Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
File:                     6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft (raw, json)
Hash identifier:          wKwQ4nxmDzLoM6zjFGsfmBkshKy9uZxmZHTGHF2TynM=
Subject key identifier:   EF:D6:8E:65:AC:05:4B:37:87:4A:FB:82:16:69:F9:CD:1B:04:F8:18
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Certificate issuer:       /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial:       01962F7459CF1E074675D8061B7C49619BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
Manifest number:          0337
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 1-TEAa7vqhDR8MFmfWosBtb41wek.roa (hash: eqiD9H7n4ulTtrxau5diRG8AJtoZzGM451rZtgj6RWo=)
                          2: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl (hash: A5UGFZdOwaUCrB1xN7x1Y+G/mMdpi+yez7M2zlPYTIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:59:cf:1e:07:46:75:d8:06:1b:7c:49:61:9b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=efd68e65ac054b37874afb821669f9cd1b04f818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:80:11:78:d7:06:7d:d6:8f:50:9f:94:ac:
                    ed:46:a7:71:e1:39:3d:c3:07:e7:b8:87:37:a2:93:
                    34:df:b9:3d:4c:79:7d:a1:a2:93:65:fd:53:61:15:
                    ae:ef:99:19:e3:74:ab:d8:98:e8:ed:80:c8:fa:4c:
                    a1:fb:22:a6:6c:97:1c:e6:73:99:73:be:b7:16:a9:
                    9f:ed:fe:2c:c1:5b:bd:32:c0:0e:d5:bc:8a:48:63:
                    46:3f:ae:42:d2:01:bd:12:92:c2:eb:bf:b2:31:ce:
                    be:0b:e0:f4:96:7f:19:9c:22:2e:9f:0e:55:7c:20:
                    76:22:a7:26:5e:18:44:ae:4a:5e:e8:0b:3e:6e:cd:
                    2e:d8:a3:4f:ee:c2:ee:f3:3d:87:7c:a1:06:d4:23:
                    54:2c:27:1d:9d:31:ad:55:0e:b7:21:e1:37:2e:c6:
                    ef:75:76:af:a9:0a:57:70:4b:87:ef:08:ff:38:02:
                    16:25:8b:54:5e:35:7b:6d:a6:1e:47:85:9d:e8:10:
                    4f:77:43:2e:47:4a:8a:96:9f:94:11:4d:08:5f:d4:
                    59:46:ca:e8:67:3a:f9:84:af:fe:3d:f9:cd:a4:f8:
                    16:8e:d9:1f:3b:f3:66:c7:da:95:f5:5d:a2:e6:02:
                    50:86:12:30:7b:e5:5d:3e:0d:ec:0b:47:c7:94:35:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:8E:65:AC:05:4B:37:87:4A:FB:82:16:69:F9:CD:1B:04:F8:18
            X509v3 Authority Key Identifier:
                keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:78:24:42:fc:88:91:df:39:60:c2:47:42:9e:a5:05:99:25:
         60:eb:34:2b:dc:1e:2e:7a:7f:bf:36:fa:4a:63:7f:53:64:5f:
         8f:4a:b7:e5:58:2b:d3:db:32:f4:2e:36:93:61:6e:53:9e:0f:
         c4:04:92:bf:be:dd:28:f0:d5:5b:24:dc:29:3d:cd:78:b4:2e:
         17:85:b5:97:36:c0:7a:8c:56:61:ca:05:d5:dc:86:a0:2d:7a:
         34:77:54:f8:83:a4:9c:1e:96:6a:26:f9:8d:6a:fc:b3:72:12:
         85:a2:1a:2e:7c:4a:0a:78:89:1f:7e:a9:40:74:d0:40:24:89:
         7a:c5:3b:cc:0f:55:81:75:60:51:51:d9:ac:80:5a:0e:12:c0:
         be:05:21:6f:b3:b0:a8:cc:e0:b2:fb:58:9c:db:4e:00:9a:5f:
         c8:ed:b7:9a:2d:f9:09:c3:59:76:25:0f:26:a1:43:8b:be:8f:
         17:71:b8:fe:ad:71:b8:18:10:44:9f:6b:9b:48:2f:3b:12:94:
         3e:26:eb:32:b9:90:eb:c1:d7:5f:05:b3:1c:f2:51:71:00:08:
         19:b9:fd:40:d5:35:f6:a4:ae:fd:58:e5:3e:ca:d6:75:60:8e:
         ab:4e:57:22:8f:57:d1:86:09:8c:b9:b1:81:de:ba:05:ac:96:
         68:83:46:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFnPHgdGddgGG3xJYZveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTBiMDliYTBjMTBjZjA3NmU1MTA3OTMxZDNkNjkxYTQz
OTY1MjgwHhcNMjUwNDEzMTQwMTE2WhcNMjUwNDE0MTQwMTE2WjAzMTEwLwYDVQQD
EyhlZmQ2OGU2NWFjMDU0YjM3ODc0YWZiODIxNjY5ZjljZDFiMDRmODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZqAEXjXBn3Wj1CflKztRqdx4Tk9
wwfnuIc3opM037k9THl9oaKTZf1TYRWu75kZ43Sr2Jjo7YDI+kyh+yKmbJcc5nOZ
c763Fqmf7f4swVu9MsAO1byKSGNGP65C0gG9EpLC67+yMc6+C+D0ln8ZnCIunw5V
fCB2IqcmXhhErkpe6As+bs0u2KNP7sLu8z2HfKEG1CNULCcdnTGtVQ63IeE3Lsbv
dXavqQpXcEuH7wj/OAIWJYtUXjV7baYeR4Wd6BBPd0MuR0qKlp+UEU0IX9RZRsro
Zzr5hK/+PfnNpPgWjtkfO/Nmx9qV9V2i5gJQhhIwe+VdPg3sC0fHlDUwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/WjmWsBUs3h0r7ghZp+c0bBPgYMB8GA1UdIwQY
MBaAFOsQsJugwQzwduUQeTHT1pGkOWUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjIt
MGEwMzdkNzhjZjAzLzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjItMGEwMzdkNzhjZjAz
LzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHgkQvyI
kd85YMJHQp6lBZklYOs0K9weLnp/vzb6SmN/U2Rfj0q35Vgr09sy9C42k2FuU54P
xASSv77dKPDVWyTcKT3NeLQuF4W1lzbAeoxWYcoF1dyGoC16NHdU+IOknB6Waib5
jWr8s3IShaIaLnxKCniJH36pQHTQQCSJesU7zA9VgXVgUVHZrIBaDhLAvgUhb7Ow
qMzgsvtYnNtOAJpfyO23mi35CcNZdiUPJqFDi76PF3G4/q1xuBgQRJ9rm0gvOxKU
PibrMrmQ68HXXwWzHPJRcQAIGbn9QNU19qSu/VjlPsrWdWCOq05XIo9X0YYJjLmx
gd66BayWaINGzQ==
-----END CERTIFICATE-----