Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File:                     StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier:          /EaF/+Ap7UqAYO89z8xC9xY1l6whnJBnp3F15pFD+JI=
Subject key identifier:   C8:BD:1A:AA:B8:3B:57:69:DB:19:CA:E8:31:FC:F3:9B:E4:E8:97:9C
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer:       /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial:       01962DF44B88C1D71A922506F6CB89741232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number:          1196
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=)
                          2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: /OMCexjfrKnIkzp9esavHfLjMaVbNk3bF0X1bFLIHpc=)
                          3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:88:c1:d7:1a:92:25:06:f6:cb:89:74:12:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=c8bd1aaab83b5769db19cae831fcf39be4e8979c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:5a:5b:bb:6e:ea:71:ef:9d:44:f7:30:f8:
                    16:16:b3:f0:1c:58:f5:9f:21:3d:a4:9d:fe:90:54:
                    cd:71:f2:e8:fe:6b:80:4e:a3:77:55:a6:4e:5b:65:
                    b1:03:85:6e:57:a9:ad:eb:16:57:0c:6c:93:a4:5b:
                    9c:45:6e:96:d0:76:3b:30:64:59:fa:26:ec:d5:2b:
                    f9:0a:3e:95:83:6c:60:d1:c3:ff:12:57:54:55:db:
                    aa:47:b4:fc:de:99:00:ce:d0:b4:a2:f3:9a:95:34:
                    4c:35:ff:cd:77:b3:5c:ec:b5:94:cb:08:d9:c8:51:
                    7a:6d:9a:be:7f:e7:d8:e9:a0:99:95:39:4b:c1:43:
                    fd:31:49:08:b2:56:41:a8:8f:b6:dc:dc:f7:fc:91:
                    46:dd:2b:a8:47:2a:e7:e5:e4:1e:87:10:d1:19:dc:
                    40:5f:53:8b:45:05:b1:97:fe:13:fd:70:f9:a8:88:
                    8a:56:0c:60:4b:68:d0:f9:60:e7:77:1b:0e:f8:1a:
                    03:b0:12:db:f0:d6:87:fb:d7:f9:4f:77:ec:81:64:
                    74:4e:3a:43:27:3f:4c:41:c8:ac:04:ad:98:a1:e0:
                    d0:16:d1:21:84:cf:d0:09:1c:5c:8a:a8:f7:da:bd:
                    a9:ea:fb:3b:3b:ac:15:b9:f0:85:02:f5:21:81:a9:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BD:1A:AA:B8:3B:57:69:DB:19:CA:E8:31:FC:F3:9B:E4:E8:97:9C
            X509v3 Authority Key Identifier:
                keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:95:77:0e:02:14:c6:3d:6c:d9:71:77:92:04:b8:e0:ad:
         9a:f0:bf:c6:9d:09:1b:96:77:a3:f9:a9:52:6a:bc:fe:14:75:
         42:6e:87:50:d2:ef:eb:69:d1:3c:79:e9:a7:4c:64:4d:71:db:
         ac:34:fd:4d:21:fa:04:93:5e:1e:90:49:e9:d6:00:7d:43:38:
         7c:b5:9c:b0:2c:3a:c6:68:d1:eb:02:36:87:cb:e3:14:a3:9e:
         d8:e4:00:01:40:b7:41:5f:21:47:d3:bd:7d:72:53:f3:01:23:
         7d:55:31:09:4c:cd:7b:a6:56:a0:39:86:36:4e:78:a2:64:22:
         24:53:e7:7b:e3:bd:e9:58:aa:77:05:c7:d4:9a:05:70:ed:ad:
         ca:45:0c:06:db:75:78:a9:e9:04:6b:0e:f1:c7:5a:78:46:98:
         26:00:cc:87:32:61:a5:17:e0:5a:bc:e9:57:91:13:2d:43:cb:
         18:ec:25:8c:0a:4e:3d:d2:45:ba:09:a5:38:7e:75:d4:14:f5:
         b6:c1:4e:3e:4f:98:43:2d:09:59:3c:0e:1b:82:17:bd:a6:42:
         53:b2:1a:80:31:d8:09:30:7c:78:9c:95:6c:76:5d:e5:b6:c4:
         77:2d:53:99:33:67:3a:8a:f9:c5:a2:15:24:16:90:23:ae:5b:
         d3:a8:cc:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EuIwdcakiUG9suJdBIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDE3MTcxYWVhODU3NmM0MzFjNjM3NDE4NjkxYzljMWY1
NTc1MTYwHhcNMjUwNDEzMDcwMTQ2WhcNMjUwNDE0MDcwMTQ2WjAzMTEwLwYDVQQD
EyhjOGJkMWFhYWI4M2I1NzY5ZGIxOWNhZTgzMWZjZjM5YmU0ZTg5NzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgZaW7tu6nHvnUT3MPgWFrPwHFj1
nyE9pJ3+kFTNcfLo/muATqN3VaZOW2WxA4VuV6mt6xZXDGyTpFucRW6W0HY7MGRZ
+ibs1Sv5Cj6Vg2xg0cP/EldUVduqR7T83pkAztC0ovOalTRMNf/Nd7Nc7LWUywjZ
yFF6bZq+f+fY6aCZlTlLwUP9MUkIslZBqI+23Nz3/JFG3SuoRyrn5eQehxDRGdxA
X1OLRQWxl/4T/XD5qIiKVgxgS2jQ+WDndxsO+BoDsBLb8NaH+9f5T3fsgWR0TjpD
Jz9MQcisBK2YoeDQFtEhhM/QCRxciqj32r2p6vs7O6wVufCFAvUhgakrCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi9Gqq4O1dp2xnK6DH885vk6JecMB8GA1UdIwQY
MBaAFErRcXGuqFdsQxxjdBhpHJwfVXUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQt
NDgyOGQ2NTEwNGUxLzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQtNDgyOGQ2NTEwNGUx
LzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt6Vdw4C
FMY9bNlxd5IEuOCtmvC/xp0JG5Z3o/mpUmq8/hR1Qm6HUNLv62nRPHnpp0xkTXHb
rDT9TSH6BJNeHpBJ6dYAfUM4fLWcsCw6xmjR6wI2h8vjFKOe2OQAAUC3QV8hR9O9
fXJT8wEjfVUxCUzNe6ZWoDmGNk54omQiJFPne+O96ViqdwXH1JoFcO2tykUMBtt1
eKnpBGsO8cdaeEaYJgDMhzJhpRfgWrzpV5ETLUPLGOwljApOPdJFugmlOH511BT1
tsFOPk+YQy0JWTwOG4IXvaZCU7IagDHYCTB8eJyVbHZd5bbEdy1TmTNnOor5xaIV
JBaQI65b06jMVg==
-----END CERTIFICATE-----