Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File:                     cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier:          XwDbD8kuAPR+3XBiTmejsXhu389G8bsxRKpTza+6U+s=
Subject key identifier:   36:8B:75:E5:0D:F6:F6:6D:65:CD:52:15:AB:53:C5:D1:E1:BB:02:04
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer:       /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial:       01962F06C574175BDAD979EFE02BA8676E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
                          2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: pSySIsqlNSpzr5AZVznEnuhqQvNXuJU+9uujzDTTETE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:74:17:5b:da:d9:79:ef:e0:2b:a8:67:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=368b75e50df6f66d65cd5215ab53c5d1e1bb0204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:25:0e:a2:62:9e:1f:d1:b0:49:6c:32:fc:
                    3d:22:1e:ed:96:60:10:9c:46:f3:01:cf:0e:9e:61:
                    0f:8b:4d:4e:cf:90:ba:be:1b:d8:c0:88:87:0c:25:
                    ac:c0:8d:9d:06:d3:66:59:42:7a:4e:ea:a0:f3:3c:
                    d4:eb:14:f8:9d:c7:d8:7d:3c:a4:6f:b6:da:e4:be:
                    74:77:92:e0:f0:55:7e:d0:78:5f:69:3d:2a:60:85:
                    2a:0b:f8:ca:ce:49:36:d6:6b:9c:da:b1:e7:b0:52:
                    21:ee:fd:35:b0:b8:1c:ff:13:8b:da:b0:08:7c:39:
                    a3:96:55:98:95:3b:74:5c:70:e2:db:86:9a:80:c7:
                    a3:4a:8e:8f:1f:e1:42:0c:aa:8b:6e:85:12:18:47:
                    c2:35:1e:7e:de:73:fc:2d:4b:61:51:2c:aa:a6:2a:
                    a2:19:f2:bd:d8:e7:d1:eb:14:9d:bf:e0:79:bb:27:
                    e5:de:19:24:7b:a4:9d:9f:25:f7:1c:62:b9:de:c0:
                    d2:ba:58:7b:6d:fa:03:50:27:cd:f2:bf:44:e3:1f:
                    42:d1:42:18:a4:48:19:bb:b1:69:e3:3d:bf:52:a8:
                    22:c2:bf:a8:eb:98:e3:de:ff:ad:93:f6:c4:02:b0:
                    94:40:33:bd:bc:6c:1c:02:30:f4:f9:f0:a0:e4:39:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:75:E5:0D:F6:F6:6D:65:CD:52:15:AB:53:C5:D1:E1:BB:02:04
            X509v3 Authority Key Identifier:
                keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b3:ee:73:be:04:c3:c1:3f:d2:5e:33:6d:d3:c9:5e:38:6a:
         a1:08:55:3d:df:7f:11:a4:ec:b1:6f:a5:ca:95:ba:2c:1f:d8:
         ee:f2:fe:ec:de:12:e7:03:5d:a1:8f:51:31:30:46:0b:c7:6b:
         3c:36:77:f4:13:19:9f:22:81:b5:8e:4e:72:25:ec:a3:57:1f:
         06:4f:5c:a2:35:0b:f7:1a:83:0a:7d:d4:6a:c5:36:b8:d5:13:
         1e:ed:cd:5c:a3:76:17:69:13:58:b7:14:72:f1:b1:87:ec:d5:
         42:f1:22:ce:4d:5d:3d:48:d3:e9:42:e2:a0:08:84:4e:d7:55:
         17:71:79:fd:36:eb:fa:14:37:02:0e:22:e6:67:6c:53:03:38:
         90:3e:54:a7:82:8c:3a:13:7c:90:dd:22:6c:b4:00:ae:fb:2b:
         d3:89:bb:c6:54:82:88:32:49:d2:49:03:53:ec:76:d5:86:80:
         04:1f:71:a3:25:ff:d7:ae:91:ec:7f:74:fd:47:0b:67:fc:4f:
         de:02:71:1d:e6:cd:55:83:cc:6f:2f:f7:64:c0:dd:97:b4:72:
         63:c7:eb:b1:47:3f:b4:8e:05:2a:55:0a:72:41:f5:64:62:69:
         9f:74:e6:06:3d:48:d1:8c:94:c3:dd:30:de:cb:83:39:92:3c:
         69:8f:9c:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsV0F1va2Xnv4CuoZ25IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3
NzNmYWUwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
EygzNjhiNzVlNTBkZjZmNjZkNjVjZDUyMTVhYjUzYzVkMWUxYmIwMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY8lDqJinh/RsElsMvw9Ih7tlmAQ
nEbzAc8OnmEPi01Oz5C6vhvYwIiHDCWswI2dBtNmWUJ6Tuqg8zzU6xT4ncfYfTyk
b7ba5L50d5Lg8FV+0HhfaT0qYIUqC/jKzkk21muc2rHnsFIh7v01sLgc/xOL2rAI
fDmjllWYlTt0XHDi24aagMejSo6PH+FCDKqLboUSGEfCNR5+3nP8LUthUSyqpiqi
GfK92OfR6xSdv+B5uyfl3hkke6SdnyX3HGK53sDSulh7bfoDUCfN8r9E4x9C0UIY
pEgZu7Fp4z2/Uqgiwr+o65jj3v+tk/bEArCUQDO9vGwcAjD0+fCg5Dm7nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaLdeUN9vZtZc1SFatTxdHhuwIEMB8GA1UdIwQY
MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt
NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh
LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrPuc74E
w8E/0l4zbdPJXjhqoQhVPd9/EaTssW+lypW6LB/Y7vL+7N4S5wNdoY9RMTBGC8dr
PDZ39BMZnyKBtY5OciXso1cfBk9cojUL9xqDCn3UasU2uNUTHu3NXKN2F2kTWLcU
cvGxh+zVQvEizk1dPUjT6ULioAiETtdVF3F5/Tbr+hQ3Ag4i5mdsUwM4kD5Up4KM
OhN8kN0ibLQArvsr04m7xlSCiDJJ0kkDU+x21YaABB9xoyX/166R7H90/UcLZ/xP
3gJxHebNVYPMby/3ZMDdl7RyY8frsUc/tI4FKlUKckH1ZGJpn3TmBj1I0YyUw90w
3suDOZI8aY+cKw==
-----END CERTIFICATE-----