Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File:                     SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier:          zWYXUTpQFXFK5buSnBje0fKRIDtMSHfNig2Kx/4PFms=
Subject key identifier:   F9:66:D6:B5:C8:6B:97:91:C2:91:85:A5:2C:D0:10:30:AC:20:54:E6
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer:       /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial:       01962E6189880C17F4BE3DCF38C87EBBF84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number:          0C06
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: 1IuWg1P5uHqI0GAYaSJt9X65L8F6hf0/hcQ+SeoWvzc=)
                          2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:88:0c:17:f4:be:3d:cf:38:c8:7e:bb:f8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=f966d6b5c86b9791c29185a52cd01030ac2054e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:5c:33:cf:f5:d7:e5:ce:53:6f:d1:ce:11:
                    ba:d1:47:37:bc:04:03:94:5e:17:5e:21:3d:50:b3:
                    dc:92:3c:74:ab:d5:c3:41:c9:38:6f:48:f1:a4:ed:
                    42:14:83:c2:33:69:61:c6:df:4d:38:89:3f:2f:0c:
                    f6:fb:02:b0:1f:b7:8e:db:fc:b9:9c:23:66:7e:e3:
                    08:3f:3d:a9:9b:10:8a:6d:4c:33:08:de:44:6a:60:
                    58:0e:b8:e3:17:bb:45:60:80:97:7c:cd:1b:28:e7:
                    65:d4:95:11:4f:c0:e2:66:64:fb:7a:f6:d0:ad:46:
                    08:0c:74:19:a1:be:ed:b6:92:1d:65:aa:13:79:74:
                    24:f3:69:f7:19:13:22:58:ec:fe:e0:f2:40:e5:c3:
                    6d:be:c0:41:0f:4c:92:99:89:c2:dd:f9:a3:de:51:
                    39:f3:1e:81:ca:b7:10:e3:66:eb:0c:26:97:c0:9e:
                    8a:a8:04:ff:26:69:84:b0:7b:56:02:5c:a0:fc:13:
                    9e:02:6c:f4:33:f6:41:72:fb:d1:72:00:91:6f:b6:
                    f5:28:80:99:17:e6:ba:41:15:69:8e:60:15:a6:fe:
                    8f:6c:bf:07:6f:cc:92:ab:c1:81:38:79:8c:f6:38:
                    6c:e9:5a:9a:eb:cc:5a:dd:41:12:c3:ba:93:5a:78:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:D6:B5:C8:6B:97:91:C2:91:85:A5:2C:D0:10:30:AC:20:54:E6
            X509v3 Authority Key Identifier:
                keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:a0:12:59:91:07:3c:08:11:1f:3c:b7:37:35:1b:c1:c4:
         a1:05:a1:25:72:22:d6:5e:90:22:47:84:c1:32:4d:be:75:87:
         19:63:0d:c4:ad:0d:82:9b:bb:f5:55:d4:3a:7c:8d:3d:ec:01:
         97:a0:56:5e:7b:a8:ee:fa:d5:60:da:3a:6a:7c:de:f3:f2:85:
         0c:dd:75:bc:cf:3f:f6:0c:59:ce:2e:2e:08:93:8e:3b:65:4e:
         01:96:83:01:85:e3:8d:86:59:5e:34:af:27:4c:3c:f4:bc:1b:
         2f:1e:bc:31:82:a9:5c:99:9f:93:50:8f:47:ab:5c:c8:5e:46:
         91:1e:07:b3:34:af:89:c2:aa:ce:cf:ca:8e:71:f0:af:a9:89:
         26:e3:ac:7b:00:c3:b4:fa:f2:b1:c2:ed:2c:a7:bf:ad:98:bd:
         cd:4f:7d:84:e0:19:87:a0:5e:48:51:6d:8e:03:af:cd:d1:9f:
         08:ff:23:d3:2f:ef:be:d8:ed:fe:13:c3:16:ae:e5:3b:71:b1:
         d3:a0:1f:b9:08:28:d3:3f:87:13:18:89:ab:37:6d:4d:bf:ab:
         12:bd:8e:aa:dd:ca:cc:27:6f:5b:97:0e:12:e1:9b:58:74:7b:
         b3:03:38:74:d5:f1:4d:e4:9c:32:de:4c:c4:93:33:0f:18:d9:
         fc:66:2e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYmIDBf0vj3POMh+u/hPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
EyhmOTY2ZDZiNWM4NmI5NzkxYzI5MTg1YTUyY2QwMTAzMGFjMjA1NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZpcM8/11+XOU2/RzhG60Uc3vAQD
lF4XXiE9ULPckjx0q9XDQck4b0jxpO1CFIPCM2lhxt9NOIk/Lwz2+wKwH7eO2/y5
nCNmfuMIPz2pmxCKbUwzCN5EamBYDrjjF7tFYICXfM0bKOdl1JURT8DiZmT7evbQ
rUYIDHQZob7ttpIdZaoTeXQk82n3GRMiWOz+4PJA5cNtvsBBD0ySmYnC3fmj3lE5
8x6ByrcQ42brDCaXwJ6KqAT/JmmEsHtWAlyg/BOeAmz0M/ZBcvvRcgCRb7b1KICZ
F+a6QRVpjmAVpv6PbL8Hb8ySq8GBOHmM9jhs6Vqa68xa3UESw7qTWnhdAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlm1rXIa5eRwpGFpSzQEDCsIFTmMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacugElmR
BzwIER88tzc1G8HEoQWhJXIi1l6QIkeEwTJNvnWHGWMNxK0Ngpu79VXUOnyNPewB
l6BWXnuo7vrVYNo6anze8/KFDN11vM8/9gxZzi4uCJOOO2VOAZaDAYXjjYZZXjSv
J0w89LwbLx68MYKpXJmfk1CPR6tcyF5GkR4HszSvicKqzs/KjnHwr6mJJuOsewDD
tPryscLtLKe/rZi9zU99hOAZh6BeSFFtjgOvzdGfCP8j0y/vvtjt/hPDFq7lO3Gx
06AfuQgo0z+HExiJqzdtTb+rEr2Oqt3KzCdvW5cOEuGbWHR7swM4dNXxTeScMt5M
xJMzDxjZ/GYuWQ==
-----END CERTIFICATE-----