Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          JHUYlTazjX5zDINScLot8Dp175dWiWoowT14+RLeP6w=
Subject key identifier:   DD:7D:9D:A7:29:D4:39:0E:AC:B7:90:83:0F:01:3D:3F:B9:87:95:97
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       01962F7482825D9D3ED72519C937BFC0B18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          1050
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: EPicUoUoCbaaSd9BNYRcoJzDaXObfd3nJ9eq+XeqJgU=)
                          2: VGm3ErGKm6tUo4YFp6q8zAkxW-A.roa (hash: mTwbwPysXWi/fjDRR83nehRSSzlqjgrfxfjlnGiXO3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:82:82:5d:9d:3e:d7:25:19:c9:37:bf:c0:b1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=dd7d9da729d4390eacb790830f013d3fb9879597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:8c:7e:8c:2f:61:c2:f9:8d:5f:3e:d0:44:
                    d1:e6:09:f2:35:c4:0a:e0:b9:0f:c5:49:7e:84:e7:
                    09:7a:23:ae:f4:e9:f0:72:7d:36:a4:ba:40:44:6b:
                    be:2b:c4:70:ce:49:6b:a6:64:9d:37:71:95:34:0f:
                    3c:37:69:d6:ff:81:ac:dd:05:f8:b6:ce:92:b0:f2:
                    b4:51:34:6a:bb:86:c2:ad:ce:f6:0f:53:b7:8e:94:
                    6d:d8:a1:a7:da:4a:49:e6:c9:b7:f0:b7:99:87:02:
                    07:49:2f:a6:39:fc:33:b3:f6:1d:4e:05:e5:07:ec:
                    81:0e:f5:cc:6f:e8:56:59:45:c1:71:46:53:8d:44:
                    7b:4c:8d:68:f7:8e:65:a2:90:5d:d6:13:25:9c:93:
                    31:cc:9d:98:b1:f2:22:93:04:6b:4f:2b:0c:bf:1d:
                    6e:e6:08:82:c7:84:37:34:dc:b4:0c:14:a1:88:16:
                    0b:05:84:93:fc:da:92:b8:0d:6a:97:3b:5f:d1:3d:
                    d4:c9:aa:a3:ac:0c:c6:4c:32:cc:a9:3b:03:40:12:
                    23:83:1f:de:67:1d:09:8b:12:40:52:02:3d:d6:cd:
                    7e:13:9f:36:fd:c1:94:44:44:54:da:12:66:5f:b3:
                    e1:91:01:65:3e:7e:eb:31:2c:9a:00:fd:4c:43:a5:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7D:9D:A7:29:D4:39:0E:AC:B7:90:83:0F:01:3D:3F:B9:87:95:97
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:83:87:e4:ef:ea:63:84:4e:84:12:18:7f:66:b5:04:31:
         55:dc:84:51:22:17:99:8e:38:59:ce:2a:a1:82:7f:63:f8:7d:
         d5:e6:b5:3c:e5:00:ae:00:53:4f:ee:2a:08:6e:ba:9c:2a:b8:
         de:fe:7d:89:cc:04:70:fa:2c:9a:ec:72:ad:85:ac:8d:8e:73:
         aa:05:24:72:a3:aa:ec:e2:b1:af:71:4c:6f:73:8b:be:d1:fc:
         57:b0:4c:e7:48:82:b8:73:d9:15:0e:4f:a0:38:d3:72:0b:f8:
         96:75:cc:3c:1b:69:43:52:4c:77:03:72:e3:f9:9e:ca:59:01:
         a4:f3:d8:1e:03:31:e9:ff:98:fd:19:6e:83:ba:4b:03:15:08:
         c9:a6:cd:05:6c:36:eb:e7:9a:ab:fe:05:21:4f:bd:68:f7:2f:
         22:21:77:58:18:4f:51:7e:fd:0e:52:f4:36:40:92:d6:31:99:
         16:14:2c:e4:56:cc:12:19:89:75:12:4d:8f:7f:76:41:6c:94:
         39:d7:47:b2:0b:f5:83:2b:db:5d:ea:8a:44:c2:7c:3b:e2:a0:
         f2:9a:77:0b:a2:02:b7:97:6f:72:e9:5f:4c:d6:2e:cf:d0:bc:
         c4:5e:22:4f:0e:37:ea:88:02:81:70:87:44:b5:b0:c1:77:7a:
         50:60:d5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIKCXZ0+1yUZyTe/wLGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjUwNDEzMTQwMTI2WhcNMjUwNDE0MTQwMTI2WjAzMTEwLwYDVQQD
EyhkZDdkOWRhNzI5ZDQzOTBlYWNiNzkwODMwZjAxM2QzZmI5ODc5NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHGMfowvYcL5jV8+0ETR5gnyNcQK
4LkPxUl+hOcJeiOu9Onwcn02pLpARGu+K8RwzklrpmSdN3GVNA88N2nW/4Gs3QX4
ts6SsPK0UTRqu4bCrc72D1O3jpRt2KGn2kpJ5sm38LeZhwIHSS+mOfwzs/YdTgXl
B+yBDvXMb+hWWUXBcUZTjUR7TI1o945lopBd1hMlnJMxzJ2YsfIikwRrTysMvx1u
5giCx4Q3NNy0DBShiBYLBYST/NqSuA1qlztf0T3UyaqjrAzGTDLMqTsDQBIjgx/e
Zx0JixJAUgI91s1+E582/cGURERU2hJmX7PhkQFlPn7rMSyaAP1MQ6V6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN19nacp1DkOrLeQgw8BPT+5h5WXMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVSDh+Tv
6mOEToQSGH9mtQQxVdyEUSIXmY44Wc4qoYJ/Y/h91ea1POUArgBTT+4qCG66nCq4
3v59icwEcPosmuxyrYWsjY5zqgUkcqOq7OKxr3FMb3OLvtH8V7BM50iCuHPZFQ5P
oDjTcgv4lnXMPBtpQ1JMdwNy4/meylkBpPPYHgMx6f+Y/Rlug7pLAxUIyabNBWw2
6+eaq/4FIU+9aPcvIiF3WBhPUX79DlL0NkCS1jGZFhQs5FbMEhmJdRJNj392QWyU
OddHsgv1gyvbXeqKRMJ8O+Kg8pp3C6ICt5dvculfTNYuz9C8xF4iTw436ogCgXCH
RLWwwXd6UGDVCw==
-----END CERTIFICATE-----