Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
File:                     sw_SVclrQucrVojGcPbiYRmtOTU.mft (raw, json)
Hash identifier:          xkyS70l65RpuoT7LOKkMZgVAdAgRJiQ7Gd8zqBahPug=
Subject key identifier:   66:68:1E:11:95:B6:35:1F:52:45:03:66:18:56:5C:8F:7A:15:AA:1F
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Certificate issuer:       /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial:       01962ECFAEC4F3D8AABC8A123BB8F3726E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
Manifest number:          0EC3
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: sw_SVclrQucrVojGcPbiYRmtOTU.crl (hash: 72GPQ5yXdua1cDwEwFX8+7q/YsKvmkCgdl2dR6Vowvs=)
                          2: tItBZBQHeIgOYMPzpZsPM3T5E08.roa (hash: QI8DfVsJS/fTyAB76D4ThrDIOqRgyJA6foRDjOl2SZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:c4:f3:d8:aa:bc:8a:12:3b:b8:f3:72:6e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=66681e1195b6351f5245036618565c8f7a15aa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:cc:64:18:00:df:df:54:c9:64:3b:c6:c2:
                    e5:20:8a:11:36:1b:e2:89:07:df:8e:62:37:00:2e:
                    c2:2f:5e:60:98:f7:98:32:02:1a:7d:cc:75:8e:2c:
                    60:1a:81:5d:02:84:8c:ae:6f:11:7b:3f:36:ff:17:
                    6e:b9:f1:f1:a9:a3:ec:3b:bf:dd:7f:5a:8d:d8:e6:
                    37:34:db:4b:e7:4f:bd:fd:5b:11:ad:a8:71:96:fb:
                    47:44:5b:df:33:b3:85:b8:77:52:ec:13:fd:57:a4:
                    65:89:f9:55:ff:e5:9b:06:27:4b:69:7c:73:e2:8d:
                    9c:f8:5c:0c:1b:79:82:fb:1d:93:d8:45:e0:d7:09:
                    99:50:3a:46:fb:9f:a3:cd:b8:5e:a1:f6:84:c4:71:
                    05:ef:10:3d:4b:ba:82:09:60:0f:e2:16:dd:29:79:
                    91:c7:24:ab:8a:8c:ac:54:0b:a7:d6:b4:c0:31:b2:
                    21:8b:38:50:3c:67:ca:1a:87:90:a9:ed:6b:52:a6:
                    4a:00:d3:c3:c8:54:8c:0a:e5:52:38:b1:ba:84:3f:
                    29:6f:0a:58:f6:d9:71:c0:1d:71:71:f4:36:af:71:
                    14:7a:a0:d7:e9:5e:cf:e1:4c:31:22:69:3d:53:c8:
                    5b:ce:61:8d:3b:43:fd:0e:3f:24:f8:9b:de:ff:56:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:68:1E:11:95:B6:35:1F:52:45:03:66:18:56:5C:8F:7A:15:AA:1F
            X509v3 Authority Key Identifier:
                keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e6:dd:5f:54:85:6e:8a:8d:59:15:04:2b:c1:95:45:5a:8d:
         08:af:0e:79:b2:a8:31:40:ea:78:80:40:65:b6:ee:d2:42:6f:
         7d:c9:ee:2b:82:44:19:3d:5c:21:88:ca:56:74:41:75:8a:2b:
         76:4d:c2:d9:8a:c8:a1:98:5f:2f:3d:50:c6:d3:23:21:6d:09:
         8a:e2:5c:e3:ff:54:48:95:66:4b:58:45:7e:ff:eb:20:36:e4:
         23:d4:f0:18:a9:e4:42:64:d2:9c:56:ce:4f:8b:c6:46:ba:30:
         70:b5:4a:16:2e:99:5f:4b:0c:01:a6:76:68:d1:cb:5b:1a:cb:
         71:99:c5:af:db:c1:3a:6b:0b:cb:35:92:db:86:74:df:a1:83:
         8f:d1:57:13:57:64:f3:ed:c3:0d:dd:be:f7:0d:2e:70:1f:99:
         b9:ef:27:67:b2:da:68:02:9f:8a:89:f3:62:2e:0e:86:c4:cf:
         e1:1a:8f:53:a0:42:35:1c:db:dc:13:e5:b3:f2:0b:71:cb:25:
         a5:dd:06:4e:12:29:21:10:e3:8b:c3:22:08:19:e4:c5:3d:a0:
         c3:11:98:8c:9e:ff:56:da:d5:38:92:93:92:5f:db:65:9e:4f:
         4f:da:41:96:f0:81:bb:be:79:06:e9:6c:3a:9a:a7:87:59:c9:
         55:93:44:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz67E89iqvIoSO7jzcm47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh
ZDM5MzUwHhcNMjUwNDEzMTEwMTI0WhcNMjUwNDE0MTEwMTI0WjAzMTEwLwYDVQQD
Eyg2NjY4MWUxMTk1YjYzNTFmNTI0NTAzNjYxODU2NWM4ZjdhMTVhYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD7MZBgA399UyWQ7xsLlIIoRNhvi
iQffjmI3AC7CL15gmPeYMgIafcx1jixgGoFdAoSMrm8Rez82/xduufHxqaPsO7/d
f1qN2OY3NNtL50+9/VsRrahxlvtHRFvfM7OFuHdS7BP9V6RliflV/+WbBidLaXxz
4o2c+FwMG3mC+x2T2EXg1wmZUDpG+5+jzbheofaExHEF7xA9S7qCCWAP4hbdKXmR
xySrioysVAun1rTAMbIhizhQPGfKGoeQqe1rUqZKANPDyFSMCuVSOLG6hD8pbwpY
9tlxwB1xcfQ2r3EUeqDX6V7P4UwxImk9U8hbzmGNO0P9Dj8k+Jve/1Yy3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZoHhGVtjUfUkUDZhhWXI96FaofMB8GA1UdIwQY
MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt
OTIyOWNmNDkyZmI0LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0
LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvubdX1SF
boqNWRUEK8GVRVqNCK8OebKoMUDqeIBAZbbu0kJvfcnuK4JEGT1cIYjKVnRBdYor
dk3C2YrIoZhfLz1QxtMjIW0JiuJc4/9USJVmS1hFfv/rIDbkI9TwGKnkQmTSnFbO
T4vGRrowcLVKFi6ZX0sMAaZ2aNHLWxrLcZnFr9vBOmsLyzWS24Z036GDj9FXE1dk
8+3DDd2+9w0ucB+Zue8nZ7LaaAKfionzYi4OhsTP4RqPU6BCNRzb3BPls/ILccsl
pd0GThIpIRDji8MiCBnkxT2gwxGYjJ7/VtrVOJKTkl/bZZ5PT9pBlvCBu755Buls
Opqnh1nJVZNEFQ==
-----END CERTIFICATE-----