Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File:                     IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier:          pe29MN9HQE4xVMA29sUBpTrd3/yq9OiQVQJ1XlM6n9c=
Subject key identifier:   72:E7:11:9C:BA:CD:5C:FD:68:69:A6:B5:15:D1:4A:7F:E4:35:D2:BA
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer:       /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial:       01962FAB3E670881D27A951F9D5D49A0EC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number:          0E11
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: /vyuGG3pk+MSZ/kXUrw+AfGfii9VE7P7tTt3xpUZ54I=)
                          2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
                          3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
                          4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:67:08:81:d2:7a:95:1f:9d:5d:49:a0:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=72e7119cbacd5cfd6869a6b515d14a7fe435d2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:89:52:54:52:db:dd:5c:b9:97:53:08:0b:
                    ef:c5:b5:53:01:08:c7:27:33:cb:25:66:81:11:55:
                    60:ff:2d:b1:b5:06:53:f2:6a:70:ba:ef:ee:94:09:
                    d4:31:59:f5:d2:06:cb:4f:3b:1c:bb:97:77:e8:81:
                    f9:8f:0a:c7:25:95:58:d0:e6:84:e3:d5:48:19:1f:
                    8b:c7:71:eb:d4:0f:2f:21:92:63:98:81:b7:b6:52:
                    a4:85:fd:c1:65:d7:a4:85:bd:a4:77:04:9c:e4:86:
                    a9:26:f8:f1:cd:18:20:ef:bf:ca:f9:c5:77:7d:5f:
                    41:3e:c4:c5:36:c6:39:0c:a0:a0:2b:99:28:a4:68:
                    72:b3:89:76:9f:f6:01:09:1c:d9:a9:7b:96:1e:8b:
                    fa:2b:12:94:48:8e:20:30:e8:5c:37:f3:bf:73:f9:
                    01:dd:6d:6e:96:bb:35:1a:a1:31:8c:5d:16:1d:f0:
                    af:68:ed:c9:38:c2:d2:69:3a:5a:11:2f:eb:21:b3:
                    6e:cc:ef:f1:fc:c7:61:de:7a:f0:c3:31:84:d9:9a:
                    5e:65:5a:af:30:9c:df:2f:8f:59:94:8b:7e:3a:8e:
                    dd:1f:dd:5a:db:a0:bf:0a:b6:67:95:24:b9:68:e9:
                    cb:a7:31:05:86:88:93:29:ea:cb:f3:49:f8:f0:f9:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E7:11:9C:BA:CD:5C:FD:68:69:A6:B5:15:D1:4A:7F:E4:35:D2:BA
            X509v3 Authority Key Identifier:
                keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e6:94:3f:aa:61:33:ea:8f:58:d3:30:30:8d:8a:66:55:9b:
         fa:3a:ff:b2:d3:a6:e9:2a:23:c9:8a:f1:07:0c:8f:89:ba:f6:
         0f:0b:cd:ce:99:a7:23:0c:c6:b1:a1:4a:aa:0a:68:c7:f1:9b:
         18:38:a5:eb:d4:0f:46:bc:3c:97:fb:0f:10:c3:f3:64:b8:4d:
         61:41:b6:6d:bc:42:bd:dc:ea:86:bf:03:b7:df:b1:83:c9:ec:
         cd:09:c8:7b:95:1a:c2:a5:a6:be:d7:8c:f0:62:69:6e:15:b8:
         fc:72:a8:07:2a:78:cf:69:c1:d0:8d:b6:0e:2f:bd:51:22:8a:
         7e:05:db:a8:59:f7:8d:56:cb:fe:69:6d:95:2e:e0:7e:77:b2:
         24:ff:d0:b5:65:12:e0:ff:b1:98:30:8f:f7:4b:bb:1c:7a:fb:
         f7:e6:54:9d:8b:6a:cd:c4:ae:99:91:44:83:e4:de:cf:8e:73:
         00:9b:b9:79:9c:7a:45:c0:69:a1:d9:cd:83:56:42:bc:b7:e2:
         39:e7:9a:a8:69:53:bd:77:b2:e4:18:db:96:ef:d6:c4:33:80:
         1f:90:d5:84:58:77:28:3b:1b:2b:a1:c2:1b:71:6c:50:e7:48:
         09:23:e8:49:29:3d:f2:4c:d2:c6:c4:e3:da:a4:9e:3c:a8:de:
         f2:41:8b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqz5nCIHSepUfnV1JoOwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
Eyg3MmU3MTE5Y2JhY2Q1Y2ZkNjg2OWE2YjUxNWQxNGE3ZmU0MzVkMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OJUlRS291cuZdTCAvvxbVTAQjH
JzPLJWaBEVVg/y2xtQZT8mpwuu/ulAnUMVn10gbLTzscu5d36IH5jwrHJZVY0OaE
49VIGR+Lx3Hr1A8vIZJjmIG3tlKkhf3BZdekhb2kdwSc5IapJvjxzRgg77/K+cV3
fV9BPsTFNsY5DKCgK5kopGhys4l2n/YBCRzZqXuWHov6KxKUSI4gMOhcN/O/c/kB
3W1ulrs1GqExjF0WHfCvaO3JOMLSaTpaES/rIbNuzO/x/Mdh3nrwwzGE2ZpeZVqv
MJzfL49ZlIt+Oo7dH91a26C/CrZnlSS5aOnLpzEFhoiTKerL80n48Plj9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLnEZy6zVz9aGmmtRXRSn/kNdK6MB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOaUP6ph
M+qPWNMwMI2KZlWb+jr/stOm6SojyYrxBwyPibr2DwvNzpmnIwzGsaFKqgpox/Gb
GDil69QPRrw8l/sPEMPzZLhNYUG2bbxCvdzqhr8Dt9+xg8nszQnIe5UawqWmvteM
8GJpbhW4/HKoByp4z2nB0I22Di+9USKKfgXbqFn3jVbL/mltlS7gfneyJP/QtWUS
4P+xmDCP90u7HHr79+ZUnYtqzcSumZFEg+Tez45zAJu5eZx6RcBpodnNg1ZCvLfi
OeeaqGlTvXey5Bjblu/WxDOAH5DVhFh3KDsbK6HCG3FsUOdICSPoSSk98kzSxsTj
2qSePKje8kGL/Q==
-----END CERTIFICATE-----