Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File:                     x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier:          FZLhAgZU0iARj8HxKDKfncPiMNneg3oi1SVFDaKnnGQ=
Subject key identifier:   DF:FD:4F:86:86:51:7E:5F:C0:3D:D6:FC:8B:06:A6:08:9E:D0:D4:B9
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer:       /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial:       01962F7479478531440F11DF0CB60BE948FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
                          2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: tKtff2PAxZAnayBQnEgcxUiPRhucYonLpFmugCI2tX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:79:47:85:31:44:0f:11:df:0c:b6:0b:e9:48:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=dffd4f8686517e5fc03dd6fc8b06a6089ed0d4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:97:89:ca:5d:bb:06:fe:4a:a4:6f:ee:91:
                    45:63:d4:4d:91:e1:80:cc:2e:23:ed:ad:35:07:01:
                    10:b0:25:15:fc:be:d2:22:b8:47:ef:85:ce:9c:7d:
                    1f:5f:f9:10:ed:a0:04:16:4d:c9:3b:21:1e:50:0a:
                    50:f8:0a:84:18:87:86:cc:5b:5f:26:74:ae:45:25:
                    7d:2d:e9:ab:83:b0:61:bd:14:25:b6:62:5b:1b:be:
                    6f:90:90:f1:3f:a2:39:bd:10:1f:9a:11:78:5c:25:
                    8c:19:07:83:a8:3d:8f:aa:8a:b0:9b:e5:88:b9:cb:
                    92:b2:9e:b3:02:58:d3:2a:19:cf:68:96:2d:7a:6c:
                    21:29:6c:3c:39:b2:2e:df:ac:3c:ad:c3:de:d7:66:
                    c4:38:f4:94:1a:8c:c2:33:62:37:90:93:56:c5:ba:
                    5b:21:af:a4:60:18:b2:09:7b:81:56:98:e0:d8:16:
                    be:d6:2f:8e:a8:f5:70:21:c3:ea:c2:22:28:f9:5f:
                    4d:e0:8c:9e:c4:54:b8:a9:20:54:64:03:81:8b:7c:
                    12:ef:37:37:21:ea:2a:db:07:22:c0:49:73:a8:77:
                    84:fb:c8:a6:e2:99:28:10:6c:97:a2:fe:01:a8:0d:
                    4b:bd:88:af:f5:e5:63:a1:ca:a1:14:c1:8f:61:20:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:4F:86:86:51:7E:5F:C0:3D:D6:FC:8B:06:A6:08:9E:D0:D4:B9
            X509v3 Authority Key Identifier:
                keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:8c:94:98:2a:ba:19:a2:c0:9f:bf:fc:a8:72:4b:88:da:
         ca:70:3a:31:d0:10:de:4a:83:75:f8:db:7d:55:66:c8:46:fd:
         af:c6:95:2b:10:86:66:67:2e:b0:3a:bf:60:ea:14:27:5e:07:
         2a:9e:63:39:c4:b5:42:ca:e6:40:a7:61:d7:23:48:3c:e8:00:
         43:38:c4:2d:e8:a0:58:86:ee:6b:b9:a1:98:8f:ef:05:4c:3b:
         7b:4c:5d:74:25:b8:4f:7a:a6:98:65:34:5c:12:8e:98:bd:a8:
         a5:8e:07:60:8c:2c:77:82:14:ca:0e:92:65:f8:de:95:19:84:
         16:53:d3:86:42:1c:e3:30:d2:94:05:a7:01:93:53:4e:3d:6c:
         4f:01:ab:c7:db:2d:60:79:e5:45:50:c2:a1:78:5b:6b:cb:53:
         e5:e8:3a:b8:65:1d:fe:92:00:ec:6f:e0:dd:8b:be:8c:1e:12:
         a1:fe:cb:87:4b:60:5d:33:28:bd:e6:16:c0:a4:ea:5b:dc:24:
         af:17:81:c0:e2:a1:a9:b8:a5:ec:34:02:12:2b:5c:c1:26:66:
         59:72:44:67:dd:1b:87:0a:21:03:2a:d4:1e:20:fd:71:9c:1a:
         1f:a3:27:d4:89:fb:5d:3c:94:6c:ec:1b:eb:98:84:f6:8e:d4:
         7e:cf:2b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHlHhTFEDxHfDLYL6Uj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDZhZGQ4ZGFmZTk5ZjZhN2Q3ODdkNDQ3OTU0NWE2NDZm
NmRlZDgwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhkZmZkNGY4Njg2NTE3ZTVmYzAzZGQ2ZmM4YjA2YTYwODllZDBkNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yCXicpduwb+SqRv7pFFY9RNkeGA
zC4j7a01BwEQsCUV/L7SIrhH74XOnH0fX/kQ7aAEFk3JOyEeUApQ+AqEGIeGzFtf
JnSuRSV9Lemrg7BhvRQltmJbG75vkJDxP6I5vRAfmhF4XCWMGQeDqD2Pqoqwm+WI
ucuSsp6zAljTKhnPaJYtemwhKWw8ObIu36w8rcPe12bEOPSUGozCM2I3kJNWxbpb
Ia+kYBiyCXuBVpjg2Ba+1i+OqPVwIcPqwiIo+V9N4IyexFS4qSBUZAOBi3wS7zc3
Ieoq2wciwElzqHeE+8im4pkoEGyXov4BqA1LvYiv9eVjocqhFMGPYSDtSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/9T4aGUX5fwD3W/IsGpgie0NS5MB8GA1UdIwQY
MBaAFMdGrdja/pn2p9eH1EeVRaZG9t7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2It
N2NiZmU3MzdhODI3LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2ItN2NiZmU3MzdhODI3
LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3OMlJgq
uhmiwJ+//KhyS4jaynA6MdAQ3kqDdfjbfVVmyEb9r8aVKxCGZmcusDq/YOoUJ14H
Kp5jOcS1QsrmQKdh1yNIPOgAQzjELeigWIbua7mhmI/vBUw7e0xddCW4T3qmmGU0
XBKOmL2opY4HYIwsd4IUyg6SZfjelRmEFlPThkIc4zDSlAWnAZNTTj1sTwGrx9st
YHnlRVDCoXhba8tT5eg6uGUd/pIA7G/g3Yu+jB4Sof7Lh0tgXTMoveYWwKTqW9wk
rxeBwOKhqbil7DQCEitcwSZmWXJEZ90bhwohAyrUHiD9cZwaH6Mn1In7XTyUbOwb
65iE9o7Ufs8rTw==
-----END CERTIFICATE-----