Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File:                     F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier:          99o/wp5ZVyTedDZvvUdziI+WR0DMDdvgrkxIxa3NkQg=
Subject key identifier:   A6:C0:FC:79:19:49:2B:8A:6D:CC:FE:84:38:E8:7E:13:71:57:89:BC
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer:       /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial:       01962E61F3D13D01CFDB38DB479D12E93A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number:          0BFA
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: Cj4fd15DGO9EBH6bMdoHmoQ400RSkjnYqV/wIEahCnc=)
                          2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:d1:3d:01:cf:db:38:db:47:9d:12:e9:3a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=a6c0fc7919492b8a6dccfe8438e87e13715789bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:3f:8b:18:6f:b8:ad:ac:f5:04:c4:9d:ae:
                    63:9b:10:04:4f:9e:02:67:48:21:e7:b2:95:12:71:
                    73:0a:7f:c5:f7:aa:5f:3e:77:7a:d0:42:77:38:23:
                    f5:fb:80:61:c9:fc:87:33:19:c6:e2:c9:eb:46:46:
                    5c:21:8e:49:9f:93:f9:92:59:9d:a9:9c:14:8f:bb:
                    aa:04:74:18:05:0e:22:23:a0:98:d7:e0:0a:43:13:
                    aa:ac:46:c3:81:39:ad:0b:9c:65:3b:ce:a7:41:81:
                    72:1b:9f:07:cc:d0:d0:8b:3f:c4:1b:8b:09:4b:c7:
                    ad:3c:e5:e6:c9:36:ac:ac:83:a8:94:09:6f:38:e3:
                    4c:96:2c:18:5c:7d:6c:2c:38:40:30:13:a0:12:87:
                    32:05:98:90:44:79:70:37:60:20:d3:eb:d8:2b:e2:
                    0c:1f:16:e7:41:ca:20:b7:b8:6e:6f:fc:ec:fd:b3:
                    23:70:2e:7a:02:da:cf:ba:b5:e0:66:b1:7b:e4:6a:
                    52:b5:86:15:17:65:18:26:2b:e6:fa:6a:69:6c:1d:
                    78:b2:b5:5b:f1:73:71:da:6b:4e:18:98:3b:06:52:
                    bb:92:c3:36:2a:9f:f9:be:8a:23:1d:95:dc:6c:69:
                    82:94:d0:de:63:2a:1a:1a:6b:49:74:90:62:7c:44:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C0:FC:79:19:49:2B:8A:6D:CC:FE:84:38:E8:7E:13:71:57:89:BC
            X509v3 Authority Key Identifier:
                keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:e9:e4:f7:bc:e6:e8:da:6f:85:6a:79:6d:f2:67:62:ad:41:
         79:85:60:18:fd:97:8e:3a:66:9a:07:04:c5:55:3e:61:40:1d:
         79:8c:b0:55:15:e7:bb:35:a2:d5:55:73:42:3f:eb:3d:f5:92:
         1d:33:b7:54:be:c6:c2:b2:39:41:e3:b6:8c:7c:aa:c5:07:9c:
         0c:74:ee:ae:b1:0a:7e:cd:c2:97:2d:18:9b:69:8c:7b:a7:0f:
         d5:7e:0d:52:74:b7:4c:03:13:70:18:54:d6:66:a5:6c:0d:f8:
         0a:d1:a6:8b:37:4b:4f:79:19:40:b8:78:5c:a1:94:56:ff:9f:
         69:06:cb:90:19:95:17:f8:9c:dc:50:f2:2b:45:70:0f:c1:c9:
         a5:24:7a:33:11:d8:ed:81:2e:89:9e:a0:0b:c6:c1:3f:6a:3f:
         f7:12:fa:b7:60:11:bc:95:8f:37:6b:d2:88:9f:c2:a4:fd:83:
         42:db:5c:54:d2:7e:1f:da:e4:0e:7f:e3:17:09:43:aa:58:af:
         56:7c:69:70:3d:f4:4a:b8:70:a9:4b:a9:dc:bc:21:52:4b:93:
         39:e8:03:9d:d8:de:eb:12:a1:43:5c:c3:aa:cf:52:9a:e1:2b:
         86:d3:37:83:f0:5b:1d:53:5b:0f:c8:f1:50:66:31:17:24:83:
         27:a3:fb:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfPRPQHP2zjbR50S6TouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmViNzFiZDU1NTc2ZjQ1NzYzYmFkZWI2NzZlZDU5OTkw
ZDM5NmEwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
EyhhNmMwZmM3OTE5NDkyYjhhNmRjY2ZlODQzOGU4N2UxMzcxNTc4OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu4/ixhvuK2s9QTEna5jmxAET54C
Z0gh57KVEnFzCn/F96pfPnd60EJ3OCP1+4BhyfyHMxnG4snrRkZcIY5Jn5P5klmd
qZwUj7uqBHQYBQ4iI6CY1+AKQxOqrEbDgTmtC5xlO86nQYFyG58HzNDQiz/EG4sJ
S8etPOXmyTasrIOolAlvOONMliwYXH1sLDhAMBOgEocyBZiQRHlwN2Ag0+vYK+IM
HxbnQcogt7hub/zs/bMjcC56AtrPurXgZrF75GpStYYVF2UYJivm+mppbB14srVb
8XNx2mtOGJg7BlK7ksM2Kp/5voojHZXcbGmClNDeYyoaGmtJdJBifERQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbA/HkZSSuKbcz+hDjofhNxV4m8MB8GA1UdIwQY
MBaAFBdutxvVVXb0V2O63rZ27VmZDTlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTIt
OWRkM2QyMTkwN2EzLzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTItOWRkM2QyMTkwN2Ez
LzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2unk97zm
6NpvhWp5bfJnYq1BeYVgGP2XjjpmmgcExVU+YUAdeYywVRXnuzWi1VVzQj/rPfWS
HTO3VL7GwrI5QeO2jHyqxQecDHTurrEKfs3Cly0Ym2mMe6cP1X4NUnS3TAMTcBhU
1malbA34CtGmizdLT3kZQLh4XKGUVv+faQbLkBmVF/ic3FDyK0VwD8HJpSR6MxHY
7YEuiZ6gC8bBP2o/9xL6t2ARvJWPN2vSiJ/CpP2DQttcVNJ+H9rkDn/jFwlDqliv
VnxpcD30SrhwqUup3LwhUkuTOegDndje6xKhQ1zDqs9SmuErhtM3g/BbHVNbD8jx
UGYxFySDJ6P7fQ==
-----END CERTIFICATE-----