Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File:                     CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier:          fmrPm+pEN2eLbChSwkeOmegam81zkix8E64+bsMNDas=
Subject key identifier:   44:C9:A1:23:17:CB:38:1D:5C:F3:F9:42:D8:2E:41:D5:D3:67:6B:14
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer:       /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial:       01962F06B9D68C9D06E6090F93B46FC64C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: PLax3cmzpA4xlcoCZci8efw4X6xkN2Vw34hTpn2G45E=)
                          2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b9:d6:8c:9d:06:e6:09:0f:93:b4:6f:c6:4c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=44c9a12317cb381d5cf3f942d82e41d5d3676b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:e1:b3:b7:0b:74:6f:e9:4a:87:70:34:4d:
                    4b:89:cf:56:d3:ff:b6:6e:4f:1f:5f:8c:b3:23:2c:
                    78:7a:34:e6:34:fa:7a:34:a9:4e:87:c4:7d:d9:52:
                    be:b5:3e:49:a8:24:39:ac:81:e8:eb:9b:a7:91:4d:
                    2b:5f:97:8a:d3:49:55:ef:93:20:5f:16:d8:c4:85:
                    d5:00:d5:6e:39:b0:2a:f6:18:49:17:b1:da:06:7e:
                    c5:ac:2a:95:6a:86:00:41:f3:30:93:8f:f1:de:82:
                    5c:b4:ce:60:39:25:0c:39:11:42:35:d0:b4:0a:ed:
                    f2:d0:8d:19:32:6f:83:d5:f2:be:27:84:cf:e2:0e:
                    e3:62:51:75:2a:d5:ed:aa:01:44:00:43:d9:dc:6f:
                    b4:71:b8:13:9f:2f:98:d7:23:ee:21:5c:86:0a:b3:
                    92:c6:5c:4a:9e:46:2e:2b:b8:1e:04:94:56:9d:55:
                    84:2e:65:eb:02:bb:c9:23:74:8f:ab:59:6c:4a:54:
                    cb:e0:16:62:86:c8:c4:f8:de:5e:93:9e:b5:5a:ff:
                    c4:fc:27:d1:e9:3e:94:6b:7e:ee:37:8c:59:27:a8:
                    98:1f:45:cf:eb:f9:34:7a:2a:7c:df:34:26:13:cb:
                    6a:55:e8:5f:2a:27:fd:00:8b:2b:da:1d:97:db:9a:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C9:A1:23:17:CB:38:1D:5C:F3:F9:42:D8:2E:41:D5:D3:67:6B:14
            X509v3 Authority Key Identifier:
                keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:19:62:74:97:72:c0:de:a9:63:f6:2d:17:b5:21:ab:c2:
         8d:13:40:bf:2d:c4:b6:05:b0:7a:a8:39:68:d7:a5:72:7c:28:
         db:ef:6f:dc:da:4f:f3:a3:b2:64:e6:2c:06:d0:07:03:f8:a2:
         da:ab:4c:9e:df:f4:cb:a7:c5:c4:e2:10:e9:a7:97:39:54:a6:
         94:ea:d2:a5:31:d0:27:9d:10:b9:f7:52:3c:a7:ef:d3:b0:27:
         4f:c2:43:99:72:b7:d8:dd:ac:23:ec:69:e0:a4:7f:58:7e:4f:
         f5:8d:27:7d:87:ff:3f:a7:9a:72:c1:b4:d7:43:32:73:bc:b6:
         91:5b:70:95:7c:e5:10:49:d7:26:54:48:64:0c:46:af:3b:d1:
         86:1b:fb:cd:c9:5a:a9:0d:68:ec:d3:56:36:12:72:73:fe:16:
         d6:b2:19:02:61:44:a4:6d:8a:d2:f1:89:f1:01:40:b9:7b:7f:
         f1:da:4c:a0:ac:cc:de:89:b4:61:d0:21:1e:fd:aa:3c:79:41:
         fd:8e:69:39:52:d5:f8:15:0c:e9:20:ec:2e:41:6f:52:67:50:
         15:76:fa:a4:f1:ad:fb:47:a6:a6:23:18:4f:8d:e3:69:1a:da:
         31:2b:d9:7c:39:45:68:2f:f1:04:c8:9b:68:57:5a:22:29:33:
         f3:a9:d7:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrnWjJ0G5gkPk7Rvxkx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTAyN2FjZTE3ZjAwNjdmNjk3YzY1MzYxNDg4MTkyZWFm
NjQxMzgwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
Eyg0NGM5YTEyMzE3Y2IzODFkNWNmM2Y5NDJkODJlNDFkNWQzNjc2YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrLhs7cLdG/pSodwNE1Lic9W0/+2
bk8fX4yzIyx4ejTmNPp6NKlOh8R92VK+tT5JqCQ5rIHo65unkU0rX5eK00lV75Mg
XxbYxIXVANVuObAq9hhJF7HaBn7FrCqVaoYAQfMwk4/x3oJctM5gOSUMORFCNdC0
Cu3y0I0ZMm+D1fK+J4TP4g7jYlF1KtXtqgFEAEPZ3G+0cbgTny+Y1yPuIVyGCrOS
xlxKnkYuK7geBJRWnVWELmXrArvJI3SPq1lsSlTL4BZihsjE+N5ek561Wv/E/CfR
6T6Ua37uN4xZJ6iYH0XP6/k0eip83zQmE8tqVehfKif9AIsr2h2X25qPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETJoSMXyzgdXPP5QtguQdXTZ2sUMB8GA1UdIwQY
MBaAFAsQJ6zhfwBn9pfGU2FIgZLq9kE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQt
NmU2YTVmMTcyYmUzLzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQtNmU2YTVmMTcyYmUz
LzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcYZYnSX
csDeqWP2LRe1IavCjRNAvy3EtgWweqg5aNelcnwo2+9v3NpP86OyZOYsBtAHA/ii
2qtMnt/0y6fFxOIQ6aeXOVSmlOrSpTHQJ50QufdSPKfv07AnT8JDmXK32N2sI+xp
4KR/WH5P9Y0nfYf/P6eacsG010Myc7y2kVtwlXzlEEnXJlRIZAxGrzvRhhv7zcla
qQ1o7NNWNhJyc/4W1rIZAmFEpG2K0vGJ8QFAuXt/8dpMoKzM3om0YdAhHv2qPHlB
/Y5pOVLV+BUM6SDsLkFvUmdQFXb6pPGt+0empiMYT43jaRraMSvZfDlFaC/xBMib
aFdaIikz86nXRQ==
-----END CERTIFICATE-----