Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          +pXX6C3Ok3P2I0wz+bZowBBNjHDa3DDzC4H1qkEEpLQ=
Subject key identifier:   AB:07:F2:57:9D:95:1F:94:5F:B9:72:64:F1:C9:52:04:F1:CE:EC:1B
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       01962E6218A87D1C7DA2A9A137A463C6AE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          14C4
Signing time:             Sun 13 Apr 2025 09:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:42 +0000
Files and hashes:         1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: 6Hryk1rsjD174UOXy1sJ6O1fnbims2w0vHUKg/LfMBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:18:a8:7d:1c:7d:a2:a9:a1:37:a4:63:c6:ae:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Apr 13 09:01:42 2025 GMT
            Not After : Apr 14 09:01:42 2025 GMT
        Subject: CN=ab07f2579d951f945fb97264f1c95204f1ceec1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:d2:e2:2e:28:2c:79:b9:fa:ef:c6:78:ce:
                    c4:77:46:8c:10:f6:58:7f:1d:b5:ea:c9:2b:6a:aa:
                    46:9b:54:93:a9:72:20:16:15:7c:b2:eb:af:c7:40:
                    e0:cd:58:37:52:28:25:6f:71:65:42:4d:3d:5c:67:
                    c3:3d:98:9b:1a:d3:e2:1b:9a:4a:bc:20:fe:ec:f9:
                    92:7e:73:ca:11:26:6b:df:85:02:6b:ec:9b:da:0f:
                    47:80:28:8e:23:13:db:72:f9:c9:78:3f:43:ac:b8:
                    0f:c6:d9:ae:0d:ce:23:3b:ae:1d:c8:ea:68:17:ab:
                    53:16:b3:0e:18:1f:1e:e1:a6:fc:cc:58:73:c9:77:
                    91:71:73:6e:de:22:33:0b:03:bf:c1:e9:02:5c:f0:
                    0a:68:8c:75:60:67:eb:5f:05:e9:7e:e3:21:79:be:
                    d5:e9:5c:dd:3f:75:c0:6a:97:53:61:cf:36:1c:b2:
                    ca:68:3b:d7:69:69:32:42:77:5d:1f:2d:59:40:99:
                    51:76:5e:fb:4e:02:33:70:c3:97:c5:d0:f9:28:57:
                    28:6c:96:0f:dd:0b:5b:05:cd:eb:bb:ee:d2:e9:93:
                    eb:76:2a:a4:65:2f:be:b3:88:88:df:ca:e1:c1:64:
                    d7:57:50:cd:e8:00:c8:b3:f4:46:c7:44:02:d8:cf:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:F2:57:9D:95:1F:94:5F:B9:72:64:F1:C9:52:04:F1:CE:EC:1B
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:de:dc:87:72:58:d2:2b:53:fd:c7:2f:6a:76:8a:0b:0f:91:
         8f:a4:70:d0:e0:2e:b6:ef:52:1d:2d:d5:07:b5:e6:71:f8:b5:
         10:5e:f1:24:1c:1f:61:44:bc:24:4e:94:8c:96:80:4a:30:42:
         0c:f7:c8:73:0b:66:98:16:c4:11:31:00:8a:f2:ea:86:9c:bd:
         18:ec:23:f8:11:44:94:80:5e:3e:e3:2b:c1:b5:43:bf:03:e6:
         06:d4:c7:28:94:09:ed:17:21:d6:ee:81:df:b3:c7:ab:6a:b4:
         60:3a:9f:90:ac:88:ee:da:5f:e4:b6:52:b9:93:94:e2:31:ae:
         30:b0:c8:c7:d6:63:99:00:df:c2:fc:64:8a:d5:5e:b8:b5:03:
         0e:8f:c7:ec:83:ba:46:3d:2d:0d:dd:c7:82:7e:75:d8:1d:4c:
         86:38:a2:4f:8a:38:dd:f6:23:cb:39:d9:57:a0:5c:7c:56:58:
         a0:a6:3d:e2:81:9a:2d:dc:89:71:db:00:bd:72:8c:16:49:b6:
         c6:2b:e7:be:18:97:9d:c4:9c:d1:19:a3:64:84:a3:80:18:1f:
         8a:72:0e:3b:4d:47:1e:a2:83:07:25:d1:01:19:e7:e4:62:5a:
         3b:71:38:40:10:0a:f1:08:bc:41:06:ff:8a:89:f6:b5:65:06:
         a7:ee:e1:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYhiofRx9oqmhN6Rjxq50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjUwNDEzMDkwMTQyWhcNMjUwNDE0MDkwMTQyWjAzMTEwLwYDVQQD
EyhhYjA3ZjI1NzlkOTUxZjk0NWZiOTcyNjRmMWM5NTIwNGYxY2VlYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzfS4i4oLHm5+u/GeM7Ed0aMEPZY
fx216skraqpGm1STqXIgFhV8suuvx0DgzVg3Uiglb3FlQk09XGfDPZibGtPiG5pK
vCD+7PmSfnPKESZr34UCa+yb2g9HgCiOIxPbcvnJeD9DrLgPxtmuDc4jO64dyOpo
F6tTFrMOGB8e4ab8zFhzyXeRcXNu3iIzCwO/wekCXPAKaIx1YGfrXwXpfuMheb7V
6VzdP3XAapdTYc82HLLKaDvXaWkyQnddHy1ZQJlRdl77TgIzcMOXxdD5KFcobJYP
3QtbBc3ru+7S6ZPrdiqkZS++s4iI38rhwWTXV1DN6ADIs/RGx0QC2M/QxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsH8ledlR+UX7lyZPHJUgTxzuwbMB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ97ch3JY
0itT/ccvanaKCw+Rj6Rw0OAutu9SHS3VB7Xmcfi1EF7xJBwfYUS8JE6UjJaASjBC
DPfIcwtmmBbEETEAivLqhpy9GOwj+BFElIBePuMrwbVDvwPmBtTHKJQJ7Rch1u6B
37PHq2q0YDqfkKyI7tpf5LZSuZOU4jGuMLDIx9ZjmQDfwvxkitVeuLUDDo/H7IO6
Rj0tDd3Hgn512B1MhjiiT4o43fYjyznZV6BcfFZYoKY94oGaLdyJcdsAvXKMFkm2
xivnvhiXncSc0RmjZISjgBgfinIOO01HHqKDByXRARnn5GJaO3E4QBAK8Qi8QQb/
ion2tWUGp+7hFw==
-----END CERTIFICATE-----