Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File:                     sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier:          PKb0c+I1YvbQhNHE+qIkbdyVbKw4XcVPEoAtquIItUs=
Subject key identifier:   95:A7:61:C4:B8:9B:0D:1D:56:0F:E1:40:30:14:91:EC:70:90:91:C2
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer:       /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial:       01962F3D7C5C571F13A92803008F2B2D0E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number:          0482
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
                          2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: djSR+8Hi/202+CGETcDT+8941Ykkv1Xsj9/H1tS6LoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:5c:57:1f:13:a9:28:03:00:8f:2b:2d:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=95a761c4b89b0d1d560fe140301491ec709091c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:5c:b7:90:68:9f:dd:9d:ef:ce:7f:a3:f7:
                    05:e2:55:32:46:67:86:9b:04:14:e7:a0:f2:35:20:
                    b5:71:6f:01:43:a2:e5:1a:34:b0:ed:d5:36:db:65:
                    1e:18:1f:1c:9a:0d:4b:e4:45:61:48:d6:a5:13:03:
                    aa:b0:83:4f:73:da:f6:d5:ab:52:da:46:7b:5e:2c:
                    a3:9a:27:19:9b:33:f5:18:32:9a:91:f4:28:74:ee:
                    1c:bc:ce:f2:44:78:20:46:31:80:03:29:56:77:70:
                    19:f0:97:ba:f9:97:09:dc:7c:56:21:91:7b:ea:f4:
                    0a:d5:54:70:84:53:68:5f:2d:b2:02:e0:c0:09:68:
                    6b:43:42:73:db:be:86:93:c4:da:ec:0e:33:82:52:
                    ab:7d:ec:af:2f:40:93:a0:e7:73:79:a6:8e:09:94:
                    1e:e8:5a:72:46:28:b2:07:b9:d6:ab:d3:d5:22:fc:
                    a5:eb:80:59:5d:49:63:95:0b:2a:d5:a3:af:ae:21:
                    f8:9f:ec:90:dc:c8:fb:70:f6:8e:dd:52:f5:bf:e0:
                    20:2e:c2:05:9f:03:66:6b:6e:11:82:44:3d:a9:b8:
                    d4:b8:c8:30:4b:82:a5:de:52:17:19:a4:d4:58:9a:
                    31:75:b8:04:07:7f:51:9e:b8:9d:18:4d:46:d5:96:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A7:61:C4:B8:9B:0D:1D:56:0F:E1:40:30:14:91:EC:70:90:91:C2
            X509v3 Authority Key Identifier:
                keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:11:a9:0d:67:9d:4b:45:66:1f:5f:92:c2:84:e9:72:6a:
         f4:76:cb:71:7f:d9:36:cd:03:38:e5:38:e5:e9:69:f9:9c:75:
         2d:25:0f:fc:55:66:37:5c:6d:64:24:f1:f2:43:7d:79:a6:b3:
         36:4f:d5:6f:cc:b9:b0:1c:2d:0d:e8:d3:02:42:42:4e:b4:df:
         ce:c4:47:b3:1f:ec:07:17:29:02:a2:a2:af:90:ec:9d:26:a9:
         7e:46:11:e9:cd:b5:b8:fa:c8:25:89:cf:36:8b:62:82:2d:c7:
         22:db:08:5d:5e:78:64:65:a4:66:0e:e6:3c:04:fe:01:ba:e6:
         3c:97:14:96:62:63:ac:10:63:ed:6b:e1:ff:d6:01:06:66:d6:
         a7:27:25:7c:9f:b8:48:8d:4f:af:fd:2b:5d:01:8b:24:c3:8d:
         0d:06:d8:c0:34:f7:ab:f5:b8:55:dd:ed:c0:b9:11:80:d3:09:
         d2:b5:5c:b8:ff:ec:5e:dd:19:c4:8a:8e:f4:55:2f:0b:c2:64:
         02:fe:8f:22:6b:12:54:6d:85:69:37:de:68:c3:47:8e:72:fc:
         3c:3c:4e:80:4d:aa:72:2e:6b:8a:ef:15:e9:7f:4a:4b:ed:6b:
         e6:f0:34:ea:81:f6:42:ec:a8:71:9b:05:fd:53:4d:cf:88:6e:
         6b:8f:5e:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXxcVx8TqSgDAI8rLQ46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGJmMmM2YTlmMWE0MmI4YWNlZTAxMjU5ZjkxZjUxNDRh
YjhhZjUwHhcNMjUwNDEzMTMwMTIwWhcNMjUwNDE0MTMwMTIwWjAzMTEwLwYDVQQD
Eyg5NWE3NjFjNGI4OWIwZDFkNTYwZmUxNDAzMDE0OTFlYzcwOTA5MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteZct5Bon92d785/o/cF4lUyRmeG
mwQU56DyNSC1cW8BQ6LlGjSw7dU222UeGB8cmg1L5EVhSNalEwOqsINPc9r21atS
2kZ7XiyjmicZmzP1GDKakfQodO4cvM7yRHggRjGAAylWd3AZ8Je6+ZcJ3HxWIZF7
6vQK1VRwhFNoXy2yAuDACWhrQ0Jz276Gk8Ta7A4zglKrfeyvL0CToOdzeaaOCZQe
6FpyRiiyB7nWq9PVIvyl64BZXUljlQsq1aOvriH4n+yQ3Mj7cPaO3VL1v+AgLsIF
nwNma24RgkQ9qbjUuMgwS4Kl3lIXGaTUWJoxdbgEB39RnridGE1G1ZbqpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWnYcS4mw0dVg/hQDAUkexwkJHCMB8GA1UdIwQY
MBaAFLEL8sap8aQris7gEln5H1FEq4r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQt
MjUxYTljODY0ZDI2LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQtMjUxYTljODY0ZDI2
LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjsRqQ1n
nUtFZh9fksKE6XJq9HbLcX/ZNs0DOOU45elp+Zx1LSUP/FVmN1xtZCTx8kN9eaaz
Nk/Vb8y5sBwtDejTAkJCTrTfzsRHsx/sBxcpAqKir5DsnSapfkYR6c21uPrIJYnP
Notigi3HItsIXV54ZGWkZg7mPAT+AbrmPJcUlmJjrBBj7Wvh/9YBBmbWpyclfJ+4
SI1Pr/0rXQGLJMONDQbYwDT3q/W4Vd3twLkRgNMJ0rVcuP/sXt0ZxIqO9FUvC8Jk
Av6PImsSVG2FaTfeaMNHjnL8PDxOgE2qci5riu8V6X9KS+1r5vA06oH2QuyocZsF
/VNNz4hua49eDg==
-----END CERTIFICATE-----