Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File:                     RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier:          DJE9ai9kV7TXn+9oDJ+uBYbA+Ol6JRYwhBHV0pGbSYU=
Subject key identifier:   83:03:8E:40:7C:8E:5A:10:4C:1A:0D:3C:6B:87:1E:52:0A:0B:23:D7
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer:       /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial:       01962ECFC6C08B7AF48857D63A77164B1C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number:          0132
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
                          2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: Fww8fXrh/vPwlleZ9h9BYiN28oPHOJGHF4AG+PQbpJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:c0:8b:7a:f4:88:57:d6:3a:77:16:4b:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=83038e407c8e5a104c1a0d3c6b871e520a0b23d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:79:d2:69:1a:43:04:1c:52:ce:b7:53:21:8f:
                    8e:40:61:c5:5b:f6:56:24:2a:25:8c:b9:e8:fb:13:
                    36:31:0b:6e:20:3f:68:db:c4:09:f8:e1:74:8a:b9:
                    10:1e:4e:f4:92:91:ff:56:98:75:9f:ed:1c:5e:77:
                    c1:96:29:08:35:0a:ea:e4:8e:5f:d2:f2:53:8e:1e:
                    8b:50:ef:bb:4f:3d:04:f0:5e:ab:ea:c4:35:5d:ae:
                    3b:e8:cc:3d:c6:41:33:98:00:31:46:55:6c:3d:eb:
                    46:6b:e7:0e:9a:06:3c:c7:5a:68:f1:bf:42:ba:e1:
                    b9:04:60:7b:f7:db:92:f5:ab:86:4a:59:8b:40:5d:
                    54:f3:4f:17:87:52:d1:8e:a7:e5:25:c5:73:1a:32:
                    6a:3c:7e:db:44:cc:cd:35:e4:8b:11:b0:84:98:6d:
                    b6:ee:26:1c:ab:34:f4:34:a6:c3:4d:71:99:0e:75:
                    af:f4:4a:f5:29:cf:ab:15:05:d8:c6:14:0b:1e:fd:
                    ed:cc:28:f5:e3:e1:1e:0e:63:1d:1b:6e:18:ce:0f:
                    f5:1d:11:cf:ff:91:f9:69:fa:a2:d5:dd:d9:cb:5f:
                    ad:24:2c:45:89:e2:df:9a:ad:3f:46:52:1a:0e:03:
                    b8:8d:cd:e7:d8:a8:f4:4c:cb:5f:11:85:d1:ee:59:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:8E:40:7C:8E:5A:10:4C:1A:0D:3C:6B:87:1E:52:0A:0B:23:D7
            X509v3 Authority Key Identifier:
                keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:74:41:44:d6:d8:3e:f6:d2:08:40:52:70:5b:88:fb:03:
         ca:d9:3b:8f:39:50:eb:f1:b7:60:f1:98:bf:5d:40:3d:f5:f0:
         50:a4:f5:9a:3b:b0:a6:10:4f:e4:26:41:12:81:48:83:85:f3:
         41:56:de:4a:ff:87:46:92:6a:a3:28:ad:e1:ff:c7:d0:dc:ab:
         f2:99:49:5c:ee:45:39:9f:17:d6:d2:6e:8e:e9:8a:a1:b4:0c:
         aa:08:6b:8f:7f:8a:70:05:da:e5:a5:b4:10:d7:12:a6:ef:ec:
         b8:1f:cd:cc:c8:06:3e:ee:aa:62:a5:b1:b3:21:05:df:da:d0:
         d3:53:c6:69:fd:23:f1:f4:53:a0:6d:28:48:be:ab:0d:fc:c7:
         6c:16:2d:63:31:4a:61:4f:07:41:d2:ce:e0:46:68:2f:37:4a:
         16:a0:84:d0:80:52:3e:0a:1e:fe:dc:2d:e6:45:bc:f4:74:ec:
         f0:80:c8:56:9f:f9:8f:e1:75:f0:17:da:f5:7d:16:61:1d:f9:
         aa:30:1b:1a:0a:65:87:4e:b5:3f:5b:85:76:c8:6e:46:16:19:
         58:ef:5b:ce:7b:92:2c:7a:24:bc:10:8f:6f:cd:93:2b:15:c4:
         b0:77:25:8c:3f:66:60:24:d8:4c:fb:4a:60:c0:e5:ec:13:58:
         35:3c:61:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8bAi3r0iFfWOncWSxwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzhiMGMxNjMzNmI5MzMzYjQ0NGZmMWUxOGNjNzhkNzZh
N2MzZjYwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
Eyg4MzAzOGU0MDdjOGU1YTEwNGMxYTBkM2M2Yjg3MWU1MjBhMGIyM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XnSaRpDBBxSzrdTIY+OQGHFW/ZW
JColjLno+xM2MQtuID9o28QJ+OF0irkQHk70kpH/Vph1n+0cXnfBlikINQrq5I5f
0vJTjh6LUO+7Tz0E8F6r6sQ1Xa476Mw9xkEzmAAxRlVsPetGa+cOmgY8x1po8b9C
uuG5BGB799uS9auGSlmLQF1U808Xh1LRjqflJcVzGjJqPH7bRMzNNeSLEbCEmG22
7iYcqzT0NKbDTXGZDnWv9Er1Kc+rFQXYxhQLHv3tzCj14+EeDmMdG24Yzg/1HRHP
/5H5afqi1d3Zy1+tJCxFieLfmq0/RlIaDgO4jc3n2Kj0TMtfEYXR7lkuiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMDjkB8jloQTBoNPGuHHlIKCyPXMB8GA1UdIwQY
MBaAFEXIsMFjNrkzO0RP8eGMx412p8P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYt
Y2RmZWY2ZDVmOWI5LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYtY2RmZWY2ZDVmOWI5
LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnG10QUTW
2D720ghAUnBbiPsDytk7jzlQ6/G3YPGYv11APfXwUKT1mjuwphBP5CZBEoFIg4Xz
QVbeSv+HRpJqoyit4f/H0Nyr8plJXO5FOZ8X1tJujumKobQMqghrj3+KcAXa5aW0
ENcSpu/suB/NzMgGPu6qYqWxsyEF39rQ01PGaf0j8fRToG0oSL6rDfzHbBYtYzFK
YU8HQdLO4EZoLzdKFqCE0IBSPgoe/twt5kW89HTs8IDIVp/5j+F18Bfa9X0WYR35
qjAbGgplh061P1uFdshuRhYZWO9bznuSLHokvBCPb82TKxXEsHcljD9mYCTYTPtK
YMDl7BNYNTxh3Q==
-----END CERTIFICATE-----