Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File:                     s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier:          PCFxS0T9uVymPWjCkvz2GeTzr7NAShfzICn1e4tpPvc=
Subject key identifier:   25:1F:81:53:5B:43:47:5F:18:C1:13:E1:E4:4B:2E:B1:7B:6A:C9:7B
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer:       /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial:       01962FAB778ED7BDE3179B19FC6E0079F78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number:          05AF
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=)
                          2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: s333XfPjI0xZNzAX+z79FmF71yykm9y1ioK+gbBorDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:77:8e:d7:bd:e3:17:9b:19:fc:6e:00:79:f7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=251f81535b43475f18c113e1e44b2eb17b6ac97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:40:0a:ab:d5:3d:77:dd:73:87:81:e6:17:
                    da:70:14:3e:44:cd:21:9b:c0:bb:52:8a:50:f2:93:
                    64:6f:86:00:a5:dc:a4:6d:47:fc:2b:92:26:e3:64:
                    fb:c0:44:df:93:8c:bb:25:51:99:04:51:55:e9:d4:
                    b9:52:48:09:80:76:45:c6:22:b3:63:08:0a:fb:5a:
                    96:ac:d6:55:ca:69:46:e3:66:06:9a:db:9d:42:01:
                    35:1e:2b:19:2d:96:0e:cc:da:fa:7c:a9:4d:11:fe:
                    aa:a2:6f:3a:24:42:52:af:b2:3c:06:0f:a4:52:8b:
                    03:ad:2e:d3:3e:d4:77:0d:ec:6d:0f:87:01:38:0f:
                    a1:7c:af:c8:98:4e:1c:da:7d:ff:01:c0:94:2a:c8:
                    ef:8b:61:1e:11:58:cf:15:85:0e:ca:6f:ab:23:df:
                    57:85:3d:b3:fc:81:77:d1:cc:f7:d8:60:f6:41:06:
                    1b:5f:38:78:f3:1d:dd:ed:d5:96:6f:f3:6f:be:98:
                    50:03:92:29:1e:ad:6b:84:aa:54:f6:2e:5d:e6:9d:
                    f5:4f:b5:27:4e:6a:39:43:db:19:a9:6e:bd:97:7a:
                    ec:d3:11:4e:0c:12:50:2c:a9:31:4d:d2:77:b7:0d:
                    bb:68:18:13:0f:14:b3:20:b8:b8:d1:98:21:95:b9:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:81:53:5B:43:47:5F:18:C1:13:E1:E4:4B:2E:B1:7B:6A:C9:7B
            X509v3 Authority Key Identifier:
                keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:1c:40:aa:81:a1:4a:74:86:1b:7e:87:cc:01:e6:4b:2d:
         c9:90:a5:b8:2a:be:22:52:58:0f:e3:7e:c7:f4:f6:8e:53:73:
         ec:60:7d:e3:27:a7:33:da:2b:de:5d:51:47:fb:f1:43:da:c4:
         76:3d:5f:6e:76:81:37:b9:5a:3b:06:c3:1d:a9:a0:8b:46:70:
         b0:68:ee:71:41:9e:d6:0d:eb:a6:21:5a:fc:55:22:6d:4b:a9:
         56:56:b9:0e:bc:f7:c3:78:cd:0f:40:e9:a0:1b:bd:33:09:e3:
         85:10:b6:7a:47:cf:c1:56:a2:7e:8c:7d:1a:66:12:2a:0a:20:
         bf:72:40:de:1c:28:33:3a:50:b1:15:9b:09:24:32:d8:39:79:
         ff:c6:99:22:08:02:bc:15:ea:de:2d:c7:b7:7a:80:98:46:78:
         43:c7:d6:ad:6d:ba:46:53:3c:91:5e:a1:59:9c:e0:60:f9:a5:
         52:26:1f:c5:ee:e3:66:0e:c9:c0:58:a1:ee:9d:9b:1b:ec:6d:
         c0:0f:ec:48:16:18:54:1d:5d:ac:2d:cf:34:ed:cb:0b:0e:23:
         54:92:d4:10:ad:0e:44:2a:ba:9c:99:93:91:70:0f:91:d2:bb:
         4a:16:76:14:d1:22:38:ca:48:25:8f:07:9d:3d:06:03:79:12:
         37:b2:2e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3eO173jF5sZ/G4AefeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2QxNWU0MzQ3MGVmMGExZGM3MDEwNzQzOTNmZTcwZjJk
ZjhkMDYwHhcNMjUwNDEzMTUwMTI4WhcNMjUwNDE0MTUwMTI4WjAzMTEwLwYDVQQD
EygyNTFmODE1MzViNDM0NzVmMThjMTEzZTFlNDRiMmViMTdiNmFjOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4JACqvVPXfdc4eB5hfacBQ+RM0h
m8C7UopQ8pNkb4YApdykbUf8K5Im42T7wETfk4y7JVGZBFFV6dS5UkgJgHZFxiKz
YwgK+1qWrNZVymlG42YGmtudQgE1HisZLZYOzNr6fKlNEf6qom86JEJSr7I8Bg+k
UosDrS7TPtR3DextD4cBOA+hfK/ImE4c2n3/AcCUKsjvi2EeEVjPFYUOym+rI99X
hT2z/IF30cz32GD2QQYbXzh48x3d7dWWb/NvvphQA5IpHq1rhKpU9i5d5p31T7Un
Tmo5Q9sZqW69l3rs0xFODBJQLKkxTdJ3tw27aBgTDxSzILi40ZghlbkP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUfgVNbQ0dfGMET4eRLLrF7asl7MB8GA1UdIwQY
MBaAFLN9FeQ0cO8KHccBB0OT/nDy340GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQt
ZGFmNjY5ZmFiZjgwLzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQtZGFmNjY5ZmFiZjgw
LzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuEcQKqB
oUp0hht+h8wB5kstyZCluCq+IlJYD+N+x/T2jlNz7GB94yenM9or3l1RR/vxQ9rE
dj1fbnaBN7laOwbDHamgi0ZwsGjucUGe1g3rpiFa/FUibUupVla5Drz3w3jND0Dp
oBu9MwnjhRC2ekfPwVaifox9GmYSKgogv3JA3hwoMzpQsRWbCSQy2Dl5/8aZIggC
vBXq3i3Ht3qAmEZ4Q8fWrW26RlM8kV6hWZzgYPmlUiYfxe7jZg7JwFih7p2bG+xt
wA/sSBYYVB1drC3PNO3LCw4jVJLUEK0ORCq6nJmTkXAPkdK7ShZ2FNEiOMpIJY8H
nT0GA3kSN7Iumg==
-----END CERTIFICATE-----