Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          RAWUhr8/QvEVDPff1SIU3Zo9fEwJJzGEMFH7Xf14ShA=
Subject key identifier:   09:CC:E0:4B:1E:F0:1A:6D:4B:2E:DA:8B:EF:09:E4:55:30:6D:52:AF
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       01962F74459EFFC275CFED6B514A3113702C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: AD0mVBimIwKwWz3+tn3n2aeFqJWVf7mKUXQDShXP/iA=)
                          2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:45:9e:ff:c2:75:cf:ed:6b:51:4a:31:13:70:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=09cce04b1ef01a6d4b2eda8bef09e455306d52af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:de:ec:5c:97:a3:33:01:27:a4:13:2e:52:
                    bd:fb:51:68:73:ee:4f:91:b8:e1:e4:92:3a:56:79:
                    18:e1:e5:9a:21:e9:c7:e2:2c:f7:af:8d:aa:30:53:
                    dd:ea:9d:03:13:4c:5e:f3:01:2f:9b:ad:2a:f6:c8:
                    6c:a5:9d:9e:29:b2:8e:c2:e2:c2:03:2f:9a:1b:4c:
                    1d:12:d3:f9:ff:f3:1a:6a:9a:6a:56:90:76:9d:89:
                    e9:06:93:3b:00:6a:fc:e8:2d:b2:c6:bd:4c:a8:d3:
                    3b:91:47:7c:7b:76:11:b9:a2:d4:2a:94:c6:1c:2f:
                    c3:27:17:42:c5:b5:9b:b5:ae:b0:78:78:a3:b0:05:
                    9b:cb:ef:aa:c3:24:df:86:90:c9:67:ac:5f:d7:91:
                    0e:3c:97:a0:b1:5c:36:88:2a:ee:47:14:12:e3:05:
                    95:4d:2e:8c:94:0f:a5:1c:64:30:23:57:18:e3:93:
                    61:d9:ff:36:6d:c2:6c:19:7c:1a:a0:4f:2b:34:f5:
                    cd:5b:59:df:63:80:82:90:f0:d1:bd:d1:59:4b:89:
                    bd:25:c0:af:d8:cb:42:bf:e2:d5:61:ea:2b:a4:f9:
                    af:3c:8a:ae:f9:29:76:09:95:a2:04:4e:3e:2f:1f:
                    0d:01:61:f8:6c:dd:18:ad:de:98:77:48:cd:6c:8a:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CC:E0:4B:1E:F0:1A:6D:4B:2E:DA:8B:EF:09:E4:55:30:6D:52:AF
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:89:8f:3b:ad:a5:ff:c7:98:14:e8:22:6c:8c:7b:5f:52:
         ee:79:a5:10:e5:22:73:18:7c:ba:14:6a:3a:63:a8:d7:1b:13:
         77:c2:3e:58:ae:4b:3e:24:9a:79:c9:b9:3b:06:3d:d7:ab:e0:
         df:0a:17:d5:62:df:06:45:b3:8d:3d:95:45:f4:47:aa:30:0c:
         d1:43:d6:f5:f4:60:d4:5c:55:fa:65:ee:7a:be:9d:2a:87:0c:
         0c:72:41:a5:db:1a:c6:aa:ff:6f:22:0c:29:95:ac:c5:21:66:
         93:73:b6:f3:e9:b7:45:d4:fe:0a:95:7f:04:b2:fb:2b:3a:66:
         96:da:3f:bb:15:a4:1f:fe:6e:31:df:e6:70:cd:95:cb:89:66:
         52:00:e9:cd:b2:a3:ef:16:72:be:05:05:ce:cf:1a:98:0a:46:
         c2:05:d9:2c:50:5d:1a:ee:02:32:75:eb:ec:3d:ac:70:29:3c:
         63:a2:50:fb:4a:fd:2d:c7:c0:90:b8:4d:9b:9e:9d:d5:bd:a3:
         5b:97:ef:b3:fd:24:27:da:bb:18:85:ae:0a:ac:e9:ad:94:0b:
         97:b1:aa:d7:7b:47:3e:6e:56:98:8f:15:ef:52:fa:09:bf:e0:
         a2:fa:36:49:07:19:7b:af:c2:d1:26:ac:17:3d:99:ae:59:85:
         f7:38:47:ba
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvdEWe/8J1z+1rUUoxE3AsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw
ZWQ0YzcwHhcNMjUwNDEzMTQwMTExWhcNMjUwNDE0MTQwMTExWjAzMTEwLwYDVQQD
EygwOWNjZTA0YjFlZjAxYTZkNGIyZWRhOGJlZjA5ZTQ1NTMwNmQ1MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnLe7FyXozMBJ6QTLlK9+1Foc+5P
kbjh5JI6VnkY4eWaIenH4iz3r42qMFPd6p0DE0xe8wEvm60q9shspZ2eKbKOwuLC
Ay+aG0wdEtP5//MaappqVpB2nYnpBpM7AGr86C2yxr1MqNM7kUd8e3YRuaLUKpTG
HC/DJxdCxbWbta6weHijsAWby++qwyTfhpDJZ6xf15EOPJegsVw2iCruRxQS4wWV
TS6MlA+lHGQwI1cY45Nh2f82bcJsGXwaoE8rNPXNW1nfY4CCkPDRvdFZS4m9JcCv
2MtCv+LVYeorpPmvPIqu+Sl2CZWiBE4+Lx8NAWH4bN0Yrd6Yd0jNbIq/pwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAnM4Ese8BptSy7ai+8J5FUwbVKvMB8GA1UdIwQY
MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2
LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3
YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXa2J
jzutpf/HmBToImyMe19S7nmlEOUicxh8uhRqOmOo1xsTd8I+WK5LPiSaecm5OwY9
16vg3woX1WLfBkWzjT2VRfRHqjAM0UPW9fRg1FxV+mXuer6dKocMDHJBpdsaxqr/
byIMKZWsxSFmk3O28+m3RdT+CpV/BLL7Kzpmlto/uxWkH/5uMd/mcM2Vy4lmUgDp
zbKj7xZyvgUFzs8amApGwgXZLFBdGu4CMnXr7D2scCk8Y6JQ+0r9LcfAkLhNm56d
1b2jW5fvs/0kJ9q7GIWuCqzprZQLl7Gq13tHPm5WmI8V71L6Cb/govo2SQcZe6/C
0SasFz2ZrlmF9zhHug==
-----END CERTIFICATE-----