Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File:                     _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier:          lEBjU4BfLp8AgyUuzGmlUKg151AM/nz5vuh71gini+Y=
Subject key identifier:   A1:19:86:03:8D:05:56:28:BC:C0:25:AB:C8:58:0A:81:15:E7:A2:85
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer:       /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial:       01962E61A6DDF2BEEA0EEA5DE249AEE3B551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number:          136A
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
                          2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: QcT7dEM7c8aPJNu7bQFQO/mtfTdk0g+Mb76D4CFAA4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a6:dd:f2:be:ea:0e:ea:5d:e2:49:ae:e3:b5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=a11986038d055628bcc025abc8580a8115e7a285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:52:fe:bd:4f:c1:76:6a:e0:59:c9:7f:c9:
                    10:c7:d7:53:7c:12:4c:dd:5f:86:80:2d:9b:19:51:
                    dc:78:08:47:d3:13:29:0c:0c:3d:10:51:75:b3:c9:
                    78:07:1a:55:f8:72:5c:03:3a:f6:6b:86:21:5c:93:
                    78:65:c8:b1:34:de:b9:cf:60:8a:8f:9b:44:d7:7c:
                    90:d2:a6:14:cc:9d:d5:53:f8:36:8f:f7:4c:8f:b8:
                    78:15:47:d8:8a:62:5c:e5:eb:36:20:a8:1f:80:31:
                    ff:51:75:4f:a7:b1:f3:22:73:e2:f3:c0:18:bb:aa:
                    4d:e3:58:11:f0:e9:34:55:c3:92:34:49:5b:e4:a1:
                    71:d2:f6:92:fb:6d:a2:6c:80:74:05:ec:5b:e0:c3:
                    36:30:33:ee:e7:b4:36:ba:6e:72:03:eb:15:6b:e4:
                    05:94:97:34:57:22:fc:b0:b0:b6:36:69:69:cf:68:
                    3f:f0:7d:e0:e4:01:21:06:ad:94:26:13:5b:6b:c6:
                    02:9c:fb:e9:f0:1f:ab:d2:32:d4:5a:91:54:3f:ed:
                    f7:8f:a6:9d:ed:b5:41:53:99:50:8b:29:42:46:cc:
                    a0:81:ae:a4:de:0d:ee:53:bc:97:28:85:f2:58:38:
                    0d:92:7c:27:76:d2:5a:c6:1d:cf:6c:29:9d:a2:b2:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:86:03:8D:05:56:28:BC:C0:25:AB:C8:58:0A:81:15:E7:A2:85
            X509v3 Authority Key Identifier:
                keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:7f:67:3f:80:82:38:b3:f8:82:bf:ee:67:71:ea:93:66:
         a8:43:7e:1b:fb:96:9a:a9:25:b9:ae:38:08:63:59:7a:c5:2a:
         bb:94:0d:88:6e:9f:85:7a:28:53:92:29:60:fe:a8:17:8f:a7:
         e9:33:97:8b:0e:27:d7:67:11:28:6f:45:ce:4b:2a:e5:be:ed:
         21:b0:9a:da:ce:6c:71:2c:92:95:15:cd:52:d0:24:b1:3f:8d:
         20:95:7f:56:ac:85:19:63:54:fe:00:29:c3:2f:47:a0:65:04:
         3d:56:fb:96:13:27:61:5b:12:5d:fe:66:e4:eb:2b:77:a6:6f:
         81:e8:de:e5:25:97:17:f4:93:6c:c2:ad:4a:17:5e:ef:99:a3:
         23:ee:73:c2:26:9f:20:9c:ab:72:a6:91:ec:cf:86:b6:5a:dc:
         1b:9f:4e:a9:34:9d:7b:cd:a1:bb:42:4b:48:cb:53:2a:e9:49:
         32:f4:04:85:37:01:e0:99:99:c0:70:35:fb:2b:2a:3a:84:c7:
         2e:0e:73:31:ca:e7:46:48:6d:c0:c0:56:4f:c5:65:dc:6e:d0:
         49:9d:4f:d9:cd:f9:01:3e:49:35:47:f5:6e:19:98:e5:ab:26:
         84:e5:bd:0a:8c:22:a3:8a:2e:f1:e0:c2:39:f1:fd:a0:4b:ef:
         e7:85:3b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYabd8r7qDupd4kmu47VRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjYyMWVlMzFlMDZhYWRjMWNhM2EzNzZlNDU3ZDhkMDQ5
NmIxMGQwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
EyhhMTE5ODYwMzhkMDU1NjI4YmNjMDI1YWJjODU4MGE4MTE1ZTdhMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNhS/r1PwXZq4FnJf8kQx9dTfBJM
3V+GgC2bGVHceAhH0xMpDAw9EFF1s8l4BxpV+HJcAzr2a4YhXJN4ZcixNN65z2CK
j5tE13yQ0qYUzJ3VU/g2j/dMj7h4FUfYimJc5es2IKgfgDH/UXVPp7HzInPi88AY
u6pN41gR8Ok0VcOSNElb5KFx0vaS+22ibIB0Bexb4MM2MDPu57Q2um5yA+sVa+QF
lJc0VyL8sLC2Nmlpz2g/8H3g5AEhBq2UJhNba8YCnPvp8B+r0jLUWpFUP+33j6ad
7bVBU5lQiylCRsygga6k3g3uU7yXKIXyWDgNknwndtJaxh3PbCmdorIsSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEZhgONBVYovMAlq8hYCoEV56KFMB8GA1UdIwQY
MBaAFPwmIe4x4Gqtwco6N25FfY0ElrENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQt
MTE5YmJkNzYxOTczLzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQtMTE5YmJkNzYxOTcz
LzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekF/Zz+A
gjiz+IK/7mdx6pNmqEN+G/uWmqklua44CGNZesUqu5QNiG6fhXooU5IpYP6oF4+n
6TOXiw4n12cRKG9Fzksq5b7tIbCa2s5scSySlRXNUtAksT+NIJV/VqyFGWNU/gAp
wy9HoGUEPVb7lhMnYVsSXf5m5Osrd6Zvgeje5SWXF/STbMKtShde75mjI+5zwiaf
IJyrcqaR7M+GtlrcG59OqTSde82hu0JLSMtTKulJMvQEhTcB4JmZwHA1+ysqOoTH
Lg5zMcrnRkhtwMBWT8Vl3G7QSZ1P2c35AT5JNUf1bhmY5asmhOW9Cowio4ou8eDC
OfH9oEvv54U7TQ==
-----END CERTIFICATE-----