Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File:                     RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier:          X67NS7Yu17zVPvcZeejg7N6l204xJCmMpqGQIG7kMiU=
Subject key identifier:   C9:30:7E:62:C6:5E:8A:E5:FF:A4:DA:95:DF:A9:74:C7:7D:56:B0:36
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer:       /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial:       01962DF43782AEDFF7C1933BD5759610E13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: hN92CyMqDcYo5LnFY5YFZWGOruZZgB0zQjjotl2rQnU=)
                          2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:37:82:ae:df:f7:c1:93:3b:d5:75:96:10:e1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=c9307e62c65e8ae5ffa4da95dfa974c77d56b036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:f0:24:75:59:f6:6d:40:60:32:b4:e9:53:
                    b7:bf:11:8d:a3:25:10:7d:48:a8:5a:86:bd:ba:3a:
                    bd:f4:e3:9a:13:ea:9c:b5:f6:12:97:39:62:90:65:
                    31:c2:fa:14:38:72:53:c1:5d:97:d4:98:d1:ba:4c:
                    09:f1:e1:fa:8f:96:88:f2:e6:bc:21:fe:13:76:42:
                    c2:f5:6d:86:e1:59:9c:76:24:95:04:1b:9b:2c:1a:
                    17:7a:e8:ab:31:60:cf:c7:3f:e7:44:4f:80:46:4c:
                    ee:f8:39:86:d7:d4:6a:5b:41:e7:c7:50:6f:6b:2f:
                    c9:ec:b7:84:26:9f:73:9b:50:a2:85:90:8e:2d:1c:
                    72:e8:8e:e0:ee:70:73:16:4e:5c:51:cd:40:ba:55:
                    98:a9:db:0b:b3:18:83:3f:ab:07:f8:d3:cd:ca:9a:
                    bd:19:6b:46:48:65:1b:8f:52:33:51:2b:87:6a:64:
                    1d:c6:46:36:46:9a:fa:22:ce:d3:52:5d:8f:f8:da:
                    a0:87:a4:d4:e8:44:b2:b2:f2:d7:57:22:59:a3:10:
                    7e:e4:3c:80:97:f4:d1:f5:13:92:8b:c9:4b:db:a3:
                    14:ac:b4:ed:20:2d:7d:3a:d6:86:42:1a:ac:86:60:
                    97:d9:99:e9:a6:3c:ea:33:25:10:a2:5b:02:e4:b0:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:30:7E:62:C6:5E:8A:E5:FF:A4:DA:95:DF:A9:74:C7:7D:56:B0:36
            X509v3 Authority Key Identifier:
                keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c2:18:d6:bd:79:78:3b:fd:6f:19:1e:8b:5e:e3:5a:2f:6c:
         67:2a:6c:f5:4e:3b:f5:2c:d9:32:07:85:90:2d:09:4c:cc:4f:
         a5:c6:73:37:53:34:4d:42:ae:65:df:a4:44:2a:4b:ad:81:60:
         f9:c3:31:98:10:de:ed:c2:4d:6b:10:1a:ad:54:51:22:92:b4:
         f0:af:5b:97:fd:87:59:40:02:07:91:be:1e:98:04:48:c3:67:
         c6:7a:29:7e:e5:9c:05:17:b9:94:2e:7c:a2:de:de:7f:23:b7:
         72:81:48:9d:4f:a5:c9:de:3d:3b:21:29:9a:80:fa:a6:57:cd:
         47:46:a5:3a:df:4f:a1:f6:f0:7f:0c:b8:12:d6:9a:87:7b:d6:
         61:70:65:83:5d:d5:95:23:a3:24:39:d2:71:04:a9:16:d9:3d:
         a1:11:fb:a4:06:67:b6:09:de:5a:69:60:7b:83:e0:bb:7a:d6:
         a1:e8:f7:8f:be:92:f8:d3:92:a4:b6:a1:97:cd:e5:01:d2:e4:
         38:28:68:f0:e0:0e:ac:15:7f:89:4e:18:23:41:b0:a8:80:05:
         44:ab:3e:e0:87:bc:ab:55:88:45:a6:59:6e:89:97:99:66:e6:
         71:db:82:5e:82:ce:59:b5:36:0b:4c:5e:75:01:04:cf:3a:a9:
         3b:cc:08:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DeCrt/3wZM71XWWEOE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NzRhZjFiYmRjNGNhNDgzYzY2OWM0ZmUwYmRkNzY0Yjhh
YzE2NzUwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
EyhjOTMwN2U2MmM2NWU4YWU1ZmZhNGRhOTVkZmE5NzRjNzdkNTZiMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MDwJHVZ9m1AYDK06VO3vxGNoyUQ
fUioWoa9ujq99OOaE+qctfYSlzlikGUxwvoUOHJTwV2X1JjRukwJ8eH6j5aI8ua8
If4TdkLC9W2G4VmcdiSVBBubLBoXeuirMWDPxz/nRE+ARkzu+DmG19RqW0Hnx1Bv
ay/J7LeEJp9zm1CihZCOLRxy6I7g7nBzFk5cUc1AulWYqdsLsxiDP6sH+NPNypq9
GWtGSGUbj1IzUSuHamQdxkY2Rpr6Is7TUl2P+Nqgh6TU6ESysvLXVyJZoxB+5DyA
l/TR9ROSi8lL26MUrLTtIC19OtaGQhqshmCX2ZnppjzqMyUQolsC5LBt/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkwfmLGXorl/6Tald+pdMd9VrA2MB8GA1UdIwQY
MBaAFEZ0rxu9xMpIPGacT+C912S4rBZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAt
NTQ5MmUwZTRlYmMzLzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAtNTQ5MmUwZTRlYmMz
LzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsIY1r15
eDv9bxkei17jWi9sZyps9U479SzZMgeFkC0JTMxPpcZzN1M0TUKuZd+kRCpLrYFg
+cMxmBDe7cJNaxAarVRRIpK08K9bl/2HWUACB5G+HpgESMNnxnopfuWcBRe5lC58
ot7efyO3coFInU+lyd49OyEpmoD6plfNR0alOt9Pofbwfwy4Etaah3vWYXBlg13V
lSOjJDnScQSpFtk9oRH7pAZntgneWmlge4Pgu3rWoej3j76S+NOSpLahl83lAdLk
OCho8OAOrBV/iU4YI0GwqIAFRKs+4Ie8q1WIRaZZbomXmWbmcduCXoLOWbU2C0xe
dQEEzzqpO8wI1A==
-----END CERTIFICATE-----