Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
File:                     tU3fbwMzHNdzx-ersVQpuo0gvXg.mft (raw, json)
Hash identifier:          aemphJ4E5TeRS1Sq5mRb0Lr2d6AmZpe1+FFAGggZYuY=
Subject key identifier:   A7:49:D7:F7:97:23:5A:17:01:D4:FE:41:51:E4:33:2A:AD:92:A2:7E
Authority key identifier: B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
Certificate issuer:       /CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Certificate serial:       01962E9943EC9CF5883FC58E18D6A24315D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
Manifest number:          062D
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: 1SqAG3Japdqs2uBvGFHguJLvhqE.roa (hash: tRLIPOPh9GLi7wL54w2K0S63l5p5YYde2YPqeJx3wD8=)
                          2: tU3fbwMzHNdzx-ersVQpuo0gvXg.crl (hash: /jmljlJkorqFsCzqwwsaGJXo5MNfMJFBqGvolEfkh4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:43:ec:9c:f5:88:3f:c5:8e:18:d6:a2:43:15:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=a749d7f797235a1701d4fe4151e4332aad92a27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:75:7e:2c:5e:f5:0f:00:49:a1:8d:e4:15:
                    eb:e5:84:ca:b9:9e:a0:9b:11:70:45:0a:a0:1a:8e:
                    dd:eb:c7:88:ee:e1:e3:db:27:1f:6f:31:31:f8:59:
                    85:44:10:d1:c4:17:ed:01:2f:73:82:c9:ab:49:57:
                    f4:82:cd:93:6c:9d:d2:71:33:9e:4f:a1:39:44:3d:
                    94:dc:be:cf:64:62:80:c0:9e:88:b2:50:c7:43:83:
                    51:40:5e:c7:68:89:f2:f1:6e:80:ea:99:8d:b9:bb:
                    82:58:35:ba:3c:10:7b:13:15:24:cf:a9:50:cb:aa:
                    9c:04:13:e5:88:4c:05:2b:92:37:49:85:2f:40:1f:
                    55:3e:f4:a9:a3:07:99:93:f6:26:c0:4d:ad:1c:d2:
                    b6:ee:c9:3b:80:f7:c4:94:35:23:26:d0:c7:0e:6a:
                    69:ae:97:62:f1:1d:33:9a:0a:a1:66:a4:19:f7:c3:
                    cf:ea:d3:39:56:e5:fb:a6:ae:a1:69:0a:ea:d0:43:
                    6d:a1:82:5a:6e:ec:f4:64:f0:c3:d2:96:87:82:07:
                    47:95:43:01:56:43:ab:37:0c:e0:af:e5:bb:8d:c5:
                    04:90:1c:50:a6:84:8f:44:b6:f6:f2:8d:6e:b6:05:
                    b6:a7:96:8b:d7:b5:11:23:09:56:d7:23:f3:d4:c8:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:49:D7:F7:97:23:5A:17:01:D4:FE:41:51:E4:33:2A:AD:92:A2:7E
            X509v3 Authority Key Identifier:
                keyid:B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:ef:1b:4d:3f:ce:f4:37:52:60:56:09:6c:95:48:24:2e:
         2a:82:38:b5:2e:9c:bb:3c:1f:7b:62:ce:11:a8:75:6e:09:23:
         fb:ec:fe:fb:8b:9e:2f:0f:5b:89:a3:2d:59:49:38:c5:d9:8e:
         2c:8e:a5:89:34:8a:3a:fc:f3:ab:cf:57:f0:29:78:d3:2a:c0:
         59:60:1a:23:54:9e:16:cd:1d:91:7a:e5:e0:28:51:39:42:e1:
         60:fc:2a:6b:ca:8c:9a:04:f5:5d:bf:dc:02:e6:3d:e2:36:7f:
         53:84:5c:3c:b6:df:32:ff:39:42:47:d7:2f:d7:2b:ee:1c:c2:
         dd:a9:70:64:f8:c0:59:b1:d0:e8:d3:cd:62:a8:bf:3e:b1:06:
         1d:93:68:d1:5a:c6:3f:09:f5:d0:01:49:23:cd:78:13:96:60:
         0d:fc:92:27:66:1f:a0:28:37:b7:60:e9:2f:af:d8:4c:9c:96:
         ca:78:df:6e:38:9c:40:6f:45:ee:67:c2:64:d1:ed:1c:36:0f:
         3f:40:86:e3:88:61:a0:66:f7:cb:15:1b:fd:64:ba:c4:f3:c3:
         83:eb:de:60:a2:6e:cc:1c:c6:cd:af:c6:6f:e9:3a:08:cd:d8:
         c8:c6:47:58:fd:da:d8:e6:db:e8:42:6a:84:d7:be:5e:68:59:
         52:8c:64:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUPsnPWIP8WOGNaiQxXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NGRkZjZmMDMzMzFjZDc3M2M3ZTdhYmIxNTQyOWJhOGQy
MGJkNzgwHhcNMjUwNDEzMTAwMTU4WhcNMjUwNDE0MTAwMTU4WjAzMTEwLwYDVQQD
EyhhNzQ5ZDdmNzk3MjM1YTE3MDFkNGZlNDE1MWU0MzMyYWFkOTJhMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1R1fixe9Q8ASaGN5BXr5YTKuZ6g
mxFwRQqgGo7d68eI7uHj2ycfbzEx+FmFRBDRxBftAS9zgsmrSVf0gs2TbJ3ScTOe
T6E5RD2U3L7PZGKAwJ6IslDHQ4NRQF7HaIny8W6A6pmNubuCWDW6PBB7ExUkz6lQ
y6qcBBPliEwFK5I3SYUvQB9VPvSpoweZk/YmwE2tHNK27sk7gPfElDUjJtDHDmpp
rpdi8R0zmgqhZqQZ98PP6tM5VuX7pq6haQrq0ENtoYJabuz0ZPDD0paHggdHlUMB
VkOrNwzgr+W7jcUEkBxQpoSPRLb28o1utgW2p5aL17URIwlW1yPz1MhylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdJ1/eXI1oXAdT+QVHkMyqtkqJ+MB8GA1UdIwQY
MBaAFLVN328DMxzXc8fnq7FUKbqNIL14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFUzZmJ3TXpITmR6eC1lcnNWUXB1bzBndlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82NWJjZmYtYmEwMS00OThjLWI1NGQt
ODQwMjZiYzg1MmYwLzEvdFUzZmJ3TXpITmR6eC1lcnNWUXB1bzBndlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82NWJjZmYtYmEwMS00OThjLWI1NGQtODQwMjZiYzg1MmYw
LzEvdFUzZmJ3TXpITmR6eC1lcnNWUXB1bzBndlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMLvG00/
zvQ3UmBWCWyVSCQuKoI4tS6cuzwfe2LOEah1bgkj++z++4ueLw9biaMtWUk4xdmO
LI6liTSKOvzzq89X8Cl40yrAWWAaI1SeFs0dkXrl4ChROULhYPwqa8qMmgT1Xb/c
AuY94jZ/U4RcPLbfMv85QkfXL9cr7hzC3alwZPjAWbHQ6NPNYqi/PrEGHZNo0VrG
Pwn10AFJI814E5ZgDfySJ2YfoCg3t2DpL6/YTJyWynjfbjicQG9F7mfCZNHtHDYP
P0CG44hhoGb3yxUb/WS6xPPDg+veYKJuzBzGza/Gb+k6CM3YyMZHWP3a2Obb6EJq
hNe+XmhZUoxkrw==
-----END CERTIFICATE-----