Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File:                     ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier:          WPbwdhknEKQY8GJ6gE4Pb0+zOVbI3HLYMfftsJeEKYo=
Subject key identifier:   C3:2F:21:70:BC:D6:D5:45:34:58:CE:07:91:C7:5F:07:67:F2:0A:64
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer:       /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial:       01962F74C9FAEE951C8565769CDF65D0745C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number:          0C12
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
                          2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: fyh7mu8DyhXyfbRyLhA3C1kG4xRgK1ffYa7nX2fC0h0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:fa:ee:95:1c:85:65:76:9c:df:65:d0:74:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=c32f2170bcd6d5453458ce0791c75f0767f20a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:04:1f:da:cb:6b:cc:46:54:09:f3:0d:37:
                    9a:28:84:9f:de:0b:fc:6e:06:32:ed:8e:2a:c2:c1:
                    32:b1:86:85:b0:cc:86:f9:d5:98:d8:76:78:c7:aa:
                    7d:ee:0d:74:9e:2d:db:fa:fd:31:3c:02:48:ed:be:
                    5f:5c:26:90:aa:3b:06:a1:e8:2a:59:88:11:44:1f:
                    51:32:7d:f5:22:63:bb:5f:8c:5e:96:3d:84:02:b5:
                    ca:f9:42:56:98:c0:9a:33:cb:54:84:43:88:9e:fb:
                    df:90:54:43:32:08:b1:c0:09:30:ca:24:de:a7:de:
                    cb:4b:aa:ed:4b:8f:17:6c:39:53:66:44:b0:f7:a3:
                    7c:6b:ce:87:2e:72:cb:4f:fd:ed:5e:f3:1a:47:c1:
                    3d:cc:22:75:b7:0a:bc:20:02:c5:68:c4:06:68:bb:
                    e9:39:2b:e8:a3:4c:58:77:18:b2:ac:ad:d9:d4:35:
                    68:fd:36:af:7d:74:34:5e:78:99:8d:14:0b:27:bc:
                    a1:40:84:aa:19:f6:f1:c7:47:7f:c6:75:20:3c:c6:
                    d3:f9:35:fa:35:9a:ba:fa:93:9b:19:df:2b:86:0d:
                    01:82:52:b7:d0:4a:c0:fc:06:39:20:5d:72:15:16:
                    08:42:11:7b:f9:14:19:f4:b8:89:b0:09:88:96:64:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:21:70:BC:D6:D5:45:34:58:CE:07:91:C7:5F:07:67:F2:0A:64
            X509v3 Authority Key Identifier:
                keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ef:e8:3e:36:93:bb:dc:cf:dd:2f:ed:68:c0:ee:96:5f:a0:
         c3:06:7e:76:b9:3e:8f:99:7e:8c:6b:60:23:07:89:8c:e9:2d:
         2e:ad:e4:f7:77:d3:3c:20:50:69:61:31:3c:4d:b1:fc:95:23:
         ff:df:e3:b6:ed:a7:21:97:46:83:17:d4:39:db:a7:8c:7d:d0:
         c9:3d:12:af:1a:af:74:08:a0:b0:23:74:12:d1:b4:99:70:cc:
         fa:60:66:51:6a:f5:26:cc:e7:49:a0:9a:06:56:22:a9:2a:a6:
         a5:bf:b1:b7:c7:2a:20:e3:1e:65:6c:d5:ba:60:ca:97:53:0c:
         53:dd:29:86:e5:f2:b2:bb:eb:59:4b:30:ee:be:68:ae:ea:d0:
         e7:91:57:c7:61:e2:da:88:d7:4a:35:e1:09:1c:ed:3d:f3:04:
         b3:98:80:e7:dd:c3:90:84:15:a1:5e:dd:f4:ae:fd:1f:47:d0:
         46:4d:fa:7c:2e:3a:06:c3:a9:fc:af:d1:db:f7:fa:9f:32:b3:
         3f:18:2f:08:0e:a3:a4:81:07:5c:06:ac:8a:0b:1b:94:79:e5:
         83:6d:0a:52:ec:2c:be:86:ec:5e:fb:67:49:b4:8a:15:d0:1b:
         0a:2f:f9:52:70:2a:97:14:3f:6a:c8:f6:45:2e:ec:c1:e3:ed:
         39:20:4e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMn67pUchWV2nN9l0HRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwNDEzMTQwMTQ1WhcNMjUwNDE0MTQwMTQ1WjAzMTEwLwYDVQQD
EyhjMzJmMjE3MGJjZDZkNTQ1MzQ1OGNlMDc5MWM3NWYwNzY3ZjIwYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIUEH9rLa8xGVAnzDTeaKISf3gv8
bgYy7Y4qwsEysYaFsMyG+dWY2HZ4x6p97g10ni3b+v0xPAJI7b5fXCaQqjsGoegq
WYgRRB9RMn31ImO7X4xelj2EArXK+UJWmMCaM8tUhEOInvvfkFRDMgixwAkwyiTe
p97LS6rtS48XbDlTZkSw96N8a86HLnLLT/3tXvMaR8E9zCJ1twq8IALFaMQGaLvp
OSvoo0xYdxiyrK3Z1DVo/TavfXQ0XniZjRQLJ7yhQISqGfbxx0d/xnUgPMbT+TX6
NZq6+pObGd8rhg0BglK30ErA/AY5IF1yFRYIQhF7+RQZ9LiJsAmIlmR95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMvIXC81tVFNFjOB5HHXwdn8gpkMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgO/oPjaT
u9zP3S/taMDull+gwwZ+drk+j5l+jGtgIweJjOktLq3k93fTPCBQaWExPE2x/JUj
/9/jtu2nIZdGgxfUOdunjH3QyT0SrxqvdAigsCN0EtG0mXDM+mBmUWr1JsznSaCa
BlYiqSqmpb+xt8cqIOMeZWzVumDKl1MMU90phuXysrvrWUsw7r5orurQ55FXx2Hi
2ojXSjXhCRztPfMEs5iA593DkIQVoV7d9K79H0fQRk36fC46BsOp/K/R2/f6nzKz
PxgvCA6jpIEHXAasigsblHnlg20KUuwsvobsXvtnSbSKFdAbCi/5UnAqlxQ/asj2
RS7swePtOSBOnA==
-----END CERTIFICATE-----