Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File:                     t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier:          EfNAyFsPrkkuD/3gnSEcI2RIQe1rXoDcRo/AZK32jlI=
Subject key identifier:   61:ED:7C:7E:66:E6:B4:45:4A:B8:51:FB:4B:B4:1E:AA:A5:9C:26:97
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer:       /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial:       01962DF449477B9428F555BEFB48CB1D9C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number:          0E13
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
                          2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: PmgmEs9UdKRGZTCxc7TiP4a+qeP+55kWZjgz4bUJuRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:49:47:7b:94:28:f5:55:be:fb:48:cb:1d:9c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=61ed7c7e66e6b4454ab851fb4bb41eaaa59c2697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:fa:6a:66:b6:62:f3:82:e1:57:f2:a8:70:
                    1b:42:e0:36:a0:99:30:a2:9e:73:c5:dc:bf:3d:e9:
                    54:05:fd:23:8e:4b:53:94:c6:5f:6b:ef:2e:5d:be:
                    9a:fc:49:0f:30:70:31:0d:d1:66:ba:52:06:8c:0c:
                    4d:75:c2:06:f7:70:d3:5b:d4:89:36:80:32:3f:8a:
                    9d:ae:d3:d0:fa:7a:aa:76:b0:02:ba:b6:5d:d0:52:
                    34:ad:52:44:8b:f7:3a:4b:c3:54:26:ca:b4:19:5f:
                    11:6a:0c:82:cf:6e:00:16:55:ab:35:98:12:6d:3e:
                    44:97:92:5d:da:ec:7c:40:8b:f4:c8:bb:77:49:e3:
                    65:0d:13:e6:e9:e5:e0:75:4b:63:e3:34:4f:de:a1:
                    e0:f2:0c:a9:58:84:09:21:3c:e0:38:43:01:45:e4:
                    f1:8f:21:9d:b6:e0:7f:c1:ad:8d:7e:d2:69:f7:b9:
                    28:20:d9:8f:c5:f5:17:0a:67:c1:f1:5a:e7:05:2f:
                    97:1d:bc:44:27:e4:7f:49:19:b0:bc:72:d4:e3:ef:
                    a5:73:a7:7d:5f:33:91:12:c2:82:e9:be:ee:21:c7:
                    51:df:99:ee:e3:03:7c:8f:e1:76:5d:65:bf:6b:c3:
                    27:1a:f9:77:a8:9f:d9:52:3e:ba:46:cb:a3:b4:df:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:7C:7E:66:E6:B4:45:4A:B8:51:FB:4B:B4:1E:AA:A5:9C:26:97
            X509v3 Authority Key Identifier:
                keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:db:12:7b:5a:2c:49:7b:96:b0:2d:b1:dc:f0:d5:50:0e:05:
         71:b8:53:19:ae:ea:a3:4d:64:78:38:39:e1:e0:d0:58:89:c4:
         1c:91:27:e3:4f:aa:a1:ff:20:43:97:1c:2c:dc:1e:82:47:3a:
         78:f1:76:83:45:af:5c:31:fd:6f:cb:10:f8:b6:61:79:1c:82:
         94:99:23:fb:af:71:b3:06:49:f6:8a:60:ce:de:9f:67:bf:4a:
         49:e8:73:f0:5f:e6:af:7d:dd:2e:49:c4:49:86:84:6a:45:9a:
         43:72:cb:bb:d3:ce:bd:17:c7:3d:e3:ea:d6:16:48:00:c1:b4:
         d2:e7:b4:49:06:72:cb:3e:cb:4c:2e:5f:92:58:c9:15:8c:d6:
         51:99:3a:e6:89:c5:92:69:c7:d9:ad:45:e8:43:01:2a:a1:ac:
         41:83:45:26:c5:b7:8a:2b:a3:79:0a:7e:34:26:73:42:65:bb:
         0a:e9:df:c0:8c:56:3c:2e:65:d4:38:07:ce:8f:96:c8:06:08:
         5e:e5:65:ac:cb:4d:14:bf:4f:f8:9f:d7:f3:c1:2f:db:d6:a6:
         b5:d6:7d:18:b6:35:2b:12:dc:5b:b7:48:00:81:84:1d:f9:fd:
         94:b2:28:77:01:5b:1a:c7:d9:83:62:44:ef:e1:5f:5d:8d:08:
         c1:e4:8d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9ElHe5Qo9VW++0jLHZwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjUwNDEzMDcwMTQ2WhcNMjUwNDE0MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg2MWVkN2M3ZTY2ZTZiNDQ1NGFiODUxZmI0YmI0MWVhYWE1OWMyNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/6ama2YvOC4VfyqHAbQuA2oJkw
op5zxdy/PelUBf0jjktTlMZfa+8uXb6a/EkPMHAxDdFmulIGjAxNdcIG93DTW9SJ
NoAyP4qdrtPQ+nqqdrACurZd0FI0rVJEi/c6S8NUJsq0GV8RagyCz24AFlWrNZgS
bT5El5Jd2ux8QIv0yLt3SeNlDRPm6eXgdUtj4zRP3qHg8gypWIQJITzgOEMBReTx
jyGdtuB/wa2NftJp97koINmPxfUXCmfB8VrnBS+XHbxEJ+R/SRmwvHLU4++lc6d9
XzOREsKC6b7uIcdR35nu4wN8j+F2XWW/a8MnGvl3qJ/ZUj66RsujtN+WQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHtfH5m5rRFSrhR+0u0HqqlnCaXMB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdsSe1os
SXuWsC2x3PDVUA4FcbhTGa7qo01keDg54eDQWInEHJEn40+qof8gQ5ccLNwegkc6
ePF2g0WvXDH9b8sQ+LZheRyClJkj+69xswZJ9opgzt6fZ79KSehz8F/mr33dLknE
SYaEakWaQ3LLu9POvRfHPePq1hZIAMG00ue0SQZyyz7LTC5fkljJFYzWUZk65onF
kmnH2a1F6EMBKqGsQYNFJsW3iiujeQp+NCZzQmW7CunfwIxWPC5l1DgHzo+WyAYI
XuVlrMtNFL9P+J/X88Ev29amtdZ9GLY1KxLcW7dIAIGEHfn9lLIodwFbGsfZg2JE
7+FfXY0IweSNRg==
-----END CERTIFICATE-----