Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File:                     MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier:          A+cNUcXEZ9kzR8zV6QYGokNkhWEmLUPCZ+mVzoIbMNc=
Subject key identifier:   13:C0:4A:49:7A:29:D7:77:F4:45:8F:77:A0:E4:B2:4A:40:14:58:6B
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer:       /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial:       01962E2B2E1F8AA185A171DD263467360D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: XBxVgeXlj87dDBZ7kP7rG1qb83chivc1Y59YqAsUjKw=)
                          2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2e:1f:8a:a1:85:a1:71:dd:26:34:67:36:0d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=13c04a497a29d777f4458f77a0e4b24a4014586b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:e8:fd:70:1c:d5:0e:c8:40:4c:07:5b:41:
                    e1:bb:9b:15:41:7e:f6:4a:77:05:f2:12:80:f4:1e:
                    92:fd:e3:12:f5:2c:b6:75:23:ff:de:bc:73:93:91:
                    c1:76:56:4b:f2:2b:a3:0b:87:4f:da:6b:9a:b7:27:
                    a2:ba:a9:a1:4b:e6:0b:da:91:f9:9a:58:35:c3:49:
                    7e:f8:37:87:f4:a9:7f:19:dd:56:7f:1f:8b:7a:ba:
                    23:d2:1f:9f:25:7d:5b:f9:b8:92:d4:c2:85:72:04:
                    17:67:b4:3d:93:32:e8:58:8a:80:0b:bc:fc:ed:ee:
                    85:7f:df:26:0d:0b:9f:7c:cd:49:2b:a7:e9:3e:50:
                    0a:7c:b4:27:b2:c6:69:16:e9:fd:9a:7b:2c:25:82:
                    31:4c:66:0e:22:e0:46:f3:63:5e:c2:d3:f8:9e:eb:
                    fb:6b:60:e2:84:d5:37:d0:3f:f7:8b:ba:15:0a:95:
                    60:02:eb:05:6c:e3:b5:e2:a0:68:41:87:8b:de:21:
                    e1:37:fb:be:05:9c:ab:70:39:34:2d:8b:90:da:5b:
                    71:13:69:5c:ba:64:02:0d:d7:18:30:2b:20:13:98:
                    25:be:69:31:a3:f3:91:13:a2:81:a1:a7:a6:24:07:
                    49:b8:3e:3f:a5:c2:87:7e:3c:e7:70:1b:6c:68:77:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:4A:49:7A:29:D7:77:F4:45:8F:77:A0:E4:B2:4A:40:14:58:6B
            X509v3 Authority Key Identifier:
                keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:16:5f:e3:36:bc:03:ae:c1:d5:4d:69:11:3a:41:37:ba:e7:
         d4:68:2d:15:39:6e:1a:f6:1f:16:5e:78:b1:7f:8d:e4:95:40:
         85:e0:48:79:85:c0:59:e1:cf:9c:ef:9e:79:dd:86:5f:b4:a1:
         2c:e0:a2:18:65:05:53:fb:5b:5d:70:25:b6:f4:df:48:87:22:
         c4:b6:04:2a:49:4a:33:e9:fa:ed:40:84:fb:0e:75:55:3f:b7:
         56:79:16:11:f3:fd:cc:e8:39:0b:1f:36:15:86:2b:fb:4f:1a:
         3d:d0:a6:93:6c:79:78:2b:26:93:b3:b7:2d:cd:fb:0c:97:90:
         29:90:a9:70:17:e8:a3:ae:b2:a2:50:f5:e5:f5:a4:da:58:96:
         8c:be:31:8d:4d:ad:0b:29:53:d2:59:85:c2:d4:af:c3:62:43:
         15:f6:34:62:9a:45:6d:4d:a5:f6:5d:a0:90:a2:f8:71:04:d1:
         38:00:cd:86:db:d3:0c:38:3d:89:d2:30:89:e5:bb:af:59:e6:
         7e:6b:8a:b6:bf:00:ab:0a:36:65:09:ea:eb:c7:14:c8:fe:cb:
         bd:87:57:79:7c:46:f9:94:c8:ab:2c:b5:3d:b1:2c:9a:f6:60:
         1b:b4:40:b6:80:62:16:16:b2:34:b2:b9:5c:ce:95:aa:1a:82:
         96:57:32:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKy4fiqGFoXHdJjRnNg1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz
MWVmZDAwHhcNMjUwNDEzMDgwMTQzWhcNMjUwNDE0MDgwMTQzWjAzMTEwLwYDVQQD
EygxM2MwNGE0OTdhMjlkNzc3ZjQ0NThmNzdhMGU0YjI0YTQwMTQ1ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAbo/XAc1Q7IQEwHW0Hhu5sVQX72
SncF8hKA9B6S/eMS9Sy2dSP/3rxzk5HBdlZL8iujC4dP2muatyeiuqmhS+YL2pH5
mlg1w0l++DeH9Kl/Gd1Wfx+Leroj0h+fJX1b+biS1MKFcgQXZ7Q9kzLoWIqAC7z8
7e6Ff98mDQuffM1JK6fpPlAKfLQnssZpFun9mnssJYIxTGYOIuBG82NewtP4nuv7
a2DihNU30D/3i7oVCpVgAusFbOO14qBoQYeL3iHhN/u+BZyrcDk0LYuQ2ltxE2lc
umQCDdcYMCsgE5glvmkxo/ORE6KBoaemJAdJuD4/pcKHfjzncBtsaHd1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPASkl6Kdd39EWPd6DkskpAFFhrMB8GA1UdIwQY
MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt
OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl
LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxZf4za8
A67B1U1pETpBN7rn1GgtFTluGvYfFl54sX+N5JVAheBIeYXAWeHPnO+eed2GX7Sh
LOCiGGUFU/tbXXAltvTfSIcixLYEKklKM+n67UCE+w51VT+3VnkWEfP9zOg5Cx82
FYYr+08aPdCmk2x5eCsmk7O3Lc37DJeQKZCpcBfoo66yolD15fWk2liWjL4xjU2t
CylT0lmFwtSvw2JDFfY0YppFbU2l9l2gkKL4cQTROADNhtvTDDg9idIwieW7r1nm
fmuKtr8Aqwo2ZQnq68cUyP7LvYdXeXxG+ZTIqyy1PbEsmvZgG7RAtoBiFhayNLK5
XM6VqhqCllcykQ==
-----END CERTIFICATE-----