Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File:                     h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier:          jA6aASgB/6fyaXRUb2PKqi5RS3ANtHtal+BHtFxpOrI=
Subject key identifier:   21:3A:C2:86:AC:93:48:2F:DD:B1:9D:BF:9A:02:DF:47:D0:24:4C:DD
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer:       /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial:       01962DF3C7E51E78175DD1DD201E16A00A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number:          03FE
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
                          2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: z7nzqhgrWlXbPjvz2wj5c6KKqbyy+1vqC0jjqK42iGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c7:e5:1e:78:17:5d:d1:dd:20:1e:16:a0:0a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=213ac286ac93482fddb19dbf9a02df47d0244cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:78:86:99:61:7c:90:77:de:1d:a1:22:1e:
                    e7:99:48:11:83:d8:51:17:d0:28:f2:3d:66:80:d5:
                    32:22:e7:7f:fa:42:69:e4:be:c1:20:bc:9d:a5:b6:
                    ca:25:65:a4:b7:d6:f5:30:25:0c:4c:fc:a5:2d:f0:
                    11:d4:32:91:c2:2e:e0:6b:3c:54:d1:35:a1:3b:7f:
                    fd:52:3e:57:c9:f3:91:4c:bd:e3:12:84:74:78:a1:
                    e0:f9:72:15:bd:a4:ff:a0:a5:d0:86:6b:23:c0:8c:
                    a2:0f:7c:e8:0c:a9:5e:04:43:7f:e6:c0:e5:1d:2b:
                    45:b9:31:59:55:07:05:c9:d3:c1:42:63:79:58:c1:
                    8a:2c:75:60:3a:44:b5:06:aa:4f:d0:b8:82:38:e0:
                    13:b5:9f:d2:32:43:18:d8:0b:93:43:98:c4:b7:72:
                    fe:a3:d8:b9:69:55:33:12:c8:ea:44:3d:37:d8:59:
                    74:9f:d8:5c:77:2f:7f:9a:3a:49:8c:1d:60:26:3b:
                    17:64:53:79:a7:7b:90:80:27:f8:7c:d9:b3:db:7c:
                    dd:da:1f:ad:b5:9c:7c:94:35:5d:13:9e:63:3a:3c:
                    af:44:b9:06:62:a8:ff:25:44:03:86:ae:ce:57:51:
                    58:8d:85:92:bf:93:55:8a:c6:46:b5:05:f9:05:a0:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3A:C2:86:AC:93:48:2F:DD:B1:9D:BF:9A:02:DF:47:D0:24:4C:DD
            X509v3 Authority Key Identifier:
                keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:7b:a1:50:41:3d:76:0e:7f:bc:0a:c9:ad:b6:de:54:56:
         84:99:d6:ad:a1:f5:09:c1:37:bd:0b:d1:ca:f3:4b:e8:b5:6d:
         f3:66:4a:4c:6e:7c:4a:d5:f5:4c:72:11:5c:ff:5f:94:be:be:
         a1:cf:54:ae:a4:25:ce:91:32:fe:e7:a0:63:13:68:17:8d:55:
         df:92:5c:7c:ee:ed:69:e0:4b:bc:fa:50:30:bd:bc:65:db:25:
         3d:fd:94:7b:e2:3e:7f:4a:a2:82:3a:e6:f5:7f:a9:6c:1c:2d:
         58:98:83:56:a5:96:6c:d6:59:63:df:4d:62:01:c2:5e:a2:74:
         f1:e6:89:7b:e3:88:db:d1:a2:85:d1:42:5a:3e:35:44:0f:1a:
         0a:bc:ae:8b:f4:f1:48:cd:57:f4:80:53:7d:b5:0d:2f:e9:85:
         12:e2:38:10:83:39:37:b7:cb:b3:30:62:e7:b0:0d:56:1a:a2:
         5a:55:60:43:85:0b:9c:4a:19:7f:1a:ba:e5:90:4b:6a:f0:e6:
         e1:a5:43:5d:20:8f:3b:80:5a:93:cc:f8:00:f1:f1:02:34:18:
         8a:e8:c3:a4:43:78:e2:7d:c2:c2:a8:ac:33:50:ff:f9:10:88:
         27:a1:a1:73:5b:df:70:5b:5b:2a:77:2b:1e:23:ff:5d:1c:5c:
         32:e8:03:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88flHngXXdHdIB4WoAoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm
ZTA1NzAwHhcNMjUwNDEzMDcwMTEzWhcNMjUwNDE0MDcwMTEzWjAzMTEwLwYDVQQD
EygyMTNhYzI4NmFjOTM0ODJmZGRiMTlkYmY5YTAyZGY0N2QwMjQ0Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mF4hplhfJB33h2hIh7nmUgRg9hR
F9Ao8j1mgNUyIud/+kJp5L7BILydpbbKJWWkt9b1MCUMTPylLfAR1DKRwi7gazxU
0TWhO3/9Uj5XyfORTL3jEoR0eKHg+XIVvaT/oKXQhmsjwIyiD3zoDKleBEN/5sDl
HStFuTFZVQcFydPBQmN5WMGKLHVgOkS1BqpP0LiCOOATtZ/SMkMY2AuTQ5jEt3L+
o9i5aVUzEsjqRD032Fl0n9hcdy9/mjpJjB1gJjsXZFN5p3uQgCf4fNmz23zd2h+t
tZx8lDVdE55jOjyvRLkGYqj/JUQDhq7OV1FYjYWSv5NVisZGtQX5BaAC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE6woask0gv3bGdv5oC30fQJEzdMB8GA1UdIwQY
MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt
YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5
LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxl7oVBB
PXYOf7wKya223lRWhJnWraH1CcE3vQvRyvNL6LVt82ZKTG58StX1THIRXP9flL6+
oc9UrqQlzpEy/uegYxNoF41V35JcfO7taeBLvPpQML28ZdslPf2Ue+I+f0qigjrm
9X+pbBwtWJiDVqWWbNZZY99NYgHCXqJ08eaJe+OI29GihdFCWj41RA8aCryui/Tx
SM1X9IBTfbUNL+mFEuI4EIM5N7fLszBi57ANVhqiWlVgQ4ULnEoZfxq65ZBLavDm
4aVDXSCPO4Bak8z4APHxAjQYiujDpEN44n3CwqisM1D/+RCIJ6Ghc1vfcFtbKncr
HiP/XRxcMugD6Q==
-----END CERTIFICATE-----