Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File:                     CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier:          49FVGMkAIwy34hTODt9QGmAY2V7K15IkLnJQ5rtqDwY=
Subject key identifier:   A7:5B:7E:23:EB:66:1D:87:E0:39:72:82:4B:EE:88:C1:83:3B:94:32
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer:       /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial:       01962F74B69A6D3F667D344E3763BE21CF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number:          1034
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
                          2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: A64KmHJRY9GJexXeWTPA6InlGhzwUHsPyE7CmK6ph64=)
                          3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b6:9a:6d:3f:66:7d:34:4e:37:63:be:21:cf:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=a75b7e23eb661d87e03972824bee88c1833b9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:2f:c0:f3:82:66:26:06:2a:5d:2a:cd:bf:
                    1e:d1:02:2c:6e:79:73:28:b2:a4:25:94:00:b4:9c:
                    b4:21:20:56:1f:3a:0d:09:c6:34:1e:7c:bf:1f:b2:
                    57:3d:57:8d:1a:83:fd:4a:bf:d7:30:6e:ac:1c:98:
                    44:a8:37:2d:48:0b:c2:7d:06:e2:f8:78:95:02:5d:
                    c6:10:90:9c:b7:30:e0:14:ef:9a:5b:a5:68:d1:95:
                    e5:79:ec:c6:91:99:5a:aa:47:13:c4:68:b6:bd:98:
                    94:bc:d3:24:0a:92:94:69:ef:1d:c5:40:d0:9c:5f:
                    82:80:60:83:2f:f9:7a:d2:3d:bf:97:91:f7:5a:6f:
                    88:b7:b3:01:94:e8:34:56:0d:3e:4f:73:1f:36:4f:
                    11:84:3e:13:3b:21:28:5c:5d:bf:c9:7d:83:22:98:
                    37:0e:39:0f:51:4e:12:50:9e:84:c5:21:e6:06:a7:
                    e2:47:87:7c:ba:0b:83:e5:26:61:53:7d:c3:e7:65:
                    5a:5d:d3:89:db:6b:59:8f:d5:b3:f5:d6:d0:52:ae:
                    92:c5:c7:fe:64:d9:b0:4a:fa:ec:d5:93:25:96:f6:
                    51:bd:0b:c5:aa:84:da:41:66:0a:49:87:43:52:1c:
                    2d:70:03:7a:70:09:08:ee:91:74:56:7f:2c:0a:75:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:7E:23:EB:66:1D:87:E0:39:72:82:4B:EE:88:C1:83:3B:94:32
            X509v3 Authority Key Identifier:
                keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:3d:66:d1:54:f0:f0:4a:84:f2:36:03:e8:2f:68:cb:4f:
         15:82:11:a9:8b:89:c1:a6:a8:87:e0:cf:41:8f:01:fa:f2:60:
         5c:24:40:55:c7:6e:3c:ca:e7:74:ed:69:cd:9f:09:b4:00:84:
         1f:58:48:1e:14:22:a0:ab:6f:4c:b7:c1:52:f2:3b:80:38:b0:
         30:c5:a7:8b:5f:0a:8d:f9:d2:e6:8c:1f:62:86:ba:45:3d:49:
         36:f8:36:4e:69:63:df:ad:85:84:bc:94:6f:6c:a8:53:e6:64:
         88:85:5a:79:5c:59:4c:a0:d2:cc:12:74:c3:e6:c1:93:06:56:
         82:18:98:29:e7:2a:87:a2:2d:93:46:56:d3:0f:9a:15:16:12:
         dd:af:b9:fa:87:ed:c0:f1:a8:5a:64:6b:4b:f2:73:84:96:b8:
         33:87:42:7a:87:7c:fb:37:bf:02:d8:e8:05:98:7e:7e:1b:75:
         b0:a5:a0:c6:7c:76:b9:af:a5:a8:2b:d4:7f:63:86:cb:44:8c:
         47:04:c0:a6:2e:e6:88:88:42:f0:71:42:69:4d:e6:9e:6c:90:
         f7:57:8d:49:37:80:a8:94:89:5e:6f:6d:90:c3:07:81:b1:55:
         79:da:3e:6a:4a:12:48:f9:7e:02:3a:ae:f7:e2:1d:7c:96:c4:
         76:aa:c8:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLaabT9mfTRON2O+Ic84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjUwNDEzMTQwMTQwWhcNMjUwNDE0MTQwMTQwWjAzMTEwLwYDVQQD
EyhhNzViN2UyM2ViNjYxZDg3ZTAzOTcyODI0YmVlODhjMTgzM2I5NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdUvwPOCZiYGKl0qzb8e0QIsbnlz
KLKkJZQAtJy0ISBWHzoNCcY0Hny/H7JXPVeNGoP9Sr/XMG6sHJhEqDctSAvCfQbi
+HiVAl3GEJCctzDgFO+aW6Vo0ZXleezGkZlaqkcTxGi2vZiUvNMkCpKUae8dxUDQ
nF+CgGCDL/l60j2/l5H3Wm+It7MBlOg0Vg0+T3MfNk8RhD4TOyEoXF2/yX2DIpg3
DjkPUU4SUJ6ExSHmBqfiR4d8uguD5SZhU33D52VaXdOJ22tZj9Wz9dbQUq6Sxcf+
ZNmwSvrs1ZMllvZRvQvFqoTaQWYKSYdDUhwtcAN6cAkI7pF0Vn8sCnUXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdbfiPrZh2H4DlygkvuiMGDO5QyMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHo9ZtFU
8PBKhPI2A+gvaMtPFYIRqYuJwaaoh+DPQY8B+vJgXCRAVcduPMrndO1pzZ8JtACE
H1hIHhQioKtvTLfBUvI7gDiwMMWni18KjfnS5owfYoa6RT1JNvg2Tmlj362FhLyU
b2yoU+ZkiIVaeVxZTKDSzBJ0w+bBkwZWghiYKecqh6Itk0ZW0w+aFRYS3a+5+oft
wPGoWmRrS/JzhJa4M4dCeod8+ze/AtjoBZh+fht1sKWgxnx2ua+lqCvUf2OGy0SM
RwTApi7miIhC8HFCaU3mnmyQ91eNSTeAqJSJXm9tkMMHgbFVedo+akoSSPl+Ajqu
9+IdfJbEdqrIKw==
-----END CERTIFICATE-----