Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File:                     u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier:          kSEhzpuxC9Ue7SZleslo8Rh17dL8cJwLYm4VwSf7Vrk=
Subject key identifier:   61:69:CE:AC:E2:06:D2:96:B8:8A:FA:74:C4:22:20:0B:53:88:8D:AC
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer:       /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial:       01962E619DC2C65925A89E883ECC27B7319D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number:          098B
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
                          2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: gpdUShCUt3YMe3vbb5yimncoVE5a6iTLOZcwg6XqNAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9d:c2:c6:59:25:a8:9e:88:3e:cc:27:b7:31:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=6169ceace206d296b88afa74c422200b53888dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:65:df:21:43:1b:7b:af:f8:66:d3:a3:5c:
                    1e:cc:17:d5:e4:1b:9a:68:7b:8d:c7:17:79:53:ef:
                    fb:04:62:46:02:0c:22:4b:e5:b7:f8:9d:07:c3:20:
                    e4:b9:cb:6d:6e:21:1a:b1:0c:d8:8a:3a:2a:60:bc:
                    3c:bf:08:c6:ba:23:40:c3:40:66:99:18:dd:6a:62:
                    22:e0:26:fd:94:d3:15:01:12:61:dc:6c:5b:e4:5c:
                    a0:b5:d0:50:66:ab:3b:20:02:75:69:cb:72:cd:80:
                    aa:7d:15:04:be:40:05:a1:0b:3c:51:4d:23:b3:24:
                    82:6e:ed:a3:77:ae:18:aa:0e:1c:6e:d9:c9:45:77:
                    16:f7:6f:c3:b1:48:96:ff:50:83:0c:5f:11:02:a9:
                    92:4a:ce:3f:88:20:02:3e:28:d7:e5:cb:a2:68:93:
                    50:77:1e:2b:4f:34:47:d1:59:7f:1d:5d:bd:23:85:
                    4a:3a:ad:f6:7e:d0:c0:58:03:1a:10:48:a2:77:f4:
                    a3:99:fb:9e:fb:c4:ed:89:fc:72:ee:0e:91:d1:c7:
                    2c:20:f9:e6:ca:68:44:ca:9c:df:9f:35:72:92:58:
                    40:9a:1b:15:61:1e:e9:50:3b:ca:21:50:61:f5:7b:
                    f7:c9:f5:71:49:2f:b5:61:db:e6:c9:32:16:37:58:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:69:CE:AC:E2:06:D2:96:B8:8A:FA:74:C4:22:20:0B:53:88:8D:AC
            X509v3 Authority Key Identifier:
                keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:1a:c7:46:17:40:6c:41:47:d5:1d:73:e3:d7:ae:15:5f:
         0f:5d:4a:8e:d5:0d:42:82:e6:49:21:89:3d:f3:36:de:65:6c:
         3a:7e:81:a5:3e:c8:95:b2:20:51:ff:08:4c:7c:94:9c:1f:52:
         dd:d5:1f:75:73:47:97:b2:71:40:c4:eb:48:64:39:d1:55:6c:
         26:dc:31:f0:20:bc:22:2d:fe:f9:22:56:3b:a4:c0:39:74:f1:
         7b:f7:81:82:d6:a9:d9:6f:f2:b1:1b:f6:29:62:97:b9:51:18:
         a8:16:ca:d8:0c:de:09:3d:94:71:a8:c5:90:11:c0:68:a3:f2:
         01:bb:9c:6f:6e:92:cc:3e:49:38:60:da:07:11:f0:31:2f:bb:
         11:d6:fb:9e:f6:2a:e9:8c:7d:c7:0d:8c:a9:83:51:89:c2:46:
         62:29:9f:5c:1c:67:f9:4c:19:de:ad:22:f0:97:0b:aa:04:9a:
         54:69:33:91:0a:07:65:71:cb:39:b5:1d:d9:2f:87:8a:93:50:
         21:be:52:43:ca:ba:24:c3:27:86:64:b2:8b:d1:d6:b3:ba:58:
         14:60:28:cd:39:1c:9d:39:cf:e8:77:7a:2f:9f:40:57:56:c2:
         88:92:d8:bc:64:4f:ff:78:4d:f1:91:5d:25:04:80:3d:80:65:
         aa:e3:7a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZ3CxlklqJ6IPswntzGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGFlNjNiNzU3ZGExYWY3OTBmMjBmNTljNjM0ODExZWVl
YjFiY2MwHhcNMjUwNDEzMDkwMTExWhcNMjUwNDE0MDkwMTExWjAzMTEwLwYDVQQD
Eyg2MTY5Y2VhY2UyMDZkMjk2Yjg4YWZhNzRjNDIyMjAwYjUzODg4ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DRl3yFDG3uv+GbTo1wezBfV5Bua
aHuNxxd5U+/7BGJGAgwiS+W3+J0HwyDkucttbiEasQzYijoqYLw8vwjGuiNAw0Bm
mRjdamIi4Cb9lNMVARJh3Gxb5FygtdBQZqs7IAJ1actyzYCqfRUEvkAFoQs8UU0j
sySCbu2jd64Yqg4cbtnJRXcW92/DsUiW/1CDDF8RAqmSSs4/iCACPijX5cuiaJNQ
dx4rTzRH0Vl/HV29I4VKOq32ftDAWAMaEEiid/Sjmfue+8Ttifxy7g6R0ccsIPnm
ymhEypzfnzVyklhAmhsVYR7pUDvKIVBh9Xv3yfVxSS+1YdvmyTIWN1h2bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFpzqziBtKWuIr6dMQiIAtTiI2sMB8GA1UdIwQY
MBaAFLuK5jt1faGveQ8g9ZxjSBHu6xvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xMmM2NmQtYWM2My00M2ZjLTg4OTQt
YWIwODdmNDNiNTk1LzEvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xMmM2NmQtYWM2My00M2ZjLTg4OTQtYWIwODdmNDNiNTk1
LzEvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3wax0YX
QGxBR9Udc+PXrhVfD11KjtUNQoLmSSGJPfM23mVsOn6BpT7IlbIgUf8ITHyUnB9S
3dUfdXNHl7JxQMTrSGQ50VVsJtwx8CC8Ii3++SJWO6TAOXTxe/eBgtap2W/ysRv2
KWKXuVEYqBbK2AzeCT2UcajFkBHAaKPyAbucb26SzD5JOGDaBxHwMS+7Edb7nvYq
6Yx9xw2MqYNRicJGYimfXBxn+UwZ3q0i8JcLqgSaVGkzkQoHZXHLObUd2S+HipNQ
Ib5SQ8q6JMMnhmSyi9HWs7pYFGAozTkcnTnP6Hd6L59AV1bCiJLYvGRP/3hN8ZFd
JQSAPYBlquN6bA==
-----END CERTIFICATE-----