Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File:                     mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier:          zsHV4AE6MAqbjmzto7T6HAiMEFQH+SEWdfk2im4UHxU=
Subject key identifier:   46:5B:38:EB:C7:F7:03:8E:F7:91:0F:EF:01:6C:4B:E0:3D:C1:28:6A
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer:       /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial:       01962ECFCBD476F793AA4839003B6D36316D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number:          07AE
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: KYNugFqEPtSFoPeV6SeRR6E8N+f6SvgQh80re46R35w=)
                          2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:d4:76:f7:93:aa:48:39:00:3b:6d:36:31:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=465b38ebc7f7038ef7910fef016c4be03dc1286a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:27:24:bd:18:8c:fd:d1:26:a0:81:22:2c:
                    b4:89:32:46:a7:3f:e7:f9:f8:66:af:78:f1:26:f6:
                    bc:0a:8f:38:25:b6:0c:fd:f4:68:71:b6:c6:a2:90:
                    d0:4c:68:5c:27:86:cf:c1:63:63:d3:45:59:93:4d:
                    9b:16:bf:ce:08:68:73:41:93:d0:fb:7b:ab:ce:0e:
                    56:57:d5:96:1d:f8:6b:7b:fb:f3:0f:56:5e:59:dd:
                    ee:a6:c9:17:a9:ba:db:16:8a:97:d2:21:67:d9:c9:
                    11:7f:1f:22:dc:c4:15:e5:ca:c4:b4:78:fc:3c:10:
                    1d:ca:c6:19:46:e4:97:f7:32:28:c6:b2:59:2d:dc:
                    07:d2:f6:84:6f:e0:26:6c:b6:80:6b:a4:c8:e9:07:
                    51:39:3a:f8:cd:3e:b9:41:0b:57:ba:16:ff:f6:bc:
                    01:e0:77:97:af:4e:3a:09:94:f7:d3:89:7b:b9:30:
                    21:eb:84:47:80:b4:d4:1d:e2:ad:7e:8a:b1:0b:e3:
                    7a:56:b9:47:d8:23:b7:db:37:49:d0:36:af:33:a7:
                    bd:3a:64:d5:d9:7b:36:8f:fd:60:fa:db:d5:df:e2:
                    21:01:de:f8:2a:53:ed:b8:a7:3d:8a:c2:7f:9e:1d:
                    cf:c4:45:8a:c6:a8:89:ed:e5:98:cf:45:75:d1:8a:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:38:EB:C7:F7:03:8E:F7:91:0F:EF:01:6C:4B:E0:3D:C1:28:6A
            X509v3 Authority Key Identifier:
                keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:77:ef:41:ae:de:91:71:9b:b6:f4:f6:80:7d:f0:af:70:87:
         5f:7a:f8:dd:e2:d4:d4:23:05:66:fa:29:a0:56:4d:1c:47:c5:
         c5:20:67:9d:b6:a1:38:e0:7f:95:9d:21:cc:84:db:da:7f:9b:
         2d:4b:ef:28:5c:7a:3c:d5:37:ad:9b:08:99:7e:ce:af:8c:57:
         62:53:93:5e:9b:27:7d:8c:5c:d6:77:d8:7e:12:9e:a6:7f:11:
         3e:ff:c2:9f:14:67:ed:9d:d4:bc:f3:0e:42:23:81:3e:eb:fe:
         19:7c:2f:18:b7:19:35:68:1d:85:4d:66:0d:d0:16:6f:8c:2a:
         fc:68:6a:21:b2:cd:d8:b8:85:e1:51:02:72:f7:4f:6a:a3:04:
         27:4c:e9:53:ef:3b:85:5f:af:97:e8:73:ae:63:aa:ba:f9:d9:
         51:8f:bd:0d:8d:5c:d0:40:05:cc:dd:96:76:ff:53:3c:05:da:
         bd:72:22:39:ad:68:b1:51:2c:e2:3d:89:71:3d:c7:e2:ef:7c:
         4c:d3:58:9b:d2:84:76:db:b0:b0:84:6d:18:1c:e3:c2:49:71:
         33:2b:d8:57:4b:91:5e:5c:30:aa:70:e4:f8:23:ea:8c:21:b7:
         8c:15:2e:52:fd:66:c9:c2:aa:75:96:c2:db:b0:b0:a5:b4:29:
         cb:ed:3b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8vUdveTqkg5ADttNjFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjBhZTRiZGQ5ZDZlZmJhNmVhMTFjNjA3MzdjYmEwMmRj
ZjFlNjAwHhcNMjUwNDEzMTEwMTMyWhcNMjUwNDE0MTEwMTMyWjAzMTEwLwYDVQQD
Eyg0NjViMzhlYmM3ZjcwMzhlZjc5MTBmZWYwMTZjNGJlMDNkYzEyODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0gnJL0YjP3RJqCBIiy0iTJGpz/n
+fhmr3jxJva8Co84JbYM/fRocbbGopDQTGhcJ4bPwWNj00VZk02bFr/OCGhzQZPQ
+3urzg5WV9WWHfhre/vzD1ZeWd3upskXqbrbFoqX0iFn2ckRfx8i3MQV5crEtHj8
PBAdysYZRuSX9zIoxrJZLdwH0vaEb+AmbLaAa6TI6QdROTr4zT65QQtXuhb/9rwB
4HeXr046CZT304l7uTAh64RHgLTUHeKtfoqxC+N6VrlH2CO32zdJ0DavM6e9OmTV
2Xs2j/1g+tvV3+IhAd74KlPtuKc9isJ/nh3PxEWKxqiJ7eWYz0V10Yq2qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZbOOvH9wOO95EP7wFsS+A9wShqMB8GA1UdIwQY
MBaAFJpgrkvdnW77puoRxgc3y6Atzx5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQt
ZWRjYzUyZTE3YTk0LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQtZWRjYzUyZTE3YTk0
LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXfvQa7e
kXGbtvT2gH3wr3CHX3r43eLU1CMFZvopoFZNHEfFxSBnnbahOOB/lZ0hzITb2n+b
LUvvKFx6PNU3rZsImX7Or4xXYlOTXpsnfYxc1nfYfhKepn8RPv/CnxRn7Z3UvPMO
QiOBPuv+GXwvGLcZNWgdhU1mDdAWb4wq/GhqIbLN2LiF4VECcvdPaqMEJ0zpU+87
hV+vl+hzrmOquvnZUY+9DY1c0EAFzN2Wdv9TPAXavXIiOa1osVEs4j2JcT3H4u98
TNNYm9KEdtuwsIRtGBzjwklxMyvYV0uRXlwwqnDk+CPqjCG3jBUuUv1mycKqdZbC
27CwpbQpy+07DA==
-----END CERTIFICATE-----