Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File:                     FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier:          Jve5FJq9gK4ke+UJI8UIuwE5BpbFm/J6lc9cbjF0m6w=
Subject key identifier:   CF:6A:2E:70:D0:62:AA:D3:B1:9F:CB:AB:62:9F:93:55:A7:1F:BB:45
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer:       /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial:       01962E99B9692A8D5D666142F6C582F55C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number:          09A1
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: +X0oqHxtOGO5MacdH9SzNgeILPazr/VFGOgc1/IAU1M=)
                          2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b9:69:2a:8d:5d:66:61:42:f6:c5:82:f5:5c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=cf6a2e70d062aad3b19fcbab629f9355a71fbb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:8c:e9:91:01:88:2c:8a:69:a3:e7:a3:aa:
                    07:37:d1:29:c7:ae:90:1d:6a:33:39:38:69:7e:45:
                    8a:65:94:af:f5:8f:0f:9b:c2:6b:07:74:af:7e:2d:
                    1b:9b:c8:a4:66:c9:fb:e0:72:50:63:fb:1c:3c:3b:
                    bd:c2:68:68:d6:b5:f2:5a:f1:10:e3:7d:9f:09:69:
                    85:a4:4b:df:9d:da:5c:81:8e:5c:c2:51:4c:4d:66:
                    5d:1e:1a:12:d0:14:0c:a7:5d:6f:e2:ea:78:38:76:
                    d0:3a:79:fe:b5:94:d7:61:af:74:89:f5:e1:79:97:
                    21:1f:f2:9d:91:f1:57:27:c6:55:aa:fa:a5:32:4c:
                    e5:df:46:b8:c7:ac:03:60:8b:41:37:ec:32:3b:a6:
                    ee:fb:21:bd:60:dd:7e:fc:7e:9b:99:3c:20:16:f0:
                    80:3d:13:b7:d6:2f:f0:85:e6:73:a2:70:05:1b:20:
                    00:6f:8f:ea:52:98:77:8b:1a:a7:71:4f:b8:69:44:
                    96:04:09:46:e8:0d:06:fb:dd:48:82:d3:53:d4:be:
                    98:d6:d1:3a:3e:de:43:eb:c5:14:c2:32:f1:f2:e6:
                    23:64:0a:8d:79:00:21:62:b0:3e:ef:39:bd:f7:56:
                    0e:b8:ad:85:1e:a1:89:90:e3:b7:3a:13:ac:d4:4a:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:2E:70:D0:62:AA:D3:B1:9F:CB:AB:62:9F:93:55:A7:1F:BB:45
            X509v3 Authority Key Identifier:
                keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:13:52:94:57:cb:0a:f2:7a:6c:72:02:dc:90:7e:65:92:
         d4:62:bb:fb:65:93:6b:58:1f:57:14:15:37:7a:db:73:e0:c0:
         87:49:97:61:5d:4a:71:de:01:98:94:2d:d6:4d:da:9b:a3:22:
         16:40:20:7c:4e:72:a8:d8:6b:86:f8:d6:21:3c:75:7f:4b:f4:
         ec:ae:c3:d9:bf:21:72:ff:a1:75:67:f9:22:ba:8c:b0:2a:0d:
         be:07:a2:11:74:c6:76:29:84:be:c1:28:46:4f:49:b9:1f:24:
         76:e9:f6:9b:de:3e:77:e5:1a:fd:f3:16:be:66:96:72:8a:32:
         86:1b:73:96:89:3d:26:e1:9e:a9:3c:18:a1:79:6c:85:89:30:
         cc:bf:5a:e9:c0:fb:86:00:15:fd:8a:8a:fb:dd:cd:20:3e:42:
         ba:f4:5f:4a:5a:62:93:fe:d0:70:ae:45:6e:ee:96:22:52:82:
         e9:86:27:19:d1:9c:28:0e:be:f2:c0:a8:80:50:59:62:28:af:
         7e:15:f5:4b:14:59:fb:93:52:53:4d:98:d6:8e:e6:55:13:ba:
         1c:1b:5f:09:4e:52:9b:c0:2b:3a:df:ad:f3:a6:46:7d:bc:2a:
         8d:b5:c1:e4:d6:df:fe:4a:a1:70:c8:67:74:12:b3:2f:31:bd:
         26:ef:12:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumblpKo1dZmFC9sWC9VwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjUwNDEzMTAwMjI4WhcNMjUwNDE0MTAwMjI4WjAzMTEwLwYDVQQD
EyhjZjZhMmU3MGQwNjJhYWQzYjE5ZmNiYWI2MjlmOTM1NWE3MWZiYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w2M6ZEBiCyKaaPno6oHN9Epx66Q
HWozOThpfkWKZZSv9Y8Pm8JrB3Svfi0bm8ikZsn74HJQY/scPDu9wmho1rXyWvEQ
432fCWmFpEvfndpcgY5cwlFMTWZdHhoS0BQMp11v4up4OHbQOnn+tZTXYa90ifXh
eZchH/KdkfFXJ8ZVqvqlMkzl30a4x6wDYItBN+wyO6bu+yG9YN1+/H6bmTwgFvCA
PRO31i/wheZzonAFGyAAb4/qUph3ixqncU+4aUSWBAlG6A0G+91IgtNT1L6Y1tE6
Pt5D68UUwjLx8uYjZAqNeQAhYrA+7zm991YOuK2FHqGJkOO3OhOs1EqdIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9qLnDQYqrTsZ/Lq2Kfk1WnH7tFMB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3YTUpRX
ywryemxyAtyQfmWS1GK7+2WTa1gfVxQVN3rbc+DAh0mXYV1Kcd4BmJQt1k3am6Mi
FkAgfE5yqNhrhvjWITx1f0v07K7D2b8hcv+hdWf5IrqMsCoNvgeiEXTGdimEvsEo
Rk9JuR8kdun2m94+d+Ua/fMWvmaWcooyhhtzlok9JuGeqTwYoXlshYkwzL9a6cD7
hgAV/YqK+93NID5CuvRfSlpik/7QcK5Fbu6WIlKC6YYnGdGcKA6+8sCogFBZYiiv
fhX1SxRZ+5NSU02Y1o7mVRO6HBtfCU5Sm8ArOt+t86ZGfbwqjbXB5Nbf/kqhcMhn
dBKzLzG9Ju8SiQ==
-----END CERTIFICATE-----