Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File:                     SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier:          +u+mpibXtpQ6RK6TTNBOB6lFZSnfY46Y8CJyJo007ck=
Subject key identifier:   C0:BC:1B:47:34:94:CA:F5:B7:9F:B6:15:AA:E4:36:CE:12:62:BE:DD
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer:       /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial:       01962ECFA10AAA694D399196F05A24634150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number:          0526
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
                          2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: EqmkZHQbAdRXao3Pp/81NrUn2Sq2YTYJ5YkH54bZSHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a1:0a:aa:69:4d:39:91:96:f0:5a:24:63:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=c0bc1b473494caf5b79fb615aae436ce1262bedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:80:8d:32:2f:c9:9d:fc:6b:d0:a2:f8:df:
                    51:3b:fa:e2:7d:5a:46:27:0e:e7:b8:41:23:10:94:
                    ae:88:a9:50:58:63:2b:dd:fa:8e:53:7e:02:73:fe:
                    f3:f2:a4:3e:84:f1:34:47:85:bb:20:2e:8a:c6:4f:
                    dd:96:b3:ca:91:1d:36:ea:6b:d7:da:28:4c:a1:00:
                    10:c6:44:1f:fc:be:09:18:45:36:0f:36:9c:05:28:
                    2b:1a:07:4d:01:eb:2f:8b:a4:30:03:22:54:79:97:
                    48:99:e0:45:db:f2:fc:15:61:c7:f8:b6:3c:e2:55:
                    a8:53:c4:82:2f:0d:9f:db:77:a6:0f:44:b5:3f:48:
                    0f:6b:ec:39:19:1c:56:d1:17:3b:97:bb:a9:17:c4:
                    3e:cf:be:fb:5a:64:af:3c:90:44:5c:5f:cc:25:e8:
                    73:43:dd:b6:36:35:a1:26:26:17:72:0c:3d:45:eb:
                    aa:b8:7d:fc:74:06:53:fc:1c:34:94:82:ac:7e:79:
                    2c:43:6c:6f:46:c7:a4:16:91:11:11:8b:9f:fd:a4:
                    f2:8f:52:e1:91:18:7f:f2:3d:01:6d:39:99:e3:03:
                    63:11:ee:b5:d8:21:08:e5:94:0d:f1:dc:0c:cb:9d:
                    cc:f7:4e:ef:44:c2:c1:7e:6b:92:32:d5:90:75:1f:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:1B:47:34:94:CA:F5:B7:9F:B6:15:AA:E4:36:CE:12:62:BE:DD
            X509v3 Authority Key Identifier:
                keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:17:d5:59:d3:06:42:49:01:70:bf:d0:fa:0f:0c:66:de:5c:
         10:2b:6d:69:27:54:e1:a9:c5:2d:a7:e9:cf:d9:c1:58:a2:07:
         2f:e4:e3:6d:6c:33:6c:e5:df:98:ec:f3:05:95:54:fd:bb:88:
         c5:15:22:7d:f8:b1:99:14:f0:eb:4f:3c:9a:26:13:9a:4a:e6:
         8b:58:5b:73:48:4c:a6:29:48:a3:f2:97:f1:10:c9:1c:89:8f:
         91:c3:d0:6d:95:a0:76:5e:15:1b:d8:fc:21:35:12:09:77:9e:
         fb:81:b5:d6:04:78:2f:17:09:83:ad:76:f7:cf:65:26:68:e7:
         08:5b:13:cf:44:b1:fc:79:84:c8:c1:e1:80:26:4b:b2:63:6e:
         cd:64:6a:3f:e5:01:11:30:0b:ca:3f:75:99:fc:78:c9:6b:d3:
         42:98:34:80:bd:aa:d0:e2:3a:9e:ca:75:0c:e2:0f:24:f8:11:
         2e:3d:4e:f6:3f:63:5e:ed:a3:12:7e:c1:1e:07:c7:0c:11:7f:
         b8:b3:3b:4b:f8:01:f8:c9:20:92:a6:0d:6c:3d:81:73:b5:cc:
         9f:6f:ba:3f:ed:25:ca:12:1f:10:9f:06:8c:f6:9b:7b:d3:0e:
         61:04:2a:45:4e:9d:98:e6:9c:f6:72:18:d8:ed:fb:ce:02:aa:
         67:b2:b1:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6EKqmlNOZGW8FokY0FQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzhhODY0MWNlNzg1YmUzNDY4NTAzMDUyNzcyM2U1ZmRj
ZTU2MmEwHhcNMjUwNDEzMTEwMTIxWhcNMjUwNDE0MTEwMTIxWjAzMTEwLwYDVQQD
EyhjMGJjMWI0NzM0OTRjYWY1Yjc5ZmI2MTVhYWU0MzZjZTEyNjJiZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNeAjTIvyZ38a9Ci+N9RO/rifVpG
Jw7nuEEjEJSuiKlQWGMr3fqOU34Cc/7z8qQ+hPE0R4W7IC6Kxk/dlrPKkR026mvX
2ihMoQAQxkQf/L4JGEU2DzacBSgrGgdNAesvi6QwAyJUeZdImeBF2/L8FWHH+LY8
4lWoU8SCLw2f23emD0S1P0gPa+w5GRxW0Rc7l7upF8Q+z777WmSvPJBEXF/MJehz
Q922NjWhJiYXcgw9ReuquH38dAZT/Bw0lIKsfnksQ2xvRsekFpEREYuf/aTyj1Lh
kRh/8j0BbTmZ4wNjEe612CEI5ZQN8dwMy53M907vRMLBfmuSMtWQdR932wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC8G0c0lMr1t5+2FarkNs4SYr7dMB8GA1UdIwQY
MBaAFEl4qGQc54W+NGhQMFJ3I+X9zlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYt
MjFiYzQ4ZWYxNjYwLzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wOTNmY2ItZmU3Ny00NDliLWExYWYtMjFiYzQ4ZWYxNjYw
LzEvU1hpb1pCem5oYjQwYUZBd1VuY2o1ZjNPVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRfVWdMG
QkkBcL/Q+g8MZt5cECttaSdU4anFLafpz9nBWKIHL+TjbWwzbOXfmOzzBZVU/buI
xRUiffixmRTw6088miYTmkrmi1hbc0hMpilIo/KX8RDJHImPkcPQbZWgdl4VG9j8
ITUSCXee+4G11gR4LxcJg612989lJmjnCFsTz0Sx/HmEyMHhgCZLsmNuzWRqP+UB
ETALyj91mfx4yWvTQpg0gL2q0OI6nsp1DOIPJPgRLj1O9j9jXu2jEn7BHgfHDBF/
uLM7S/gB+MkgkqYNbD2Bc7XMn2+6P+0lyhIfEJ8GjPabe9MOYQQqRU6dmOac9nIY
2O37zgKqZ7KxnA==
-----END CERTIFICATE-----