Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File:                     A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier:          xflCVZZF+cjWb5bA3Kej7QoXho5o2SIUh+clEKcTJNs=
Subject key identifier:   00:A9:13:13:A3:66:B7:22:3B:77:F8:F5:D8:51:8B:6F:89:03:77:DA
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer:       /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial:       01962F74D58F48B740D407240CD50F2F9635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number:          0C71
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
                          2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: 1Qi/c9HOFpGc3EKKPqBH5V+JJ3F+y/Wxnm71NwnEsN0=)
                          3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:8f:48:b7:40:d4:07:24:0c:d5:0f:2f:96:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038af86795417a3584d616375209a72efee2462b
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=00a91313a366b7223b77f8f5d8518b6f890377da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:2c:1d:34:08:37:da:ff:72:26:83:ae:ec:
                    6e:82:55:ec:45:29:31:e1:98:d4:ce:4a:99:f7:5f:
                    fc:d1:4f:17:82:36:c7:d9:38:7a:1d:18:86:bb:aa:
                    1f:57:00:45:cc:db:f9:a2:da:28:db:8d:78:03:d6:
                    5d:8d:32:73:f1:82:a6:5c:7f:ad:21:87:c2:f7:48:
                    42:b0:7d:0d:c7:be:1c:9b:e9:d1:38:f5:50:73:4a:
                    ca:17:ea:e3:17:1d:8d:59:c3:d8:be:59:72:3e:b6:
                    d9:27:87:4e:39:73:1f:0b:32:6b:bf:41:a8:3f:ba:
                    b5:09:49:fc:f0:2f:e4:82:fb:60:f0:a1:22:f2:35:
                    8e:53:7a:97:77:4d:4c:7f:47:0c:7d:1f:b9:31:24:
                    ea:9f:7d:c5:7f:30:7d:97:0c:d2:67:4a:4f:02:7f:
                    a7:f2:39:69:a8:11:33:6f:25:99:fb:16:57:82:18:
                    30:3b:b7:3a:c6:b8:46:e5:6d:69:52:98:a8:09:3d:
                    25:eb:df:9c:8c:63:32:dd:43:c3:81:cc:8d:5e:66:
                    ca:b2:6a:60:1c:ac:7b:25:44:75:e7:88:cd:63:8d:
                    21:6b:c7:ce:ee:d1:08:e5:dd:ea:81:e3:ab:9c:e9:
                    74:25:0a:92:d5:82:f4:0c:e9:56:db:03:16:74:eb:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A9:13:13:A3:66:B7:22:3B:77:F8:F5:D8:51:8B:6F:89:03:77:DA
            X509v3 Authority Key Identifier:
                keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:54:be:99:48:12:e8:cf:6d:75:52:47:ce:49:87:0d:d7:2e:
         54:89:12:02:d6:dd:25:21:b7:dc:15:53:27:9c:aa:df:c1:1f:
         21:fe:e7:5a:f3:bf:86:d9:03:a9:f0:86:6c:24:8c:50:99:92:
         f2:ee:79:2c:09:9e:d8:f8:c6:55:a6:45:08:31:4e:09:47:ce:
         4c:f3:08:75:d7:c0:6b:f2:31:6b:4f:b2:80:3b:b5:f4:80:dc:
         31:81:c0:73:c6:d6:8e:25:c3:83:90:b2:84:a2:c0:7d:1c:28:
         21:21:7b:10:a2:30:14:d9:18:19:6b:ff:04:b0:9d:80:67:d9:
         1e:ad:e5:6a:28:bf:17:76:79:35:f4:97:e5:89:66:54:fd:8f:
         c4:61:f1:f0:5a:f4:47:47:82:a3:d6:f2:aa:e1:b1:e3:fb:0f:
         60:eb:26:c2:66:31:c0:d1:53:02:93:7e:c9:c3:ab:c9:ca:6d:
         8a:32:95:d0:a2:61:a6:75:15:4d:eb:72:09:7d:47:45:71:dd:
         12:b4:b7:f0:fe:07:0a:96:1f:99:90:17:e7:b8:01:85:c6:2f:
         1a:fa:c2:72:5f:8b:15:4f:c3:fd:e9:f6:b3:d2:3d:b0:6a:65:
         ca:89:c2:a2:8c:34:55:20:38:64:c6:c4:ff:2b:84:43:17:7f:
         f9:0c:97:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNWPSLdA1AckDNUPL5Y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGFmODY3OTU0MTdhMzU4NGQ2MTYzNzUyMDlhNzJlZmVl
MjQ2MmIwHhcNMjUwNDEzMTQwMTQ3WhcNMjUwNDE0MTQwMTQ3WjAzMTEwLwYDVQQD
EygwMGE5MTMxM2EzNjZiNzIyM2I3N2Y4ZjVkODUxOGI2Zjg5MDM3N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhosHTQIN9r/ciaDruxuglXsRSkx
4ZjUzkqZ91/80U8XgjbH2Th6HRiGu6ofVwBFzNv5otoo2414A9ZdjTJz8YKmXH+t
IYfC90hCsH0Nx74cm+nROPVQc0rKF+rjFx2NWcPYvllyPrbZJ4dOOXMfCzJrv0Go
P7q1CUn88C/kgvtg8KEi8jWOU3qXd01Mf0cMfR+5MSTqn33FfzB9lwzSZ0pPAn+n
8jlpqBEzbyWZ+xZXghgwO7c6xrhG5W1pUpioCT0l69+cjGMy3UPDgcyNXmbKsmpg
HKx7JUR154jNY40ha8fO7tEI5d3qgeOrnOl0JQqS1YL0DOlW2wMWdOt93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACpExOjZrciO3f49dhRi2+JA3faMB8GA1UdIwQY
MBaAFAOK+GeVQXo1hNYWN1IJpy7+4kYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQt
NDMxZjI3YTYyZWQ4LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQtNDMxZjI3YTYyZWQ4
LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1S+mUgS
6M9tdVJHzkmHDdcuVIkSAtbdJSG33BVTJ5yq38EfIf7nWvO/htkDqfCGbCSMUJmS
8u55LAme2PjGVaZFCDFOCUfOTPMIddfAa/Ixa0+ygDu19IDcMYHAc8bWjiXDg5Cy
hKLAfRwoISF7EKIwFNkYGWv/BLCdgGfZHq3laii/F3Z5NfSX5YlmVP2PxGHx8Fr0
R0eCo9byquGx4/sPYOsmwmYxwNFTApN+ycOrycptijKV0KJhpnUVTetyCX1HRXHd
ErS38P4HCpYfmZAX57gBhcYvGvrCcl+LFU/D/en2s9I9sGplyonCoow0VSA4ZMbE
/yuEQxd/+QyXWA==
-----END CERTIFICATE-----