Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File:                     sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier:          yUgTpAFRCtCz1uV9ZmI47GcT4ulG3oZlT7E0PXvikQs=
Subject key identifier:   37:4B:7C:A3:CA:58:B2:1A:41:48:E1:77:50:BF:41:2B:17:A4:24:B9
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer:       /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial:       01962FAB2BAE0F496A750C36694429682786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number:          03C6
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
                          2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: w3bgCQVkfSKarI6KW4Q7tJYOQoOx9TmIubjOefvJfDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:ae:0f:49:6a:75:0c:36:69:44:29:68:27:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b085804db153eb724c58557c79359c4408205550
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=374b7ca3ca58b21a4148e17750bf412b17a424b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:2b:e7:56:db:bf:ba:1f:ef:0a:7c:bd:21:
                    9e:f0:47:60:4e:02:67:67:3f:0d:c1:b7:b9:4d:68:
                    7a:59:38:70:d3:6b:08:1f:f1:51:ef:b9:eb:ae:93:
                    9e:d6:c4:85:3f:e6:36:e0:0d:c2:64:50:10:50:4c:
                    e7:e0:bb:52:c0:cc:21:c8:3c:78:b6:6a:68:82:5f:
                    49:95:d8:c2:03:05:92:d3:8a:29:93:55:2a:61:3c:
                    89:d2:65:5d:15:63:23:d9:8c:ef:3e:58:74:3d:04:
                    26:38:e7:6e:45:2c:32:6c:d1:8a:53:26:f5:b1:69:
                    05:f6:bc:6e:11:71:44:33:e5:97:db:87:2c:3b:a4:
                    fc:eb:ba:68:a4:ca:1d:e9:33:ad:f1:9e:16:46:fc:
                    6f:be:44:3b:96:ab:1c:67:83:ac:1f:a3:09:66:78:
                    84:25:fc:0b:30:3f:bb:22:68:49:03:cb:04:e8:97:
                    ed:fc:49:e6:89:b0:dd:39:e3:cc:16:ef:87:18:ed:
                    1d:2f:79:d8:8c:7c:43:23:f0:54:82:72:9a:13:74:
                    26:4c:ab:8b:43:9b:e6:e2:ef:ce:62:56:10:24:28:
                    79:89:e0:f8:db:ae:96:ea:fa:e8:2e:7d:c3:2d:f8:
                    9e:b8:c7:bc:48:6a:9e:fd:e4:05:dd:bb:12:35:5b:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:7C:A3:CA:58:B2:1A:41:48:E1:77:50:BF:41:2B:17:A4:24:B9
            X509v3 Authority Key Identifier:
                keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:63:ea:79:7b:73:19:93:43:72:c1:9c:06:fd:8d:14:d9:
         fa:7c:a6:47:3a:bf:54:3f:4c:2f:16:c8:c1:e6:91:fa:34:ea:
         ba:2e:fe:9a:31:29:b1:d7:40:b3:2a:8d:89:40:84:48:3d:01:
         e6:7d:05:d4:dc:69:af:8c:86:31:a6:03:73:28:e7:f6:57:a0:
         53:8c:50:42:5b:61:f7:1a:d5:c4:87:31:fd:aa:16:a8:49:4a:
         eb:c6:b0:25:d5:8e:cf:fa:a1:d4:15:8b:3a:cb:3b:1c:6e:78:
         f3:99:a2:ed:4f:b0:c4:17:f7:85:42:ad:fd:48:17:3d:62:ec:
         93:5d:87:9d:1f:f6:77:b0:ed:21:b2:30:22:ce:92:37:87:74:
         b0:54:f1:2f:ff:25:3d:f2:29:99:4d:f1:c3:7e:d7:70:4e:68:
         2a:c7:7f:d7:30:54:3c:09:0d:ee:d0:f7:bf:00:30:f9:af:91:
         66:7f:d2:b8:86:74:a5:17:4b:38:27:c8:ae:5d:77:d8:8d:56:
         fb:88:b2:46:1b:3c:2a:60:7c:60:14:e0:c9:d2:44:af:36:6f:
         c0:69:af:dc:e7:cc:4a:ed:54:c1:5b:87:b6:11:88:53:0d:48:
         f9:56:ef:24:4d:50:e7:47:1a:7e:60:26:91:80:b5:65:f3:7b:
         97:50:94:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyuuD0lqdQw2aUQpaCeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwODU4MDRkYjE1M2ViNzI0YzU4NTU3Yzc5MzU5YzQ0MDgy
MDU1NTAwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
EygzNzRiN2NhM2NhNThiMjFhNDE0OGUxNzc1MGJmNDEyYjE3YTQyNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSsr51bbv7of7wp8vSGe8EdgTgJn
Zz8Nwbe5TWh6WThw02sIH/FR77nrrpOe1sSFP+Y24A3CZFAQUEzn4LtSwMwhyDx4
tmpogl9JldjCAwWS04opk1UqYTyJ0mVdFWMj2YzvPlh0PQQmOOduRSwybNGKUyb1
sWkF9rxuEXFEM+WX24csO6T867popMod6TOt8Z4WRvxvvkQ7lqscZ4OsH6MJZniE
JfwLMD+7ImhJA8sE6Jft/EnmibDdOePMFu+HGO0dL3nYjHxDI/BUgnKaE3QmTKuL
Q5vm4u/OYlYQJCh5ieD4266W6vroLn3DLfieuMe8SGqe/eQF3bsSNVu7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdLfKPKWLIaQUjhd1C/QSsXpCS5MB8GA1UdIwQY
MBaAFLCFgE2xU+tyTFhVfHk1nEQIIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUt
ZDI1YjdjYTNkYjg5LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUtZDI1YjdjYTNkYjg5
LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/Fj6nl7
cxmTQ3LBnAb9jRTZ+nymRzq/VD9MLxbIweaR+jTqui7+mjEpsddAsyqNiUCESD0B
5n0F1Nxpr4yGMaYDcyjn9legU4xQQlth9xrVxIcx/aoWqElK68awJdWOz/qh1BWL
Oss7HG5485mi7U+wxBf3hUKt/UgXPWLsk12HnR/2d7DtIbIwIs6SN4d0sFTxL/8l
PfIpmU3xw37XcE5oKsd/1zBUPAkN7tD3vwAw+a+RZn/SuIZ0pRdLOCfIrl132I1W
+4iyRhs8KmB8YBTgydJErzZvwGmv3OfMSu1UwVuHthGIUw1I+VbvJE1Q50cafmAm
kYC1ZfN7l1CUbg==
-----END CERTIFICATE-----