Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File:                     4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier:          0cI8rDNczj8NtUsza0Vrgn3qxdfGoKb4qzvRpP2boKo=
Subject key identifier:   2A:F1:DF:B9:75:44:21:6B:F5:CF:82:25:02:ED:AC:FB:1D:96:F9:96
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer:       /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial:       01962FAB55E0BC35187F53B4F9F3C83E0BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: w6z6KeydIBhEe+ajWG+0ddqEpOMDfeY+/IuwkJCiMto=)
                          2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:e0:bc:35:18:7f:53:b4:f9:f3:c8:3e:0b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=2af1dfb97544216bf5cf822502edacfb1d96f996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:66:6b:90:83:71:18:b0:2b:02:28:1f:59:
                    3d:d3:da:5e:56:9d:41:0c:d6:28:74:86:3b:09:ef:
                    72:35:17:ee:3a:e2:b6:5c:9a:27:8f:5b:29:af:66:
                    07:d4:d0:09:bb:ca:8d:ca:ff:68:44:3b:57:19:85:
                    e2:37:e7:f3:52:f4:ac:6c:52:a3:78:45:81:51:05:
                    18:75:9e:d0:71:62:17:24:0e:45:2f:7d:86:69:41:
                    09:8d:e1:63:e8:0f:bb:7e:54:a6:56:f0:0f:c4:ab:
                    03:e6:94:b8:2d:c1:3a:2e:8a:a8:ad:56:ba:44:0d:
                    64:ba:d5:e3:3a:b0:d5:66:f3:91:c4:94:47:cf:ea:
                    21:e8:22:1c:63:b3:8d:bc:35:06:ed:be:bf:ec:75:
                    ac:78:37:bc:cd:4b:7e:d3:ab:89:9a:48:20:65:78:
                    56:b6:17:a4:0b:8f:af:be:2f:20:01:51:15:23:21:
                    1d:e6:52:98:c0:94:5d:77:d7:77:13:ac:ec:86:3b:
                    a2:2f:02:1d:a4:a1:97:bd:05:86:88:30:89:eb:d9:
                    90:f1:9e:da:6d:74:79:00:81:98:5e:68:34:cd:b0:
                    b6:db:9d:b6:f0:af:67:fd:04:ab:56:57:f1:9a:56:
                    ea:e4:b2:e7:c7:45:29:66:1f:d9:62:bb:82:39:2c:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:DF:B9:75:44:21:6B:F5:CF:82:25:02:ED:AC:FB:1D:96:F9:96
            X509v3 Authority Key Identifier:
                keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:5f:13:da:67:35:55:f5:e3:62:e0:2b:53:20:3d:c6:b2:
         69:86:29:9d:97:82:d6:ac:fe:e9:77:af:88:74:d9:79:78:f7:
         0e:50:ba:b4:74:c3:bc:cc:f2:52:af:12:2e:6b:20:42:af:3f:
         ab:5e:6f:37:e1:27:66:47:93:4d:b5:ae:36:2b:bc:27:27:63:
         0c:5d:63:a1:4b:23:75:a1:dd:bc:b6:8d:80:86:cc:ee:68:e9:
         e4:c8:8d:d0:67:9c:91:4a:80:52:03:c2:00:e8:8c:88:56:02:
         10:9e:f6:ae:26:b0:51:f9:8e:78:7e:0a:45:fa:10:1e:53:ba:
         a4:ae:10:29:cf:c1:e1:12:c0:82:38:f7:44:33:6b:61:bb:40:
         ab:d1:ce:f5:f8:b0:52:eb:81:3e:50:6b:3d:4d:d1:25:d2:af:
         5a:a5:d9:d6:51:8c:08:6e:37:34:81:5a:2a:e4:fc:bf:4b:c2:
         ab:ed:64:8a:ab:66:71:72:99:39:b7:78:b6:41:9b:ca:bd:88:
         fc:07:27:2a:bc:f5:d7:d0:c0:0d:8f:89:2d:ce:5c:a8:58:cb:
         63:05:07:3a:8b:6e:32:5c:e6:ed:3c:00:f7:dc:bb:c3:74:24:
         e0:7e:45:c7:dc:37:ac:63:5c:86:a7:b5:d1:9e:8b:f3:f3:a5:
         38:01:03:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1XgvDUYf1O0+fPIPgulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzcwY2MyZDIxZGE4YzJlYTY0ODE1MzRmNDhkYTQ5NWFh
ODRiZGQwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
EygyYWYxZGZiOTc1NDQyMTZiZjVjZjgyMjUwMmVkYWNmYjFkOTZmOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lhma5CDcRiwKwIoH1k909peVp1B
DNYodIY7Ce9yNRfuOuK2XJonj1spr2YH1NAJu8qNyv9oRDtXGYXiN+fzUvSsbFKj
eEWBUQUYdZ7QcWIXJA5FL32GaUEJjeFj6A+7flSmVvAPxKsD5pS4LcE6LoqorVa6
RA1kutXjOrDVZvORxJRHz+oh6CIcY7ONvDUG7b6/7HWseDe8zUt+06uJmkggZXhW
thekC4+vvi8gAVEVIyEd5lKYwJRdd9d3E6zshjuiLwIdpKGXvQWGiDCJ69mQ8Z7a
bXR5AIGYXmg0zbC225228K9n/QSrVlfxmlbq5LLnx0UpZh/ZYruCOSx8DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrx37l1RCFr9c+CJQLtrPsdlvmWMB8GA1UdIwQY
MBaAFODHDMLSHajC6mSBU09I2klaqEvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUt
MzI5YTk5ZjBmMWI1LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUtMzI5YTk5ZjBmMWI1
LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDJfE9pn
NVX142LgK1MgPcayaYYpnZeC1qz+6XeviHTZeXj3DlC6tHTDvMzyUq8SLmsgQq8/
q15vN+EnZkeTTbWuNiu8JydjDF1joUsjdaHdvLaNgIbM7mjp5MiN0GeckUqAUgPC
AOiMiFYCEJ72riawUfmOeH4KRfoQHlO6pK4QKc/B4RLAgjj3RDNrYbtAq9HO9fiw
UuuBPlBrPU3RJdKvWqXZ1lGMCG43NIFaKuT8v0vCq+1kiqtmcXKZObd4tkGbyr2I
/AcnKrz119DADY+JLc5cqFjLYwUHOotuMlzm7TwA99y7w3Qk4H5Fx9w3rGNchqe1
0Z6L8/OlOAED/Q==
-----END CERTIFICATE-----