Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File:                     R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier:          cx/qpYdcIV4al86znMZ5h31sOnqLwLegavM7sqQZIdk=
Subject key identifier:   51:B8:42:04:0A:BE:0F:98:29:19:8A:B5:01:2A:27:D2:C9:AC:16:1E
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       01962F74BE75CF237EAC20C225766581F2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number:          0CC5
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
                          2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: +kqxiVzScw+bFWa4gIub41iQ7ayHFnQ2oRylm3by9wk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:75:cf:23:7e:ac:20:c2:25:76:65:81:f2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=51b842040abe0f9829198ab5012a27d2c9ac161e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:13:78:9b:f6:d5:68:3c:08:d9:13:53:fc:5e:
                    5a:ee:20:c0:3b:08:83:d5:3f:b4:6b:fd:47:e0:e2:
                    fa:f0:9c:f3:70:3f:d9:a9:c4:eb:d6:d8:60:d9:2e:
                    48:09:b7:71:61:6c:54:91:90:03:c0:d1:3c:10:4f:
                    6a:dc:5c:03:b5:38:b0:ae:2b:98:12:78:87:ff:42:
                    8e:d2:c3:2c:4a:32:ed:97:3e:2e:d6:5e:94:18:f9:
                    3a:7d:e0:ba:f7:f9:df:92:f0:60:2a:d2:db:60:eb:
                    10:b2:84:9c:74:4f:b3:db:77:87:81:ab:82:7f:13:
                    7b:13:0e:c5:77:a4:7d:00:c8:e6:47:5e:fc:1f:6a:
                    8f:70:b1:40:a1:d3:77:d2:d7:72:e0:5d:f5:b3:fd:
                    69:13:21:da:0c:4f:84:32:42:40:42:f4:84:f7:55:
                    6f:87:c1:b3:e9:b3:1e:45:44:9b:91:19:d2:b4:b8:
                    43:5f:02:79:84:3c:07:6a:84:46:89:7f:cb:4e:bb:
                    c7:b1:1a:1c:3d:6a:16:df:10:66:aa:09:34:bc:e3:
                    cb:c8:cd:ad:b8:77:f3:db:88:2f:a2:31:5f:85:92:
                    76:a3:60:90:85:24:00:7e:68:56:df:44:6d:9f:1d:
                    21:25:e6:cc:0c:6a:8d:03:fb:63:1a:0f:4f:fc:78:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B8:42:04:0A:BE:0F:98:29:19:8A:B5:01:2A:27:D2:C9:AC:16:1E
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:29:61:30:d0:6c:b0:5d:cd:69:71:72:79:e7:3a:70:b5:
         6e:e5:c8:78:3b:80:22:8b:63:43:7f:20:20:04:aa:35:f1:42:
         de:48:73:c6:00:04:17:49:b9:1e:59:a8:71:e5:67:a4:1c:af:
         7b:37:69:29:80:67:95:4f:32:05:f2:b6:81:b6:b4:ec:8d:63:
         e1:08:29:7d:ed:c2:d4:ff:5e:0c:15:42:de:29:22:30:b4:60:
         6f:c1:91:46:aa:55:c1:c0:36:0e:af:63:f7:36:9b:5c:85:6d:
         b2:57:fd:f5:b3:93:ec:6e:81:05:50:c1:53:d6:44:c6:d1:be:
         11:fb:e0:ff:f6:77:81:d5:75:8e:f6:be:cf:c1:a4:a7:e9:2b:
         b8:5a:e4:e8:43:9a:a7:52:88:68:3e:c2:d6:c4:57:02:7b:9f:
         bb:8a:6e:08:aa:40:94:2b:65:39:1f:47:fc:2b:14:49:61:02:
         67:44:30:e8:df:cc:4b:5c:ed:46:bc:47:27:da:e0:67:3c:f0:
         5c:f2:de:9b:fd:85:83:cf:91:95:d5:da:ad:00:ed:83:82:80:
         bc:7f:38:05:c1:98:b5:46:4d:52:c0:cb:a5:a3:56:23:7b:3f:
         7c:9a:10:f9:6c:f0:87:c2:da:c5:08:38:bb:84:ef:67:21:bb:
         c0:65:16:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdL51zyN+rCDCJXZlgfKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx
ZGVjYTcwHhcNMjUwNDEzMTQwMTQyWhcNMjUwNDE0MTQwMTQyWjAzMTEwLwYDVQQD
Eyg1MWI4NDIwNDBhYmUwZjk4MjkxOThhYjUwMTJhMjdkMmM5YWMxNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xN4m/bVaDwI2RNT/F5a7iDAOwiD
1T+0a/1H4OL68JzzcD/ZqcTr1thg2S5ICbdxYWxUkZADwNE8EE9q3FwDtTiwriuY
EniH/0KO0sMsSjLtlz4u1l6UGPk6feC69/nfkvBgKtLbYOsQsoScdE+z23eHgauC
fxN7Ew7Fd6R9AMjmR178H2qPcLFAodN30tdy4F31s/1pEyHaDE+EMkJAQvSE91Vv
h8Gz6bMeRUSbkRnStLhDXwJ5hDwHaoRGiX/LTrvHsRocPWoW3xBmqgk0vOPLyM2t
uHfz24gvojFfhZJ2o2CQhSQAfmhW30Rtnx0hJebMDGqNA/tjGg9P/HhOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG4QgQKvg+YKRmKtQEqJ9LJrBYeMB8GA1UdIwQY
MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct
ZGJmY2QxMWMzMzAzLzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz
LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIMpYTDQ
bLBdzWlxcnnnOnC1buXIeDuAIotjQ38gIASqNfFC3khzxgAEF0m5HlmoceVnpByv
ezdpKYBnlU8yBfK2gba07I1j4Qgpfe3C1P9eDBVC3ikiMLRgb8GRRqpVwcA2Dq9j
9zabXIVtslf99bOT7G6BBVDBU9ZExtG+Efvg//Z3gdV1jva+z8Gkp+kruFrk6EOa
p1KIaD7C1sRXAnufu4puCKpAlCtlOR9H/CsUSWECZ0Qw6N/MS1ztRrxHJ9rgZzzw
XPLem/2Fg8+RldXarQDtg4KAvH84BcGYtUZNUsDLpaNWI3s/fJoQ+Wzwh8LaxQg4
u4TvZyG7wGUWaQ==
-----END CERTIFICATE-----