Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File:                     CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier:          mX4BK3Xtw7GU2gH6AMXEBe7uGJjqDXmyP1jovbTkt0E=
Subject key identifier:   CC:88:98:06:72:74:AD:F1:F4:4B:AF:9B:3E:47:22:1C:BB:61:82:FE
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer:       /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial:       01962E993BDE73589B03EA993537603221F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
                          2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: OWKSoxZhrH6t4ij4Sr9FTCo/h7a+33VeToX07qzW7NE=)
                          3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:de:73:58:9b:03:ea:99:35:37:60:32:21:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=cc8898067274adf1f44baf9b3e47221cbb6182fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:4d:87:a3:94:d7:23:56:dd:7c:ff:83:01:
                    74:ec:15:46:df:25:af:d3:61:d7:a9:ba:9f:6d:6e:
                    90:c7:17:0c:e7:f0:54:9d:69:d5:b8:5e:c3:85:d5:
                    0e:2a:46:1a:c3:c5:09:1e:e4:4b:b5:7f:20:30:23:
                    17:f7:d3:eb:58:4e:ff:0d:9e:32:ad:7a:4f:7f:fc:
                    4d:ee:9a:cc:72:11:f9:ac:8c:8e:4c:a4:a4:30:ce:
                    8a:ed:9e:bb:f6:ea:e0:15:d9:85:ef:c5:02:1b:4b:
                    00:28:4e:f1:38:8d:42:88:a0:16:c2:99:02:89:60:
                    b3:2c:ef:cf:02:b6:dc:06:df:78:b2:ac:97:42:9c:
                    54:aa:be:1d:6c:be:14:07:ed:49:1e:88:d4:97:64:
                    2e:69:ae:f0:81:47:b9:2b:42:0b:d5:90:e2:91:0b:
                    b4:00:7a:c5:7c:07:c6:65:72:4b:b6:31:1e:cf:84:
                    c0:75:27:09:eb:fe:23:0b:a6:93:9c:22:8f:0a:9f:
                    48:1a:ed:6d:95:1f:a9:b4:0b:cd:84:25:a2:1a:86:
                    ea:9e:5d:be:94:0f:dc:e0:c9:86:b0:ee:59:5b:ae:
                    4a:ee:34:22:ca:7d:8a:b9:c9:19:2d:1a:35:6c:ae:
                    1e:5f:e6:0f:39:c1:54:d1:c8:89:69:f7:5f:fe:57:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:98:06:72:74:AD:F1:F4:4B:AF:9B:3E:47:22:1C:BB:61:82:FE
            X509v3 Authority Key Identifier:
                keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:a1:b9:39:11:a4:2f:c3:35:fa:67:60:61:7a:21:cd:25:
         95:2f:e3:36:82:50:07:08:06:52:29:fc:6a:4f:0f:e7:a8:15:
         dd:0d:c7:23:d0:b4:be:f9:88:11:fd:33:50:2a:3e:ac:45:2f:
         e2:51:ac:41:18:53:3d:23:12:e9:32:0a:4d:b3:bf:ba:d5:36:
         d1:a3:e5:c3:a4:32:70:70:e6:65:03:ab:4e:e8:2b:a0:5f:67:
         9d:49:fe:5a:f5:25:af:f6:95:d3:98:0a:1f:bf:3a:b3:7f:8b:
         4f:95:70:4a:30:bd:0e:f1:df:e2:d1:28:e4:e0:6e:39:1c:9d:
         f9:c6:ee:24:c0:42:80:25:1c:32:11:cd:14:64:74:5d:85:ed:
         72:d1:78:16:d9:5e:4a:52:e6:83:f5:47:ce:df:b4:ef:ab:25:
         f0:5f:4c:9d:49:b4:a9:58:c9:0d:63:7b:4e:50:01:be:e8:ed:
         0d:a3:8d:f6:ba:3b:74:32:e7:91:61:8c:ee:59:04:d1:0a:c6:
         a1:30:ec:16:9b:b5:78:f1:e0:2e:f5:58:94:f2:d3:d1:94:ba:
         9d:40:eb:17:94:72:6c:45:e7:dc:bc:fb:08:14:a8:d1:68:ea:
         28:73:11:68:82:5d:39:fc:39:1e:fd:cd:ac:f4:43:8a:af:ae:
         3b:13:86:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTvec1ibA+qZNTdgMiHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
EyhjYzg4OTgwNjcyNzRhZGYxZjQ0YmFmOWIzZTQ3MjIxY2JiNjE4MmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDxNh6OU1yNW3Xz/gwF07BVG3yWv
02HXqbqfbW6QxxcM5/BUnWnVuF7DhdUOKkYaw8UJHuRLtX8gMCMX99PrWE7/DZ4y
rXpPf/xN7prMchH5rIyOTKSkMM6K7Z679urgFdmF78UCG0sAKE7xOI1CiKAWwpkC
iWCzLO/PArbcBt94sqyXQpxUqr4dbL4UB+1JHojUl2Quaa7wgUe5K0IL1ZDikQu0
AHrFfAfGZXJLtjEez4TAdScJ6/4jC6aTnCKPCp9IGu1tlR+ptAvNhCWiGobqnl2+
lA/c4MmGsO5ZW65K7jQiyn2KuckZLRo1bK4eX+YPOcFU0ciJafdf/lc25wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyImAZydK3x9Euvmz5HIhy7YYL+MB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwKhuTkR
pC/DNfpnYGF6Ic0llS/jNoJQBwgGUin8ak8P56gV3Q3HI9C0vvmIEf0zUCo+rEUv
4lGsQRhTPSMS6TIKTbO/utU20aPlw6QycHDmZQOrTugroF9nnUn+WvUlr/aV05gK
H786s3+LT5VwSjC9DvHf4tEo5OBuORyd+cbuJMBCgCUcMhHNFGR0XYXtctF4Ftle
SlLmg/VHzt+076sl8F9MnUm0qVjJDWN7TlABvujtDaON9ro7dDLnkWGM7lkE0QrG
oTDsFpu1ePHgLvVYlPLT0ZS6nUDrF5RybEXn3Lz7CBSo0WjqKHMRaIJdOfw5Hv3N
rPRDiq+uOxOGBg==
-----END CERTIFICATE-----