Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File:                     _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier:          0W4nVfxHxECI4nD+fNIPw5ACAxg80oSyd4WQ++AWiyU=
Subject key identifier:   45:A2:68:E0:6E:02:A6:8B:C3:03:EE:4B:F3:5F:4B:FE:48:1E:E8:7C
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer:       /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial:       01962E61FBCBCF3D51203EDFA8C74312E441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number:          0EA4
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
                          2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: F5U13fmv8Mxe2vTwfUxU7IH00WfEgjndVB3ZQb/+kBY=)
                          3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:cb:cf:3d:51:20:3e:df:a8:c7:43:12:e4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=45a268e06e02a68bc303ee4bf35f4bfe481ee87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:9a:f3:16:52:1b:21:b5:1e:6c:0c:d8:61:
                    15:88:3f:25:61:7b:70:86:53:34:87:aa:c9:71:a8:
                    a7:dc:d9:f0:78:ca:8a:27:29:02:2a:16:8c:b3:2a:
                    bb:f5:13:52:18:71:b1:2c:a7:4f:ce:05:58:6c:64:
                    0e:c7:06:68:32:d2:ff:79:e7:c6:a2:a6:10:68:84:
                    f5:55:56:98:de:82:22:8c:26:c5:e1:5f:c5:18:90:
                    35:fd:1a:00:48:8b:37:8b:e9:7f:f1:f8:a5:3e:dd:
                    7f:19:ca:33:2c:42:72:ac:a4:6b:36:01:a6:8a:7a:
                    22:49:a4:a3:4d:8d:05:af:b1:c0:20:25:d0:cf:25:
                    aa:c4:ba:d3:b1:99:d8:24:24:a0:a3:e1:4c:3e:48:
                    4d:3d:04:b3:8a:c1:ee:01:5a:f0:00:d7:08:a8:83:
                    0a:9c:6d:d6:f5:3d:60:03:4c:06:8e:fc:19:80:e4:
                    95:b9:8e:46:6d:ae:9e:d0:7c:84:56:4e:61:08:d0:
                    4e:fb:af:75:d4:ef:b1:03:c8:41:93:65:a5:97:ba:
                    04:1d:71:20:46:da:db:87:0d:89:99:3d:aa:86:2d:
                    6c:18:90:c9:97:a3:16:73:69:c0:e9:1b:48:10:c8:
                    9d:53:9f:95:e7:5f:22:d8:f0:7c:fa:ad:b7:29:2a:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:68:E0:6E:02:A6:8B:C3:03:EE:4B:F3:5F:4B:FE:48:1E:E8:7C
            X509v3 Authority Key Identifier:
                keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:40:f9:98:05:3a:48:2b:ec:65:30:96:db:f6:35:de:2a:48:
         a2:06:d1:ea:24:1d:1e:05:49:e1:e6:63:26:d3:c9:ee:bd:7d:
         c1:12:dc:cc:00:37:7b:0d:36:35:8b:a3:d2:4b:22:db:e3:0a:
         a1:0e:9b:cf:32:b4:09:43:e7:f8:9e:05:8a:73:5f:8d:56:58:
         ab:61:94:9c:6e:4f:b4:5a:0b:32:6f:7f:2c:d6:53:72:c6:4e:
         1c:87:d4:0c:89:a2:d1:37:9a:32:8c:8b:25:0d:04:36:3b:ee:
         fc:65:d4:21:9f:25:4a:f2:c7:df:6c:20:6a:f5:d6:86:aa:3d:
         cb:93:01:2f:6c:c6:5a:61:10:e3:2c:3c:a2:cf:70:ff:6f:14:
         de:8c:ab:67:4b:49:a3:d4:df:b8:36:85:ca:43:1c:49:3c:8b:
         1c:e2:fd:cb:05:5a:ce:0d:ff:81:63:90:e2:34:b7:ee:a5:2f:
         33:0a:00:2e:5b:e3:a1:d7:da:31:eb:09:4b:0f:bb:85:b0:b2:
         77:43:46:be:5a:62:c7:8c:53:b4:22:d2:de:8d:c7:01:58:6a:
         8b:03:29:e0:52:9c:cc:92:1c:a8:6a:a1:ab:20:ea:6d:4d:55:
         57:9d:be:8d:f8:e5:af:9a:9e:bd:51:67:fb:b8:91:c0:a4:ed:
         1f:8c:62:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfvLzz1RID7fqMdDEuRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjUwNDEzMDkwMTM1WhcNMjUwNDE0MDkwMTM1WjAzMTEwLwYDVQQD
Eyg0NWEyNjhlMDZlMDJhNjhiYzMwM2VlNGJmMzVmNGJmZTQ4MWVlODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxaa8xZSGyG1HmwM2GEViD8lYXtw
hlM0h6rJcain3NnweMqKJykCKhaMsyq79RNSGHGxLKdPzgVYbGQOxwZoMtL/eefG
oqYQaIT1VVaY3oIijCbF4V/FGJA1/RoASIs3i+l/8filPt1/GcozLEJyrKRrNgGm
inoiSaSjTY0Fr7HAICXQzyWqxLrTsZnYJCSgo+FMPkhNPQSzisHuAVrwANcIqIMK
nG3W9T1gA0wGjvwZgOSVuY5Gba6e0HyEVk5hCNBO+6911O+xA8hBk2Wll7oEHXEg
Rtrbhw2JmT2qhi1sGJDJl6MWc2nA6RtIEMidU5+V518i2PB8+q23KSoGCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWiaOBuAqaLwwPuS/NfS/5IHuh8MB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0D5mAU6
SCvsZTCW2/Y13ipIogbR6iQdHgVJ4eZjJtPJ7r19wRLczAA3ew02NYuj0ksi2+MK
oQ6bzzK0CUPn+J4FinNfjVZYq2GUnG5PtFoLMm9/LNZTcsZOHIfUDImi0TeaMoyL
JQ0ENjvu/GXUIZ8lSvLH32wgavXWhqo9y5MBL2zGWmEQ4yw8os9w/28U3oyrZ0tJ
o9TfuDaFykMcSTyLHOL9ywVazg3/gWOQ4jS37qUvMwoALlvjodfaMesJSw+7hbCy
d0NGvlpix4xTtCLS3o3HAVhqiwMp4FKczJIcqGqhqyDqbU1VV52+jfjlr5qevVFn
+7iRwKTtH4xizw==
-----END CERTIFICATE-----