Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          ICcMr50rOT7Z1PXEukn9a2FBZ8jlrZ2VNV1eQGy9x8k=
Subject key identifier:   7D:58:46:86:91:96:83:F6:49:D3:8D:45:4E:31:9F:F4:4B:B0:C5:D6
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       01962E61DFD9F6DF6ABBE935829627ABC0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          123B
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 0DnutWSVbHG41WufBwPWhJw87ds.roa (hash: 1YNOkkulspXYUzCbwSGNl/61H76L07o3/flJXpC+uII=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: 9iymIbYsGrBRlfPxBKL5ItoDY+btGkcOZY5Kq/UEMw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:d9:f6:df:6a:bb:e9:35:82:96:27:ab:c0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=7d584686919683f649d38d454e319ff44bb0c5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:8e:49:72:2f:67:e5:05:9b:2e:a2:fb:68:
                    a4:4f:02:4a:ec:61:8c:9e:3a:60:0e:cc:02:54:6f:
                    3f:01:b6:d7:ee:1a:28:15:07:bc:a4:0c:ed:cd:f3:
                    98:e7:9f:b3:29:79:0f:6a:82:54:2e:b1:a0:13:ad:
                    43:8a:4f:49:a9:b1:17:84:a1:50:25:10:b5:52:f4:
                    47:cf:f9:a7:5e:5f:b8:27:3b:ed:eb:b1:81:a9:36:
                    7c:9a:38:34:37:d2:1e:f9:6a:c1:0f:99:d8:37:9b:
                    9c:c7:32:f4:41:bd:4b:1f:c4:1f:17:f1:5c:d9:e5:
                    b8:70:20:a8:8a:4d:43:79:c1:be:fd:ce:19:6d:74:
                    cb:2d:01:99:ee:f4:f0:35:63:c2:b9:cf:4b:5f:a9:
                    86:61:67:22:3c:07:69:d9:90:d7:53:c9:c7:f5:d6:
                    99:23:55:cc:c9:bb:41:c0:de:0c:1e:50:a5:d5:84:
                    a8:70:e8:04:c9:21:fd:49:5f:94:0b:96:7a:12:8e:
                    26:b5:8e:10:cf:88:57:c6:d4:01:d7:fd:0d:f7:f7:
                    17:66:97:4f:03:4c:da:02:5d:8e:ea:ad:9b:07:7b:
                    bf:30:da:a0:ba:f1:d9:af:62:0f:0a:0d:30:50:47:
                    bc:3d:31:7a:09:24:c1:cf:56:43:c5:af:ae:ac:ec:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:46:86:91:96:83:F6:49:D3:8D:45:4E:31:9F:F4:4B:B0:C5:D6
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:50:01:41:98:72:1b:cd:77:fe:c9:aa:b3:76:6f:c6:cf:c4:
         91:36:4c:77:bf:af:04:04:16:f3:ec:6e:d2:f5:09:d7:33:e2:
         61:e1:b0:17:9e:c4:be:58:2c:70:dd:e8:85:ae:93:ce:25:94:
         ee:4b:90:30:30:4f:26:52:90:a9:80:d1:36:67:ec:d7:c7:3d:
         0e:80:3f:68:b1:5b:68:36:1c:6e:a3:1b:0f:6b:81:9b:ae:11:
         b4:ab:28:16:4f:fa:7b:6b:80:cc:59:8d:b9:e8:16:0c:89:37:
         fe:a0:dc:39:49:62:ba:72:ba:c5:fb:65:6e:10:2f:9f:e2:7e:
         a8:0d:4e:9e:5e:7c:ab:56:e4:ab:75:a7:9c:82:b9:1d:b6:37:
         be:5e:9d:5e:c0:94:5e:06:14:2f:68:b4:22:6e:ec:bb:78:b2:
         b8:55:7a:8a:48:04:af:3f:16:fa:39:a3:8e:0e:2c:01:c9:ac:
         98:52:1c:01:49:dd:c1:c3:ac:77:6e:b9:25:6d:73:12:c7:1e:
         5a:44:89:f1:e3:84:63:72:c5:15:bf:6c:02:cd:43:79:f2:59:
         56:79:cd:16:8e:30:d2:43:21:76:e2:cb:ff:3b:a1:17:60:b5:
         a4:21:b3:1f:f4:9c:98:0d:61:61:50:2a:36:08:3d:45:88:8b:
         83:96:47:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYd/Z9t9qu+k1gpYnq8DLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx
YzUyOWIwHhcNMjUwNDEzMDkwMTI4WhcNMjUwNDE0MDkwMTI4WjAzMTEwLwYDVQQD
Eyg3ZDU4NDY4NjkxOTY4M2Y2NDlkMzhkNDU0ZTMxOWZmNDRiYjBjNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PmOSXIvZ+UFmy6i+2ikTwJK7GGM
njpgDswCVG8/AbbX7hooFQe8pAztzfOY55+zKXkPaoJULrGgE61Dik9JqbEXhKFQ
JRC1UvRHz/mnXl+4Jzvt67GBqTZ8mjg0N9Ie+WrBD5nYN5ucxzL0Qb1LH8QfF/Fc
2eW4cCCoik1DecG+/c4ZbXTLLQGZ7vTwNWPCuc9LX6mGYWciPAdp2ZDXU8nH9daZ
I1XMybtBwN4MHlCl1YSocOgEySH9SV+UC5Z6Eo4mtY4Qz4hXxtQB1/0N9/cXZpdP
A0zaAl2O6q2bB3u/MNqguvHZr2IPCg0wUEe8PTF6CSTBz1ZDxa+urOwlnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1YRoaRloP2SdONRU4xn/RLsMXWMB8GA1UdIwQY
MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt
NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1
LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1ABQZhy
G813/smqs3Zvxs/EkTZMd7+vBAQW8+xu0vUJ1zPiYeGwF57EvlgscN3oha6TziWU
7kuQMDBPJlKQqYDRNmfs18c9DoA/aLFbaDYcbqMbD2uBm64RtKsoFk/6e2uAzFmN
uegWDIk3/qDcOUliunK6xftlbhAvn+J+qA1Onl58q1bkq3WnnIK5HbY3vl6dXsCU
XgYUL2i0Im7su3iyuFV6ikgErz8W+jmjjg4sAcmsmFIcAUndwcOsd265JW1zEsce
WkSJ8eOEY3LFFb9sAs1DefJZVnnNFo4w0kMhduLL/zuhF2C1pCGzH/ScmA1hYVAq
Ngg9RYiLg5ZHDw==
-----END CERTIFICATE-----