Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File:                     u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier:          pstsz4nRxouu7K50cRLeeJsq9mQ4I5MXYulUX4WHGSI=
Subject key identifier:   9E:51:BA:09:A0:17:99:29:07:ED:B1:C0:1A:F8:F2:F0:73:17:F9:50
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer:       /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial:       01962F06E167B37371BF83B7B33D2A88383E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number:          04B8
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: WziYZQTgG6uYWNEdvqwQxarVou4.roa (hash: K1TtQwXEcoMLvYVaawZdU+KIeSsRtPv5nA+Jxlzh0sU=)
                          2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: V+cQHcFX6/ar0NOZm9djvZ1nPEPNpD3wBrCcgXjwY18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e1:67:b3:73:71:bf:83:b7:b3:3d:2a:88:38:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=9e51ba09a017992907edb1c01af8f2f07317f950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:e6:a0:85:db:ab:26:c9:6b:9d:c3:9e:f8:
                    87:33:05:bf:18:c1:b2:ad:31:06:26:93:5c:d3:b6:
                    19:7d:65:ef:50:4b:3b:81:df:01:4e:ef:b1:76:05:
                    1b:7b:1d:46:1d:b4:b8:50:26:f6:51:5d:78:21:4b:
                    28:a9:7c:dc:58:3c:af:39:ff:8d:81:94:4e:a7:fc:
                    76:95:e0:7f:f7:9d:4c:cd:e5:eb:bf:62:80:25:b5:
                    5c:4c:d0:da:00:c0:f5:e6:a9:d6:0a:e2:ed:02:7d:
                    b8:3d:19:f2:37:18:0d:ce:d5:8d:a1:0d:01:9d:d5:
                    6f:cb:36:d0:34:4a:92:35:1f:1c:4e:70:e8:df:64:
                    98:25:ff:18:48:2f:29:c9:e4:e0:8c:05:f6:a8:35:
                    ad:a8:3f:26:b7:5e:3a:e7:62:04:19:9e:f7:91:02:
                    69:6a:f9:e0:df:ff:17:d9:c3:6b:e1:d3:64:e8:93:
                    52:c5:34:c3:73:ca:ea:f5:8f:14:64:ef:e9:76:8f:
                    6e:8f:dd:ed:a3:39:91:a8:07:24:54:f9:4b:40:32:
                    c8:88:2d:5a:9e:c7:b7:11:15:06:f5:e5:a8:31:76:
                    b6:ed:76:21:82:30:df:c3:25:d0:b4:3e:d5:63:c4:
                    1a:3d:ac:4f:f9:e2:9c:ec:04:0c:52:c3:c3:20:17:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:BA:09:A0:17:99:29:07:ED:B1:C0:1A:F8:F2:F0:73:17:F9:50
            X509v3 Authority Key Identifier:
                keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:aa:d7:66:68:41:1a:49:f2:19:c6:fe:a2:e1:0b:b8:6d:40:
         8b:ce:36:3e:b2:67:ba:2d:a7:30:ba:92:b1:23:11:8f:67:14:
         70:6d:9d:53:70:d7:42:7c:18:4a:5e:04:17:4c:46:17:1f:8b:
         04:92:d8:00:98:18:2e:70:94:5c:6c:0c:f2:55:7d:92:de:c1:
         bf:48:6f:0e:92:2a:01:46:77:bf:01:67:e8:26:e0:0a:67:94:
         8d:79:86:23:37:ad:97:a5:88:87:cf:9f:f6:a6:d2:7c:8a:50:
         ad:2a:17:ef:1a:ea:fd:7d:49:b0:89:e0:6c:03:76:33:3f:1e:
         d6:79:b1:75:5f:55:47:59:82:3c:a3:7d:ea:03:e0:27:a1:c4:
         45:5f:94:40:dc:23:c8:77:70:e6:f3:64:49:e2:04:c7:06:50:
         40:0b:fa:47:d0:74:30:60:d7:ca:3d:f9:20:98:31:de:be:67:
         1c:d2:99:5b:5e:96:1b:55:b3:4f:61:b0:34:08:c2:1d:37:f7:
         5c:e3:3d:ef:e8:72:44:27:81:7e:85:ad:ff:d4:e4:e4:d8:98:
         71:cd:37:04:90:ad:c6:87:8c:e5:3c:1f:55:f0:6a:96:f9:74:
         3f:82:cd:e9:f6:e6:17:fa:b2:96:c3:f8:7c:31:b2:10:b8:4b:
         a3:c5:3a:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuFns3Nxv4O3sz0qiDg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm
NDE0NzMwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
Eyg5ZTUxYmEwOWEwMTc5OTI5MDdlZGIxYzAxYWY4ZjJmMDczMTdmOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVDmoIXbqybJa53DnviHMwW/GMGy
rTEGJpNc07YZfWXvUEs7gd8BTu+xdgUbex1GHbS4UCb2UV14IUsoqXzcWDyvOf+N
gZROp/x2leB/951MzeXrv2KAJbVcTNDaAMD15qnWCuLtAn24PRnyNxgNztWNoQ0B
ndVvyzbQNEqSNR8cTnDo32SYJf8YSC8pyeTgjAX2qDWtqD8mt14652IEGZ73kQJp
avng3/8X2cNr4dNk6JNSxTTDc8rq9Y8UZO/pdo9uj93tozmRqAckVPlLQDLIiC1a
nse3ERUG9eWoMXa27XYhgjDfwyXQtD7VY8QaPaxP+eKc7AQMUsPDIBeYFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5RugmgF5kpB+2xwBr48vBzF/lQMB8GA1UdIwQY
MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt
NjRiMGU2MTRkMDA0LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0
LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnarXZmhB
GknyGcb+ouELuG1Ai842PrJnui2nMLqSsSMRj2cUcG2dU3DXQnwYSl4EF0xGFx+L
BJLYAJgYLnCUXGwM8lV9kt7Bv0hvDpIqAUZ3vwFn6CbgCmeUjXmGIzetl6WIh8+f
9qbSfIpQrSoX7xrq/X1JsIngbAN2Mz8e1nmxdV9VR1mCPKN96gPgJ6HERV+UQNwj
yHdw5vNkSeIExwZQQAv6R9B0MGDXyj35IJgx3r5nHNKZW16WG1WzT2GwNAjCHTf3
XOM97+hyRCeBfoWt/9Tk5NiYcc03BJCtxoeM5TwfVfBqlvl0P4LN6fbmF/qylsP4
fDGyELhLo8U6wg==
-----END CERTIFICATE-----