Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File:                     6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier:          8OU7ag/1WfDBJtDCzTBa9G7q1ifHNC0DHW/fhOlleXU=
Subject key identifier:   A5:60:86:B0:08:1D:C7:54:24:43:06:29:9A:90:9F:8A:60:B0:E8:75
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       01962F7477D3CA8E6701B6956D7F6D2DE359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number:          0C44
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: N3Ah2QDB7Qo8SFTlJFnfQQnPFW6OeX9szv4cz3/s6zk=)
                          2: Uw2HhLlb12QdlcnO10bcifYvljg.roa (hash: EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:77:d3:ca:8e:67:01:b6:95:6d:7f:6d:2d:e3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=a56086b0081dc754244306299a909f8a60b0e875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:c2:6f:de:0c:c4:fa:c8:6d:43:2a:31:09:
                    8a:8f:13:9d:3f:df:27:e1:0d:c9:ee:c6:ff:fa:25:
                    95:10:f7:12:88:d6:3a:5e:fc:f5:8f:8d:34:9a:0d:
                    ac:01:33:3a:d9:23:6e:87:d0:51:42:be:23:11:2d:
                    03:01:7b:d8:15:22:45:a4:9d:12:a9:3f:b5:62:da:
                    ce:b1:01:83:84:03:91:b0:41:1c:93:6e:46:59:bd:
                    86:3e:68:e1:a6:2b:a0:c9:14:bb:d1:ac:51:e9:ed:
                    af:fc:3a:4c:57:1d:32:3a:f0:6b:5c:5e:b7:e4:95:
                    ba:3f:4b:46:aa:51:41:d7:ab:d3:06:ca:c5:97:37:
                    99:3b:8b:58:50:9c:e9:e9:b8:d0:89:76:b6:ff:11:
                    2f:21:c0:66:5e:33:f4:62:41:54:bd:99:9e:fe:6b:
                    b9:f6:54:e8:ec:92:18:12:6d:35:32:12:81:05:3a:
                    66:14:7e:6a:9f:ae:0b:bc:d8:f4:d0:64:4e:80:54:
                    a8:da:69:4e:c9:18:8f:d7:9d:67:ea:c4:65:a9:8f:
                    3f:05:1b:5e:cf:d2:fa:f5:13:3a:50:ab:ef:57:e6:
                    95:c4:a6:60:54:a5:e7:42:f4:f8:49:61:fa:7c:0a:
                    92:1b:67:6c:6c:c0:69:16:f0:64:59:6c:2c:3d:23:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:60:86:B0:08:1D:C7:54:24:43:06:29:9A:90:9F:8A:60:B0:E8:75
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:1b:31:5e:a8:6b:2c:41:37:56:c7:e0:71:da:32:f9:4b:
         c3:c6:41:37:01:2f:73:40:28:d8:ff:15:35:6a:b0:72:99:79:
         e6:60:d4:a7:60:08:cf:53:06:50:87:10:00:cd:3f:6f:c1:9e:
         ff:e9:db:34:2a:ab:ad:79:ff:c8:ab:6d:38:cf:e1:8d:81:24:
         e2:c6:9d:b6:f6:3a:ac:29:88:2d:37:a2:8d:68:0d:e6:38:47:
         a3:93:76:c7:fc:75:46:bf:a8:d7:56:b4:89:b0:59:02:c9:af:
         ff:8d:a3:d8:50:82:c1:60:60:9d:bd:c7:ad:8e:83:a5:f8:1a:
         16:00:37:d4:e7:5d:f1:1d:ad:e5:5a:f9:db:50:56:15:ed:5a:
         f3:f9:33:0f:0d:30:f6:a2:d5:7e:f3:f3:43:87:e8:07:f2:cd:
         0f:4e:84:99:28:24:dc:6e:4b:54:6d:a1:11:f7:b4:5b:14:bb:
         89:fa:8b:72:06:7c:2e:2f:b7:64:23:ba:bc:24:b1:87:20:13:
         cb:a2:a4:b0:21:3c:5a:51:ab:bc:ed:48:90:33:63:77:28:14:
         5d:84:76:91:79:e8:6a:c2:7a:3c:85:9d:47:5e:80:1e:43:80:
         1c:b4:e3:3e:5e:0e:57:09:49:07:5e:28:7b:33:ed:a2:06:a2:
         96:a3:8f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHfTyo5nAbaVbX9tLeNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh
YmI5NjgwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhhNTYwODZiMDA4MWRjNzU0MjQ0MzA2Mjk5YTkwOWY4YTYwYjBlODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTrCb94MxPrIbUMqMQmKjxOdP98n
4Q3J7sb/+iWVEPcSiNY6Xvz1j400mg2sATM62SNuh9BRQr4jES0DAXvYFSJFpJ0S
qT+1YtrOsQGDhAORsEEck25GWb2GPmjhpiugyRS70axR6e2v/DpMVx0yOvBrXF63
5JW6P0tGqlFB16vTBsrFlzeZO4tYUJzp6bjQiXa2/xEvIcBmXjP0YkFUvZme/mu5
9lTo7JIYEm01MhKBBTpmFH5qn64LvNj00GROgFSo2mlOyRiP151n6sRlqY8/BRte
z9L69RM6UKvvV+aVxKZgVKXnQvT4SWH6fAqSG2dsbMBpFvBkWWwsPSOENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVghrAIHcdUJEMGKZqQn4pgsOh1MB8GA1UdIwQY
MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt
YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj
LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqYbMV6o
ayxBN1bH4HHaMvlLw8ZBNwEvc0Ao2P8VNWqwcpl55mDUp2AIz1MGUIcQAM0/b8Ge
/+nbNCqrrXn/yKttOM/hjYEk4sadtvY6rCmILTeijWgN5jhHo5N2x/x1Rr+o11a0
ibBZAsmv/42j2FCCwWBgnb3HrY6DpfgaFgA31Odd8R2t5Vr521BWFe1a8/kzDw0w
9qLVfvPzQ4foB/LND06EmSgk3G5LVG2hEfe0WxS7ifqLcgZ8Li+3ZCO6vCSxhyAT
y6KksCE8WlGrvO1IkDNjdygUXYR2kXnoasJ6PIWdR16AHkOAHLTjPl4OVwlJB14o
ezPtogailqOPEA==
-----END CERTIFICATE-----