Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File:                     sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier:          +9+y4uHfjYuQo00yAm9JjdAHsvl19Bpqo2w+YzL00go=
Subject key identifier:   1D:AD:F8:BB:7C:F7:66:98:DD:98:4B:31:03:77:4B:3F:F7:F0:A3:E1
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer:       /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial:       01962E9957DD7F92046EE9E659AB0ACD6C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number:          09CE
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=)
                          2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: ryrzyvrp5q6p4ExWkxbX4/vMnxKWbinDICBXTae/oMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:dd:7f:92:04:6e:e9:e6:59:ab:0a:cd:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=1dadf8bb7cf76698dd984b3103774b3ff7f0a3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:7f:5c:e7:a4:a4:fc:9b:05:f2:4e:b7:2a:
                    02:e1:58:c1:6b:fa:2c:6f:63:6a:35:a9:3a:06:9f:
                    2c:f4:54:1d:44:00:21:63:30:1f:2a:a9:b1:3a:42:
                    da:98:52:98:bd:d5:28:39:11:9d:d3:3b:3d:47:37:
                    4b:6a:a1:28:0d:c9:65:dc:7c:0c:18:dc:e6:28:56:
                    9a:9c:a9:2e:eb:55:b4:ce:82:29:67:8e:37:be:d7:
                    0c:2b:14:81:13:6d:7f:b5:d6:3e:36:68:3c:65:01:
                    f0:08:74:88:92:c1:2a:93:f0:ff:64:c4:dd:f3:b0:
                    31:e7:68:8d:c4:72:85:b9:94:04:1a:66:d2:ac:f6:
                    e8:2d:ff:91:38:33:c1:5b:f9:fa:c2:c2:8e:b4:17:
                    27:9d:76:0c:62:79:d5:b1:54:b5:4a:5a:e2:1d:6a:
                    e5:6c:07:c0:a6:90:ee:25:dc:9d:a7:e0:39:f7:09:
                    f8:b5:c4:9c:5b:86:1c:9e:c7:01:d4:d6:60:1b:e1:
                    ad:3d:6e:a6:b4:d1:e8:66:e6:8e:16:cc:20:d1:c7:
                    7d:d9:78:bd:b8:dc:ae:4a:9f:f8:9e:b3:33:71:d3:
                    37:56:a9:22:7c:b0:c8:01:21:03:35:64:54:63:74:
                    9f:a0:24:ab:ba:b7:32:c8:f9:26:c8:0d:ef:47:f2:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AD:F8:BB:7C:F7:66:98:DD:98:4B:31:03:77:4B:3F:F7:F0:A3:E1
            X509v3 Authority Key Identifier:
                keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:63:45:ea:01:95:15:cb:da:65:54:c7:f0:5a:49:6a:6e:
         82:26:b1:fc:53:49:e9:ca:fb:11:8e:51:db:a9:a6:5e:53:fb:
         1d:b7:8b:67:b9:32:ae:47:fd:60:49:25:3a:34:10:04:33:8f:
         4d:5e:83:85:89:56:a9:07:56:3e:b0:ec:ca:2c:2f:47:4a:77:
         5c:48:22:76:d4:40:63:15:29:5f:44:4c:b8:c5:19:de:ca:64:
         1e:3a:1c:58:d1:ef:39:c4:9b:83:1e:33:72:47:fc:15:67:de:
         a0:df:73:59:b5:59:92:15:6f:de:0d:81:e7:0d:72:e2:5d:14:
         4b:7f:5e:10:18:45:f9:f0:39:6b:67:3a:df:de:0a:c9:28:1d:
         fb:d2:7d:d6:39:a5:85:e9:06:d3:e0:0b:d7:72:e1:f5:d8:fe:
         95:94:32:ba:ac:b8:8d:5a:8f:4a:97:f1:29:e5:03:e0:a2:ae:
         ae:8a:21:78:e4:8c:d2:81:8c:97:3a:15:7b:af:61:73:7a:5c:
         a9:f0:6e:54:e7:af:50:3c:27:00:95:f7:6d:13:eb:9e:67:bc:
         a6:c5:8e:0a:6e:ca:72:89:03:2f:c2:7b:b7:e3:ab:c7:6d:d6:
         88:5e:1b:65:9d:cf:61:af:9d:a2:2e:9f:4e:28:bb:c4:cd:80:
         db:a2:a4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVfdf5IEbunmWasKzWxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzk3MWJmZWE3OGQ2YWE1YjQ5ZWQ1YWMzNWM3N2I2YTMw
YTA4OTQwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EygxZGFkZjhiYjdjZjc2Njk4ZGQ5ODRiMzEwMzc3NGIzZmY3ZjBhM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDR/XOekpPybBfJOtyoC4VjBa/os
b2NqNak6Bp8s9FQdRAAhYzAfKqmxOkLamFKYvdUoORGd0zs9RzdLaqEoDcll3HwM
GNzmKFaanKku61W0zoIpZ443vtcMKxSBE21/tdY+Nmg8ZQHwCHSIksEqk/D/ZMTd
87Ax52iNxHKFuZQEGmbSrPboLf+RODPBW/n6wsKOtBcnnXYMYnnVsVS1SlriHWrl
bAfAppDuJdydp+A59wn4tcScW4YcnscB1NZgG+GtPW6mtNHoZuaOFswg0cd92Xi9
uNyuSp/4nrMzcdM3VqkifLDIASEDNWRUY3SfoCSrurcyyPkmyA3vR/JfHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2t+Lt892aY3ZhLMQN3Sz/38KPhMB8GA1UdIwQY
MBaAFLE5cb/qeNaqW0ntWsNcd7ajCgiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEt
NDdiMWJkZjhkNTMwLzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEtNDdiMWJkZjhkNTMw
LzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4BjReoB
lRXL2mVUx/BaSWpugiax/FNJ6cr7EY5R26mmXlP7HbeLZ7kyrkf9YEklOjQQBDOP
TV6DhYlWqQdWPrDsyiwvR0p3XEgidtRAYxUpX0RMuMUZ3spkHjocWNHvOcSbgx4z
ckf8FWfeoN9zWbVZkhVv3g2B5w1y4l0US39eEBhF+fA5a2c6394KySgd+9J91jml
hekG0+AL13Lh9dj+lZQyuqy4jVqPSpfxKeUD4KKurooheOSM0oGMlzoVe69hc3pc
qfBuVOevUDwnAJX3bRPrnme8psWOCm7KcokDL8J7t+Orx23WiF4bZZ3PYa+doi6f
Tii7xM2A26KkzQ==
-----END CERTIFICATE-----