Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File:                     rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier:          nm+PZqg0f12ESPeJXXeKFaQRwBrANJLJcrItDK+B99c=
Subject key identifier:   B9:94:AD:99:6E:95:98:A3:49:FF:BD:48:2B:21:CF:3A:0B:3A:70:69
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer:       /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial:       01962F3DA0D9911AEF6F1CC97BB0B835BB06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number:          041D
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
                          2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: bvXbQYa+PRrm8tFIYQGj4DVAgfgonvFgMDuYWAxv/HA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a0:d9:91:1a:ef:6f:1c:c9:7b:b0:b8:35:bb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=b994ad996e9598a349ffbd482b21cf3a0b3a7069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:ea:9c:09:f1:6a:a2:b4:a3:fc:51:c0:06:
                    fe:ac:59:7b:97:d1:12:89:a4:1d:0e:c4:36:64:ea:
                    1e:21:ad:35:f1:c3:5b:d5:6b:74:0d:65:88:2a:41:
                    36:ec:82:a0:7e:c9:98:17:28:b7:d4:c4:43:99:e8:
                    ad:8b:73:3d:90:2c:72:b3:7c:a7:d8:bb:f2:ad:0f:
                    09:b3:b2:fd:d8:33:20:69:61:b5:73:12:87:5b:77:
                    5a:69:ed:6a:4e:ad:27:c0:5e:67:51:3e:2c:fa:26:
                    8f:dc:49:72:c9:70:ee:a5:a6:c6:a4:87:2d:63:9a:
                    77:f1:c3:06:d6:ff:41:96:6d:a7:7a:2d:a8:b1:5a:
                    8b:56:9d:46:7b:78:c6:ce:b4:b4:7c:bd:ed:0a:61:
                    55:4f:bd:05:a9:58:22:eb:33:0b:7c:c0:97:65:2f:
                    54:16:3b:97:1d:d0:2f:12:70:77:3e:dd:df:9f:6c:
                    bf:e2:30:d2:88:4a:82:28:36:5c:51:f5:12:94:1e:
                    7b:1f:9c:eb:e2:1d:35:dd:ba:e0:b8:31:f2:2e:7e:
                    b9:8e:8f:f6:2d:58:0c:df:17:36:9e:b2:e9:62:f3:
                    72:2b:23:f1:91:7a:54:90:5b:93:16:a1:28:12:50:
                    6e:0a:2a:1b:31:0b:54:b0:14:fc:b8:05:d5:fe:ec:
                    11:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:AD:99:6E:95:98:A3:49:FF:BD:48:2B:21:CF:3A:0B:3A:70:69
            X509v3 Authority Key Identifier:
                keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:40:f1:4a:2b:dd:d4:bc:5c:b4:49:e3:da:30:f4:5b:b5:f1:
         f7:f5:12:42:2d:b4:11:ba:ac:6e:19:88:15:a3:42:b1:18:bb:
         b1:d3:a4:9d:4d:fb:d2:11:b5:81:62:5f:1e:d2:22:13:43:d0:
         4b:3a:13:4e:5b:59:90:1c:64:66:2b:7d:7b:31:42:17:59:98:
         d7:e8:b1:af:98:35:98:9d:59:93:e7:ff:fa:06:b2:f0:15:e5:
         8d:06:36:7d:9c:80:be:33:a9:ad:2a:57:f7:12:54:fb:89:51:
         23:5b:f9:b9:fd:2a:62:4b:0a:3a:e8:c9:60:33:fc:c9:24:ad:
         a4:af:67:7b:de:58:84:e4:27:91:21:bd:52:df:c2:ac:04:93:
         31:e3:b3:2a:6e:79:94:de:56:86:c6:38:b9:e5:a5:5e:5a:15:
         70:44:a0:b3:3a:79:c3:15:04:1b:b2:21:be:14:3b:8f:76:e6:
         52:35:c0:d0:be:d5:d1:b0:b5:ea:59:17:2d:a2:f7:bc:70:ab:
         24:52:4f:cf:c5:04:97:07:89:83:01:51:13:90:4d:f5:1b:a9:
         92:01:4f:ea:8b:4b:eb:11:87:f1:42:36:47:9e:91:0f:37:1a:
         23:21:b3:e4:3c:a5:39:aa:d3:86:4d:db:c1:64:b3:98:52:c0:
         6b:b5:25:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaDZkRrvbxzJe7C4NbsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMDQxMDZmMzAyYzAwNzdlOTBiNjY3NjJlYmIyMjJlNjEx
YjMzZGQwHhcNMjUwNDEzMTMwMTMwWhcNMjUwNDE0MTMwMTMwWjAzMTEwLwYDVQQD
EyhiOTk0YWQ5OTZlOTU5OGEzNDlmZmJkNDgyYjIxY2YzYTBiM2E3MDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qTqnAnxaqK0o/xRwAb+rFl7l9ES
iaQdDsQ2ZOoeIa018cNb1Wt0DWWIKkE27IKgfsmYFyi31MRDmeiti3M9kCxys3yn
2LvyrQ8Js7L92DMgaWG1cxKHW3daae1qTq0nwF5nUT4s+iaP3ElyyXDupabGpIct
Y5p38cMG1v9Blm2nei2osVqLVp1Ge3jGzrS0fL3tCmFVT70FqVgi6zMLfMCXZS9U
FjuXHdAvEnB3Pt3fn2y/4jDSiEqCKDZcUfUSlB57H5zr4h013brguDHyLn65jo/2
LVgM3xc2nrLpYvNyKyPxkXpUkFuTFqEoElBuCiobMQtUsBT8uAXV/uwRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmUrZlulZijSf+9SCshzzoLOnBpMB8GA1UdIwQY
MBaAFK4EEG8wLAB36Qtmdi67Ii5hGzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iOTA3MjktODNkMi00YzE4LTgwNjMt
MTFmZTI3ZDhlMTcwLzEvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iOTA3MjktODNkMi00YzE4LTgwNjMtMTFmZTI3ZDhlMTcw
LzEvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEDxSivd
1LxctEnj2jD0W7Xx9/USQi20EbqsbhmIFaNCsRi7sdOknU370hG1gWJfHtIiE0PQ
SzoTTltZkBxkZit9ezFCF1mY1+ixr5g1mJ1Zk+f/+gay8BXljQY2fZyAvjOprSpX
9xJU+4lRI1v5uf0qYksKOujJYDP8ySStpK9ne95YhOQnkSG9Ut/CrASTMeOzKm55
lN5WhsY4ueWlXloVcESgszp5wxUEG7IhvhQ7j3bmUjXA0L7V0bC16lkXLaL3vHCr
JFJPz8UElweJgwFRE5BN9RupkgFP6otL6xGH8UI2R56RDzcaIyGz5DylOarThk3b
wWSzmFLAa7UlOw==
-----END CERTIFICATE-----