Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File:                     hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier:          zotwwudDx6TEydvdsnwmaMoWobzGUvHjP27JJIz02iQ=
Subject key identifier:   48:BB:42:1A:A5:31:02:73:9B:B6:95:C4:C6:2D:05:AC:0B:5C:7D:BC
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer:       /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial:       01962DF3C644527646DEF2561FC8ABE908FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
                          2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: xUvd/xKt9ZuFApiUbKBvwGkh6HcQNUA8no9bZGPIYH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:44:52:76:46:de:f2:56:1f:c8:ab:e9:08:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=48bb421aa53102739bb695c4c62d05ac0b5c7dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:d9:ba:75:30:21:84:9a:e4:87:8c:55:88:
                    c9:f5:30:ad:7d:51:0d:88:63:c7:87:3d:e1:97:09:
                    3c:21:1b:3c:6f:20:1d:26:60:69:4e:71:4a:e5:89:
                    df:b2:15:24:ee:ac:41:10:87:21:ff:27:a3:8a:a7:
                    55:11:c0:e4:42:0d:76:02:60:40:63:79:80:c7:41:
                    c4:ef:fc:1d:64:9a:17:d7:79:bd:84:0a:12:32:b3:
                    fe:a2:92:40:24:e9:56:8b:a2:93:2f:76:b1:05:2a:
                    24:75:22:82:68:11:dd:19:ea:b7:6d:be:8f:04:7b:
                    14:69:fc:1e:80:8d:ca:db:5d:33:8b:aa:8b:ed:07:
                    11:91:60:98:6c:f0:54:8f:b3:7b:04:60:11:c9:07:
                    7d:18:11:84:31:96:75:c7:c4:c7:e0:65:e1:b0:f9:
                    84:5d:f5:28:f0:a7:02:ef:74:e1:91:5a:48:c5:f2:
                    a7:c9:83:a8:3d:69:e0:9f:0c:0d:45:c2:38:09:87:
                    54:91:09:28:fc:f6:f5:8f:e2:f3:93:97:d6:01:0e:
                    eb:c3:3c:a6:d9:e4:8b:12:9f:9a:0d:1c:e4:fc:d6:
                    1c:0c:13:0c:10:68:e5:00:f9:12:65:57:1c:9c:91:
                    2b:3f:1a:d5:77:6b:b9:e2:77:42:25:39:08:0b:a4:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:42:1A:A5:31:02:73:9B:B6:95:C4:C6:2D:05:AC:0B:5C:7D:BC
            X509v3 Authority Key Identifier:
                keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7e:a9:6f:65:da:eb:6d:70:04:d3:be:82:7f:bc:f6:e9:3c:
         0c:91:80:0e:5d:2f:77:1e:20:8b:2b:fa:8f:2b:62:73:82:b0:
         1c:aa:84:c3:87:4d:b6:b3:50:51:17:08:38:0e:27:df:0f:e6:
         17:6d:a8:2b:d0:35:51:ae:5a:86:97:6e:1c:fe:e5:bd:44:28:
         d5:2b:85:2d:6f:18:b1:85:13:db:55:23:85:77:69:b9:ea:29:
         df:fc:25:fe:6e:e9:a7:7f:18:31:d2:6f:e7:4d:f0:c3:58:cc:
         47:8f:70:cb:bf:08:e2:6d:35:08:a5:86:5e:19:6e:2c:de:a9:
         c6:f9:74:1e:05:a1:1d:e1:64:4c:36:71:1b:09:cc:a3:00:52:
         60:aa:5b:21:7d:cd:30:e3:ea:99:0d:60:98:08:f4:19:d1:de:
         06:68:1b:05:e7:2e:94:ab:04:a8:3b:23:8c:5d:07:53:00:75:
         e9:05:ee:50:cc:c7:57:e4:e1:ed:1f:40:91:0c:1d:c7:52:a6:
         0e:7f:a6:0c:f1:b8:6e:0a:c6:16:5f:b3:f4:d1:00:e2:58:67:
         de:fd:ff:70:31:11:04:6f:55:55:78:a3:4b:80:db:48:a5:67:
         f6:42:c2:3c:23:95:25:e6:f4:ae:8c:82:a3:19:2b:41:0d:1b:
         51:3c:7f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88ZEUnZG3vJWH8ir6Qj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm
Y2Q4NWEwHhcNMjUwNDEzMDcwMTEyWhcNMjUwNDE0MDcwMTEyWjAzMTEwLwYDVQQD
Eyg0OGJiNDIxYWE1MzEwMjczOWJiNjk1YzRjNjJkMDVhYzBiNWM3ZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNHZunUwIYSa5IeMVYjJ9TCtfVEN
iGPHhz3hlwk8IRs8byAdJmBpTnFK5YnfshUk7qxBEIch/yejiqdVEcDkQg12AmBA
Y3mAx0HE7/wdZJoX13m9hAoSMrP+opJAJOlWi6KTL3axBSokdSKCaBHdGeq3bb6P
BHsUafwegI3K210zi6qL7QcRkWCYbPBUj7N7BGARyQd9GBGEMZZ1x8TH4GXhsPmE
XfUo8KcC73ThkVpIxfKnyYOoPWngnwwNRcI4CYdUkQko/Pb1j+Lzk5fWAQ7rwzym
2eSLEp+aDRzk/NYcDBMMEGjlAPkSZVccnJErPxrVd2u54ndCJTkIC6Q+LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi7QhqlMQJzm7aVxMYtBawLXH28MB8GA1UdIwQY
MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt
ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm
LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX6pb2Xa
621wBNO+gn+89uk8DJGADl0vdx4giyv6jytic4KwHKqEw4dNtrNQURcIOA4n3w/m
F22oK9A1Ua5ahpduHP7lvUQo1SuFLW8YsYUT21UjhXdpueop3/wl/m7pp38YMdJv
503ww1jMR49wy78I4m01CKWGXhluLN6pxvl0HgWhHeFkTDZxGwnMowBSYKpbIX3N
MOPqmQ1gmAj0GdHeBmgbBeculKsEqDsjjF0HUwB16QXuUMzHV+Th7R9AkQwdx1Km
Dn+mDPG4bgrGFl+z9NEA4lhn3v3/cDERBG9VVXijS4DbSKVn9kLCPCOVJeb0royC
oxkrQQ0bUTx/pA==
-----END CERTIFICATE-----