Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File:                     xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier:          FJorxsvqHXh3tTDzZ6Jdu+pt1PjErrc55utIbIQx0mk=
Subject key identifier:   86:80:0D:01:A8:B6:A0:0E:55:F7:32:72:76:3A:73:B6:4B:23:35:97
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer:       /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial:       01962E2B412772478D7D56CEA890972F1C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 95gfeORrzFU1baOm9FNRF4z-Awc.roa (hash: yu0lodJztF5C/Epqr7ypdXxVzEpgYNXlQQQ9uDXoMnU=)
                          2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
                          3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: fUHcREwHPfeGkkaOleHR3ZWwUHbDZ44guSEElE/ENVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:27:72:47:8d:7d:56:ce:a8:90:97:2f:1c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=86800d01a8b6a00e55f73272763a73b64b233597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:1c:b5:9f:15:f9:ea:87:fd:d3:81:33:74:
                    6f:9c:9c:74:6d:f0:79:5a:4a:7f:4c:f4:80:f7:f7:
                    d3:ca:73:42:a2:fc:21:6c:e1:35:c8:f4:eb:ee:71:
                    1e:d6:a4:67:3c:1b:a3:d6:5a:83:5b:1f:b8:91:1c:
                    c7:7c:8c:49:bc:da:5a:cd:37:42:2b:b4:50:6f:c8:
                    c4:07:4c:94:f6:ab:36:22:52:7a:b7:7f:6e:6c:af:
                    76:22:2a:f7:51:9c:31:5c:68:d3:5b:8b:c4:ca:c3:
                    e5:08:07:38:0b:cd:47:b7:9b:0b:82:86:d4:e0:e4:
                    64:b0:d4:1c:aa:e9:7b:2f:a3:78:bf:94:5c:98:b6:
                    31:03:72:42:64:21:3e:92:b5:25:66:17:e0:a5:8c:
                    ff:4b:06:e0:9b:b7:ec:45:53:fd:c0:45:30:23:b8:
                    e5:e4:1d:b4:0e:81:70:1b:59:ef:75:c1:61:ce:d4:
                    6a:09:ec:03:28:b7:a8:ac:d2:01:50:41:57:be:21:
                    81:af:3e:0e:26:43:5c:37:ee:8c:7b:9f:0b:92:ea:
                    47:34:0e:96:da:fb:7e:e5:20:3e:bc:23:1a:3f:1b:
                    24:a5:3a:49:ba:cb:04:b3:4c:b6:35:b0:a7:31:3d:
                    80:c6:99:f8:a5:70:13:19:b6:91:70:e6:d4:ba:69:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:80:0D:01:A8:B6:A0:0E:55:F7:32:72:76:3A:73:B6:4B:23:35:97
            X509v3 Authority Key Identifier:
                keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:12:43:e6:46:bc:6f:86:49:8e:fa:be:9c:4f:c7:99:63:
         7f:2b:df:02:0c:1e:96:3f:f7:17:4f:51:0f:32:f9:60:55:ec:
         b0:51:28:1e:e5:d6:e1:1c:b4:98:1d:dc:71:37:59:99:e8:b8:
         20:7b:c8:ba:7c:79:e2:f0:9f:a3:bc:55:c8:b4:73:2d:c9:96:
         a0:ff:a3:0b:81:12:a5:48:24:68:a8:27:20:f7:a4:fe:ed:b0:
         42:bf:15:ae:80:99:18:95:fa:56:4f:fc:70:83:f1:be:9e:ea:
         a3:03:a2:4e:30:09:a5:54:e6:75:48:74:1e:9c:c9:b0:ad:15:
         e2:32:56:e2:a4:10:bc:bc:97:c6:70:49:78:eb:c7:b2:02:6b:
         48:61:37:73:a5:32:0f:69:84:e3:db:7e:ba:46:8a:58:e2:0d:
         29:fb:a4:ba:c9:fd:6c:2f:92:60:87:3b:83:f8:71:27:7c:94:
         02:bb:8a:5c:3e:32:48:7a:90:4a:5e:f4:e3:60:77:8b:f2:74:
         cd:37:f6:44:3c:31:70:05:ba:f0:50:25:d5:24:81:71:6d:a8:
         1b:a7:74:ac:d7:db:7a:93:e8:32:9e:5c:00:75:52:e6:4d:61:
         85:01:1a:d4:cc:ca:a0:4f:66:bc:20:5d:61:85:1a:1f:7f:68:
         4c:8b:57:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0EnckeNfVbOqJCXLxyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
Eyg4NjgwMGQwMWE4YjZhMDBlNTVmNzMyNzI3NjNhNzNiNjRiMjMzNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjogctZ8V+eqH/dOBM3RvnJx0bfB5
Wkp/TPSA9/fTynNCovwhbOE1yPTr7nEe1qRnPBuj1lqDWx+4kRzHfIxJvNpazTdC
K7RQb8jEB0yU9qs2IlJ6t39ubK92Iir3UZwxXGjTW4vEysPlCAc4C81Ht5sLgobU
4ORksNQcqul7L6N4v5RcmLYxA3JCZCE+krUlZhfgpYz/Swbgm7fsRVP9wEUwI7jl
5B20DoFwG1nvdcFhztRqCewDKLeorNIBUEFXviGBrz4OJkNcN+6Me58LkupHNA6W
2vt+5SA+vCMaPxskpTpJussEs0y2NbCnMT2Axpn4pXATGbaRcObUumlOvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaADQGotqAOVfcycnY6c7ZLIzWXMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddQSQ+ZG
vG+GSY76vpxPx5ljfyvfAgwelj/3F09RDzL5YFXssFEoHuXW4Ry0mB3ccTdZmei4
IHvIunx54vCfo7xVyLRzLcmWoP+jC4ESpUgkaKgnIPek/u2wQr8VroCZGJX6Vk/8
cIPxvp7qowOiTjAJpVTmdUh0HpzJsK0V4jJW4qQQvLyXxnBJeOvHsgJrSGE3c6Uy
D2mE49t+ukaKWOINKfukusn9bC+SYIc7g/hxJ3yUAruKXD4ySHqQSl7042B3i/J0
zTf2RDwxcAW68FAl1SSBcW2oG6d0rNfbepPoMp5cAHVS5k1hhQEa1MzKoE9mvCBd
YYUaH39oTItXKA==
-----END CERTIFICATE-----