Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File:                     lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier:          GZDa4QS69TwiiV2Jvch+526HjHacOhd1D7YB966rVtQ=
Subject key identifier:   9C:86:C9:C6:19:E8:A6:DA:59:FF:FE:91:E3:02:C3:72:4F:6F:D7:89
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer:       /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial:       01962F3D90F64E21B9A32050667C49BBDA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number:          0379
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
                          2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: xp+z9Ace2Dl2HHLxd00CR2jj1xbwnOyKSFl1he6/VKA=)
                          3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:f6:4e:21:b9:a3:20:50:66:7c:49:bb:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=9c86c9c619e8a6da59fffe91e302c3724f6fd789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:b5:13:27:7d:da:3c:32:8f:e3:56:14:4e:
                    d5:b1:96:2f:fd:c3:98:39:8e:66:ca:06:cf:c0:fc:
                    2d:27:17:97:67:22:8d:8a:b5:e3:3b:26:c3:d9:05:
                    f4:ba:cf:c5:99:4d:cc:25:24:3d:31:8e:8f:a5:93:
                    73:2e:af:04:ca:c2:ee:a1:cd:5c:f0:ac:cd:03:a0:
                    14:14:a2:b3:23:97:3c:d5:de:ef:11:5f:46:c2:c1:
                    47:be:15:59:ff:2a:7e:16:ed:1e:8f:c5:9a:a5:af:
                    13:92:17:97:b2:62:41:fa:82:7d:4e:76:df:ac:83:
                    01:bb:ae:eb:c6:ea:73:95:d6:2a:32:51:a1:49:3a:
                    02:ba:a2:b0:ba:d9:6e:c6:19:94:31:05:f2:02:cd:
                    01:36:f8:36:22:10:85:ab:ba:c4:66:6b:64:8a:e3:
                    2e:99:17:8c:6d:39:b5:f8:6a:7c:45:90:68:88:80:
                    84:55:61:ce:18:ec:7c:ea:c2:df:72:35:8d:d3:31:
                    b3:f8:8c:63:90:54:ef:ba:98:be:2b:94:b7:ab:82:
                    c5:04:78:9d:0b:f6:49:e4:04:c5:b8:43:4f:1d:e5:
                    f1:34:f4:f9:7c:fa:7a:9b:33:1e:8b:8b:f8:dc:0a:
                    65:16:3b:ae:1d:19:e8:82:fc:49:5d:ca:42:58:09:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:C9:C6:19:E8:A6:DA:59:FF:FE:91:E3:02:C3:72:4F:6F:D7:89
            X509v3 Authority Key Identifier:
                keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:ee:34:a2:38:2e:11:5f:42:6a:f8:ec:98:cc:d4:f2:af:
         a3:89:c4:16:d6:11:ca:99:e6:db:07:70:8c:cf:7f:2a:1f:ed:
         39:80:e4:2d:1a:33:16:77:df:22:9f:6b:03:7c:1c:22:0a:bb:
         f1:61:19:88:89:19:8d:8f:06:46:ba:e5:f5:68:61:09:64:c6:
         c3:52:cb:30:e7:ee:42:1e:5b:32:0c:02:c3:ac:3c:31:69:be:
         e9:60:03:de:55:b5:12:a9:39:03:c0:2c:cc:23:d0:e9:8d:24:
         ac:fc:75:a5:b7:c0:02:7f:d0:2c:f7:b0:62:fc:aa:de:22:d2:
         a3:e6:fe:c9:3a:ff:df:c2:f6:b0:dc:42:4b:73:a7:6c:ec:66:
         91:ed:7f:ea:a6:d9:8f:3f:c8:61:7d:5c:34:b1:2f:4c:2a:71:
         0a:65:dc:ac:99:ef:69:94:fe:a6:50:2e:26:ce:13:c5:95:44:
         66:ab:8b:c7:5e:fb:56:05:f3:63:1f:4c:d9:fb:01:46:7c:b5:
         f7:91:45:85:39:08:3b:b0:05:0a:5f:a0:84:1e:9a:74:77:c5:
         6e:c3:4d:43:7a:3a:2f:c9:41:48:9e:2d:cf:b8:94:5c:b3:5d:
         d7:ba:af:42:96:5a:75:57:c9:9f:87:e0:63:78:f1:53:8d:ea:
         ba:8f:fc:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZD2TiG5oyBQZnxJu9ozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi
MjAwNjMwHhcNMjUwNDEzMTMwMTI1WhcNMjUwNDE0MTMwMTI1WjAzMTEwLwYDVQQD
Eyg5Yzg2YzljNjE5ZThhNmRhNTlmZmZlOTFlMzAyYzM3MjRmNmZkNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j61Eyd92jwyj+NWFE7VsZYv/cOY
OY5mygbPwPwtJxeXZyKNirXjOybD2QX0us/FmU3MJSQ9MY6PpZNzLq8EysLuoc1c
8KzNA6AUFKKzI5c81d7vEV9GwsFHvhVZ/yp+Fu0ej8Wapa8TkheXsmJB+oJ9Tnbf
rIMBu67rxupzldYqMlGhSToCuqKwutluxhmUMQXyAs0BNvg2IhCFq7rEZmtkiuMu
mReMbTm1+Gp8RZBoiICEVWHOGOx86sLfcjWN0zGz+IxjkFTvupi+K5S3q4LFBHid
C/ZJ5ATFuENPHeXxNPT5fPp6mzMei4v43AplFjuuHRnogvxJXcpCWAlhXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyGycYZ6KbaWf/+keMCw3JPb9eJMB8GA1UdIwQY
MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt
ZjkwYWU5OTY2NDI4LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4
LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVruNKI4
LhFfQmr47JjM1PKvo4nEFtYRypnm2wdwjM9/Kh/tOYDkLRozFnffIp9rA3wcIgq7
8WEZiIkZjY8GRrrl9WhhCWTGw1LLMOfuQh5bMgwCw6w8MWm+6WAD3lW1Eqk5A8As
zCPQ6Y0krPx1pbfAAn/QLPewYvyq3iLSo+b+yTr/38L2sNxCS3OnbOxmke1/6qbZ
jz/IYX1cNLEvTCpxCmXcrJnvaZT+plAuJs4TxZVEZquLx177VgXzYx9M2fsBRny1
95FFhTkIO7AFCl+ghB6adHfFbsNNQ3o6L8lBSJ4tz7iUXLNd17qvQpZadVfJn4fg
Y3jxU43quo/8dw==
-----END CERTIFICATE-----