Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File:                     x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier:          wvpvAuVfI6xBm9VKdmULm8EcvcNNOewpHDrzKkcTw9A=
Subject key identifier:   67:4C:4B:DA:7C:2A:04:6E:59:BB:D5:53:7C:10:BD:3D:16:AC:97:99
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       01962ECF9C34029148994BF229AF31C6F641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number:          0EDA
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
                          2: ER1ViB51eK3GNYidlFyIU5pz7pA.roa (hash: LuGe00nbcrMZ8l+kp9f/ed4A210HJbkXpcki+PgU3DU=)
                          3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
                          4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
                          5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
                          6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
                          7: q2LaCm30bgdcmQ_KQ1x35ingWH8.roa (hash: U37N/CIim8sCoTJAFcqUrio7zaI1taunVmGNkj25lQI=)
                          8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: TaQE2q1MQtRfHI/GbZz0vEvuGPINgUyW0GgmajoLkhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9c:34:02:91:48:99:4b:f2:29:af:31:c6:f6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=674c4bda7c2a046e59bbd5537c10bd3d16ac9799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:b8:70:93:2a:5b:56:ff:26:48:cd:e3:0d:
                    9c:05:01:cf:bf:5d:d0:78:88:c5:4d:df:13:db:df:
                    ae:cd:97:07:f3:5f:21:7c:09:b2:35:d3:df:ec:ae:
                    f8:4d:33:a8:6a:95:1b:19:1b:be:ec:a6:28:9b:e4:
                    87:2f:e9:91:42:8a:eb:4d:eb:04:7d:41:a6:60:37:
                    58:95:58:28:6f:2f:ce:9b:1b:66:d4:f4:56:ac:d5:
                    23:e4:75:8a:47:ca:c1:4e:25:3a:f8:51:28:15:20:
                    7a:44:11:78:f4:27:15:cc:ae:e9:e0:87:03:5e:30:
                    4d:21:11:ce:8c:3f:4d:ff:7a:05:1a:2b:7e:0d:7a:
                    b9:83:3f:d4:38:ce:85:59:0d:11:b4:f4:02:81:ee:
                    60:35:86:3b:50:5a:a7:64:b9:f1:cf:fc:1e:61:30:
                    ec:9d:5a:e8:14:f5:f9:b4:68:11:2c:a8:86:16:ae:
                    56:40:85:a6:93:da:ec:0c:92:1b:09:83:74:51:8e:
                    dd:0c:6f:7e:28:68:8c:44:49:b1:b6:85:d2:01:35:
                    17:4c:7c:d4:0e:65:3a:33:4b:5e:93:73:64:87:06:
                    23:ec:47:d3:c4:63:5a:4b:27:cf:91:43:82:b9:65:
                    bc:6f:98:eb:50:32:49:b4:18:a4:95:ef:d5:af:f7:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4C:4B:DA:7C:2A:04:6E:59:BB:D5:53:7C:10:BD:3D:16:AC:97:99
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:81:56:92:be:3d:a1:2e:27:58:51:ac:71:01:01:35:12:
         f1:c4:7f:97:83:a7:37:2e:ee:31:ca:3c:a8:4e:a9:9b:f3:ff:
         bd:84:a8:c5:c4:78:52:e7:43:6b:a6:40:a6:6d:b6:1e:57:9f:
         e8:7c:bf:b1:5b:78:2e:39:30:7e:9b:c1:b6:3c:14:6e:7b:bc:
         23:b5:84:6e:cb:40:cc:e1:5d:be:f2:08:4b:17:6c:dd:50:08:
         6b:36:81:5b:1c:8f:65:45:aa:8e:85:e8:7d:4c:04:1e:71:8f:
         95:7f:c6:83:24:ec:13:72:ea:5e:7f:7b:08:57:e4:7d:cd:26:
         3d:22:bc:c6:88:95:c3:20:df:c2:cf:ab:1d:87:de:f8:14:a1:
         c7:a4:dc:f9:62:a1:c0:18:bf:a8:eb:2d:30:65:62:b1:e6:4f:
         57:f0:bb:6c:ce:21:13:aa:58:47:31:34:82:8a:18:38:ac:72:
         dd:77:3c:8b:8d:da:06:61:62:00:d4:0e:12:c3:0d:47:da:d0:
         58:14:70:a4:0e:2b:43:60:07:44:34:78:fe:94:7c:df:3f:7b:
         cf:b7:c6:70:4b:00:f5:65:4f:f4:08:5c:50:e6:a5:42:3d:f3:
         89:18:c4:6c:31:0d:9c:43:9b:7e:5b:f9:b6:25:00:17:67:f7:
         0f:9e:ab:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5w0ApFImUvyKa8xxvZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
Eyg2NzRjNGJkYTdjMmEwNDZlNTliYmQ1NTM3YzEwYmQzZDE2YWM5Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2a4cJMqW1b/JkjN4w2cBQHPv13Q
eIjFTd8T29+uzZcH818hfAmyNdPf7K74TTOoapUbGRu+7KYom+SHL+mRQorrTesE
fUGmYDdYlVgoby/Omxtm1PRWrNUj5HWKR8rBTiU6+FEoFSB6RBF49CcVzK7p4IcD
XjBNIRHOjD9N/3oFGit+DXq5gz/UOM6FWQ0RtPQCge5gNYY7UFqnZLnxz/weYTDs
nVroFPX5tGgRLKiGFq5WQIWmk9rsDJIbCYN0UY7dDG9+KGiMREmxtoXSATUXTHzU
DmU6M0tek3NkhwYj7EfTxGNaSyfPkUOCuWW8b5jrUDJJtBikle/Vr/dOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdMS9p8KgRuWbvVU3wQvT0WrJeZMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDaBVpK+
PaEuJ1hRrHEBATUS8cR/l4OnNy7uMco8qE6pm/P/vYSoxcR4UudDa6ZApm22Hlef
6Hy/sVt4LjkwfpvBtjwUbnu8I7WEbstAzOFdvvIISxds3VAIazaBWxyPZUWqjoXo
fUwEHnGPlX/GgyTsE3LqXn97CFfkfc0mPSK8xoiVwyDfws+rHYfe+BShx6Tc+WKh
wBi/qOstMGViseZPV/C7bM4hE6pYRzE0gooYOKxy3Xc8i43aBmFiANQOEsMNR9rQ
WBRwpA4rQ2AHRDR4/pR83z97z7fGcEsA9WVP9AhcUOalQj3ziRjEbDENnEObflv5
tiUAF2f3D56rEA==
-----END CERTIFICATE-----