Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File:                     CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier:          waZqJXYgSh1nIlLZP09FyxiOGVvZxV60vnax5lpvwOw=
Subject key identifier:   93:27:2C:EB:CF:F0:59:5F:45:A7:8A:61:CA:D4:EA:D2:C8:9B:FD:35
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer:       /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial:       01962E2B4006B78F9698CBB00F7AD5CDA426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: iPcQ9HcftcAvYOj75R5jqa8NzuJXlRRb/W/dmzKdJ+k=)
                          2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:40:06:b7:8f:96:98:cb:b0:0f:7a:d5:cd:a4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=93272cebcff0595f45a78a61cad4ead2c89bfd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:57:4e:5c:64:b2:14:6d:1b:cf:09:f0:48:
                    c9:bd:89:f8:a3:78:12:08:6c:0f:6c:2d:66:5e:cc:
                    48:36:b2:ce:cb:df:cb:ac:ce:d7:2b:4e:8f:0c:7f:
                    41:e6:f2:47:f8:ec:1a:4f:86:7d:7a:8d:c9:d3:2c:
                    39:c4:f6:ff:38:95:2c:42:d2:cd:b4:8a:b7:d7:a2:
                    8e:12:2e:d6:5d:5b:4d:d4:35:2f:14:cc:a3:ce:9d:
                    2d:de:0b:c4:c8:e9:e0:29:06:ac:3f:4f:a0:75:9e:
                    f1:ac:b8:93:10:ea:2e:8b:12:02:d7:fe:4d:0d:62:
                    0d:90:3f:52:c8:38:b7:6a:a7:15:cd:c5:d4:85:b9:
                    02:29:aa:68:11:4a:c3:e8:2b:9a:ca:a0:59:76:fb:
                    7b:5e:76:33:56:86:5a:d1:78:c1:62:e7:63:59:dd:
                    2b:f7:a1:d0:8c:c6:cb:c7:82:32:32:20:4d:be:86:
                    52:ec:bf:1c:d5:bb:6c:d5:53:0a:65:77:93:d8:74:
                    db:15:75:78:65:9d:d9:e2:5e:70:52:21:ba:a6:bd:
                    ee:03:e2:5b:67:99:78:cb:37:bc:bb:55:08:8b:3b:
                    69:13:c3:4e:a9:e7:bd:b4:7d:67:80:44:cc:36:53:
                    21:c1:4e:a5:69:96:9b:64:18:ea:84:15:d1:ca:81:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:27:2C:EB:CF:F0:59:5F:45:A7:8A:61:CA:D4:EA:D2:C8:9B:FD:35
            X509v3 Authority Key Identifier:
                keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:03:90:4d:e5:6c:67:aa:de:e3:ce:c6:e2:4f:97:aa:f0:b0:
         d9:c6:bd:57:2d:89:80:a9:82:d9:34:ee:20:93:dc:0d:46:30:
         c0:9d:bd:46:6c:85:8a:9f:a6:17:17:cc:c3:65:b9:88:cc:72:
         86:67:42:4c:46:65:68:45:92:70:dd:dd:f6:fc:7d:92:5a:42:
         c5:05:59:eb:bd:5f:e7:64:9b:8f:f8:45:4b:1d:ea:42:57:6c:
         01:4d:b4:74:3d:b6:dd:bc:50:24:45:e5:c0:5b:74:79:3a:d0:
         bb:f3:eb:91:99:a8:23:d6:3c:b3:aa:d4:46:d1:7b:49:a7:5c:
         6d:24:11:cf:8a:64:89:71:64:0e:d1:8d:f1:0e:32:40:b9:6d:
         81:2f:44:9e:44:05:c8:5c:77:8c:6c:fe:65:7b:bf:5a:36:46:
         96:7c:3f:b2:ad:0d:6d:65:fe:98:9d:66:68:7c:ff:93:a0:5b:
         8e:2e:7c:84:31:23:fc:44:81:c1:79:ea:bd:70:93:a7:6b:67:
         77:2b:cb:44:07:eb:01:3c:63:c7:e4:e3:fe:e2:c4:a7:2a:28:
         0a:a0:73:c6:3c:12:12:a3:d7:80:87:85:a9:09:71:c0:82:23:
         7c:be:ad:a3:cf:3a:a9:80:25:b5:20:62:c0:89:9f:0d:b7:5d:
         ba:8c:46:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0AGt4+WmMuwD3rVzaQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm
ZDJmMWIwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
Eyg5MzI3MmNlYmNmZjA1OTVmNDVhNzhhNjFjYWQ0ZWFkMmM4OWJmZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC9XTlxkshRtG88J8EjJvYn4o3gS
CGwPbC1mXsxINrLOy9/LrM7XK06PDH9B5vJH+OwaT4Z9eo3J0yw5xPb/OJUsQtLN
tIq316KOEi7WXVtN1DUvFMyjzp0t3gvEyOngKQasP0+gdZ7xrLiTEOouixIC1/5N
DWINkD9SyDi3aqcVzcXUhbkCKapoEUrD6CuayqBZdvt7XnYzVoZa0XjBYudjWd0r
96HQjMbLx4IyMiBNvoZS7L8c1bts1VMKZXeT2HTbFXV4ZZ3Z4l5wUiG6pr3uA+Jb
Z5l4yze8u1UIiztpE8NOqee9tH1ngETMNlMhwU6laZabZBjqhBXRyoEtmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMnLOvP8FlfRaeKYcrU6tLIm/01MB8GA1UdIwQY
MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt
NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2
LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQOQTeVs
Z6re487G4k+XqvCw2ca9Vy2JgKmC2TTuIJPcDUYwwJ29RmyFip+mFxfMw2W5iMxy
hmdCTEZlaEWScN3d9vx9klpCxQVZ671f52Sbj/hFSx3qQldsAU20dD223bxQJEXl
wFt0eTrQu/PrkZmoI9Y8s6rURtF7SadcbSQRz4pkiXFkDtGN8Q4yQLltgS9EnkQF
yFx3jGz+ZXu/WjZGlnw/sq0NbWX+mJ1maHz/k6Bbji58hDEj/ESBwXnqvXCTp2tn
dyvLRAfrATxjx+Tj/uLEpyooCqBzxjwSEqPXgIeFqQlxwIIjfL6to886qYAltSBi
wImfDbdduoxGSw==
-----END CERTIFICATE-----