Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File:                     i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier:          g0olleeMLko8f54iag9IWqc6vN68BPT/Fix4rzAf1SM=
Subject key identifier:   A4:94:76:F8:18:F0:1B:F0:3D:D8:EF:DD:5E:1F:58:7F:B3:FE:3B:30
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer:       /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial:       01962F74C2526BAC0E3D4AE072B193D9DD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number:          0A57
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
                          2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
                          3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: VWzC7OTDwsJ0WtOlkaz/v6NQslIWoPzk2/srsWJlxhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c2:52:6b:ac:0e:3d:4a:e0:72:b1:93:d9:dd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=a49476f818f01bf03dd8efdd5e1f587fb3fe3b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:17:f9:7b:a0:42:72:96:b6:7f:d8:70:ae:
                    f6:04:4c:f1:5a:ba:7d:3e:44:db:fc:2c:fc:ed:4e:
                    15:10:f3:e6:4f:a3:0a:a4:65:a9:f4:ab:9c:0a:e0:
                    f2:e9:a2:e9:2a:54:b3:3c:f4:15:d6:e3:26:c2:a3:
                    67:b7:bb:f1:d6:4c:1b:d4:ed:2e:19:84:85:e6:97:
                    80:2c:43:c1:da:b8:f6:58:bd:d4:aa:a1:c2:5f:37:
                    4e:5d:1c:8d:25:78:02:4d:25:7e:96:13:07:c2:46:
                    f9:80:f2:d6:c7:2d:6f:92:71:dd:03:16:98:bd:ca:
                    64:3f:2c:64:2c:8b:04:53:fc:75:4e:c8:1f:9d:cb:
                    48:f4:2c:22:b5:d0:71:91:79:5d:53:5c:6e:d0:c0:
                    d7:a3:f2:2d:bb:8a:b2:ad:7e:01:d6:dc:bd:0f:38:
                    03:4a:84:a4:c5:a1:74:a8:60:c2:57:fa:65:d4:f5:
                    27:9c:6f:2f:71:dc:cb:ec:cf:4d:09:74:88:36:e7:
                    95:b7:ae:be:5f:9b:6e:42:6d:3d:1a:5c:90:47:44:
                    47:f4:90:df:6b:62:e9:71:c5:02:a8:d5:75:c3:1a:
                    39:6f:9e:28:79:5b:be:de:c0:df:84:69:d9:89:e5:
                    55:68:cc:75:96:4c:02:c7:96:fa:e1:b1:4d:75:2b:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:94:76:F8:18:F0:1B:F0:3D:D8:EF:DD:5E:1F:58:7F:B3:FE:3B:30
            X509v3 Authority Key Identifier:
                keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:a6:3c:73:a7:5d:07:54:b2:bb:2b:01:b2:59:4b:f4:0a:
         d4:cd:3b:61:10:b7:4d:5e:a7:21:a3:38:c9:11:b1:49:9a:31:
         36:c7:e8:6b:6a:85:e2:da:fd:ed:1e:3d:34:ff:7d:cd:a3:6b:
         70:e6:5e:b0:7a:cc:e4:d8:4b:cd:46:ac:87:2b:93:75:83:3e:
         12:8b:03:d9:e0:2a:df:cb:f8:bd:ec:bc:c0:6a:d5:34:8e:c4:
         d3:44:15:de:13:70:54:a8:ad:b9:06:7e:2b:63:94:5d:d0:23:
         3e:14:83:89:a4:d8:4e:06:d5:12:88:71:58:26:c0:30:5f:c0:
         d8:8c:3b:0f:20:d9:d5:27:75:84:34:23:00:a9:c7:9f:e9:19:
         7f:48:12:cb:7c:c7:d5:98:d8:88:52:0f:ce:f4:de:1c:ae:66:
         74:02:69:90:ed:28:0c:31:dd:d9:5a:2c:58:74:93:36:5b:68:
         cd:b6:bf:18:76:6c:04:88:91:a5:57:0f:92:e5:4d:77:7d:c9:
         9e:19:90:cb:fe:6d:ca:01:ea:75:5b:15:cd:59:5b:12:ea:e4:
         b0:a7:ba:91:18:6f:ae:31:c0:08:8d:06:00:89:bd:24:a1:f9:
         d1:28:fa:0c:36:5f:a0:c5:38:a3:82:30:f5:ac:b8:61:f2:8f:
         5e:2b:42:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMJSa6wOPUrgcrGT2d0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk
OGM2ZTMwHhcNMjUwNDEzMTQwMTQzWhcNMjUwNDE0MTQwMTQzWjAzMTEwLwYDVQQD
EyhhNDk0NzZmODE4ZjAxYmYwM2RkOGVmZGQ1ZTFmNTg3ZmIzZmUzYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47wX+XugQnKWtn/YcK72BEzxWrp9
PkTb/Cz87U4VEPPmT6MKpGWp9KucCuDy6aLpKlSzPPQV1uMmwqNnt7vx1kwb1O0u
GYSF5peALEPB2rj2WL3UqqHCXzdOXRyNJXgCTSV+lhMHwkb5gPLWxy1vknHdAxaY
vcpkPyxkLIsEU/x1TsgfnctI9CwitdBxkXldU1xu0MDXo/Itu4qyrX4B1ty9DzgD
SoSkxaF0qGDCV/pl1PUnnG8vcdzL7M9NCXSINueVt66+X5tuQm09GlyQR0RH9JDf
a2LpccUCqNV1wxo5b54oeVu+3sDfhGnZieVVaMx1lkwCx5b64bFNdSvyBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSUdvgY8BvwPdjv3V4fWH+z/jswMB8GA1UdIwQY
MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct
NmIwZWY5MTA4Njg4LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4
LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6OmPHOn
XQdUsrsrAbJZS/QK1M07YRC3TV6nIaM4yRGxSZoxNsfoa2qF4tr97R49NP99zaNr
cOZesHrM5NhLzUashyuTdYM+EosD2eAq38v4vey8wGrVNI7E00QV3hNwVKituQZ+
K2OUXdAjPhSDiaTYTgbVEohxWCbAMF/A2Iw7DyDZ1Sd1hDQjAKnHn+kZf0gSy3zH
1ZjYiFIPzvTeHK5mdAJpkO0oDDHd2VosWHSTNltozba/GHZsBIiRpVcPkuVNd33J
nhmQy/5tygHqdVsVzVlbEurksKe6kRhvrjHACI0GAIm9JKH50Sj6DDZfoMU4o4Iw
9ay4YfKPXitCSg==
-----END CERTIFICATE-----