04u2bVg9LPZZMbl
I9j+J5JXnecRENhgpGuo8A+ooHmFUuZrTvTXoNmoA2JVmRri5Tt+E59BB8A/0epJ
b8Wl0LahMJLKfB5znf69vcIkSeSt46jJvVmzlbgba73/1DaDclyEpYS0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/ACsXX4L0F2DnRpfjMvRx9ZqDxMB8GA1UdIwQY
MBaAFE1ofYYoCCJbRZ+jmeZfigaUaaujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQt
NTg0N2IxNDY5MzI2LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQtNTg0N2IxNDY5MzI2
LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVXi607E
zaM2cR2bByIAXDAu1So7MLmh017HB5yyNSuWd6TnEtDfnsKeD4G+MMVclO3m3i3e
UxKBooUIWdmTCiuOC5hrdq1HoU4rqV1hschUzisdM//8pda8kKJ9kvpuumoVG8gb
JYvTSxUr+8tJNIb5FIsLHpyAUph9L0kpr+MNU6z0RIN4285jc1Lcbm/agNNZMdMr
Wx7lMrh3thyr7v1A2fpkLuIrIyXDoYeeXZXGvH9B4sC4UEGI43I1IcAr38cZbpN6
AodTqaOrd+6Yus6UoGxYPRlQHHjPoSlyhifkcMVNjahIocWhJ9/kyqCrLfI9s6E7
WF6A8yyMhK1Yfw==
-----END CERTIFICATE-----