Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File:                     CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier:          iW6dzpaqb3YVJQNZqih9k8OdnmJeJ+mc/bQOAznCTpk=
Subject key identifier:   0A:0A:BB:78:AD:37:62:A4:91:ED:81:BF:39:1B:76:E4:92:6F:F2:0F
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer:       /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial:       01962F06B0028DED256AD8E055A836DC9064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number:          106D
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: MuXtnzwSxva9SbKM9s0MyGSvDDacVcTaTF8RC77UFog=)
                          2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:02:8d:ed:25:6a:d8:e0:55:a8:36:dc:90:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=0a0abb78ad3762a491ed81bf391b76e4926ff20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:32:03:b7:38:33:23:fe:18:29:dc:09:c9:
                    a3:eb:3a:99:6e:4a:a5:5c:23:a0:e4:99:4f:2f:4c:
                    fe:19:fb:01:bd:a9:55:3b:e5:b6:7f:ba:d3:be:e3:
                    03:79:fe:9d:97:bf:2e:e0:53:9b:a8:6a:5a:b0:55:
                    a0:da:69:da:1b:c6:9d:c7:f5:6c:a7:34:2e:93:74:
                    6f:f8:75:bf:5b:0d:6e:6d:94:f3:a4:9d:c9:83:f1:
                    5c:0e:a8:fb:fa:4e:0e:a7:33:51:fe:e4:60:71:49:
                    8e:6c:53:71:23:3a:98:dc:4f:a1:be:19:66:0a:a2:
                    bf:6a:3c:8f:5f:79:52:49:6e:89:73:ba:e9:76:a1:
                    8e:6d:e3:df:e5:45:28:28:0f:d2:cf:5c:b2:64:d4:
                    8e:c9:f1:d9:80:9c:e1:66:46:9a:cd:4b:eb:8c:fa:
                    54:5e:01:d9:7a:a1:01:9f:8e:5c:20:53:df:af:fc:
                    76:71:4a:47:c9:a1:17:ce:ba:43:34:56:a4:07:53:
                    6a:b0:c0:c1:e8:26:cc:9a:f6:b4:c6:6f:f4:83:2b:
                    9c:46:d4:ce:b8:d3:26:84:6b:e1:80:5b:3b:15:3f:
                    2e:88:1a:32:8a:53:17:db:1d:f6:71:0a:0f:0c:96:
                    b9:55:5f:73:82:2b:f6:ab:47:a7:80:58:d9:2c:1f:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:BB:78:AD:37:62:A4:91:ED:81:BF:39:1B:76:E4:92:6F:F2:0F
            X509v3 Authority Key Identifier:
                keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:af:b9:e2:19:8d:a2:ca:86:a2:64:e4:80:68:7a:b0:5b:
         42:5d:33:f4:20:c0:58:b1:7c:f3:8e:9e:36:67:ab:56:f8:5c:
         8b:d6:19:48:4b:a0:bd:b5:7d:c4:52:56:03:4a:d5:8d:21:de:
         68:da:45:37:d5:12:9d:7a:f7:3a:23:44:83:93:27:e0:88:fd:
         80:f8:77:f6:58:65:c3:0e:c0:52:ec:39:a6:fa:30:2e:bb:7e:
         14:3a:f8:78:f0:d4:59:4e:52:40:69:ac:5d:ef:b3:c1:b2:d2:
         5d:57:77:98:db:4d:c3:21:d8:d0:6c:21:ca:0d:f6:76:95:ce:
         29:fc:0a:e5:86:d8:54:3c:cf:7b:21:cd:64:9d:d5:90:cc:22:
         f3:e0:28:f2:24:db:7f:be:7f:c3:95:a6:d1:38:2d:c8:55:f7:
         b5:92:b0:11:c6:61:f5:38:cf:a6:e2:13:6a:72:9c:54:d2:9f:
         b5:66:ba:7e:ae:99:3d:00:f1:34:6f:a3:05:f8:fa:79:48:61:
         c5:1e:3f:b7:74:f8:f3:fc:79:eb:25:a5:e9:7a:cb:e3:ec:33:
         4b:5e:f7:e7:67:59:26:12:03:a6:41:14:5e:6a:2c:81:71:ce:
         e7:fd:31:a5:6f:c7:f4:e9:5d:76:f3:79:e3:0b:10:ec:e5:4c:
         56:d8:d8:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrACje0latjgVag23JBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3
OTg4ZWMwHhcNMjUwNDEzMTIwMTI5WhcNMjUwNDE0MTIwMTI5WjAzMTEwLwYDVQQD
EygwYTBhYmI3OGFkMzc2MmE0OTFlZDgxYmYzOTFiNzZlNDkyNmZmMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAIyA7c4MyP+GCncCcmj6zqZbkql
XCOg5JlPL0z+GfsBvalVO+W2f7rTvuMDef6dl78u4FObqGpasFWg2mnaG8adx/Vs
pzQuk3Rv+HW/Ww1ubZTzpJ3Jg/FcDqj7+k4OpzNR/uRgcUmObFNxIzqY3E+hvhlm
CqK/ajyPX3lSSW6Jc7rpdqGObePf5UUoKA/Sz1yyZNSOyfHZgJzhZkaazUvrjPpU
XgHZeqEBn45cIFPfr/x2cUpHyaEXzrpDNFakB1NqsMDB6CbMmva0xm/0gyucRtTO
uNMmhGvhgFs7FT8uiBoyilMX2x32cQoPDJa5VV9zgiv2q0engFjZLB9ldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoKu3itN2Kkke2BvzkbduSSb/IPMB8GA1UdIwQY
MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt
N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi
LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0GvueIZ
jaLKhqJk5IBoerBbQl0z9CDAWLF8846eNmerVvhci9YZSEugvbV9xFJWA0rVjSHe
aNpFN9USnXr3OiNEg5Mn4Ij9gPh39lhlww7AUuw5pvowLrt+FDr4ePDUWU5SQGms
Xe+zwbLSXVd3mNtNwyHY0Gwhyg32dpXOKfwK5YbYVDzPeyHNZJ3VkMwi8+Ao8iTb
f75/w5Wm0TgtyFX3tZKwEcZh9TjPpuITanKcVNKftWa6fq6ZPQDxNG+jBfj6eUhh
xR4/t3T48/x56yWl6XrL4+wzS17352dZJhIDpkEUXmosgXHO5/0xpW/H9OlddvN5
4wsQ7OVMVtjYQw==
-----END CERTIFICATE-----