Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File:                     1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier:          uDyjqZnvn+qV+cc4U4x0sTwZD+6HszhatgYznc2QmbA=
Subject key identifier:   2C:EF:92:2A:5C:A8:79:F5:51:F0:0A:BB:38:5F:28:5F:3D:20:90:4C
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer:       /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial:       01962FAB88019998D14E17C2915D94024C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: tAZ5cguy0sS9QL1PYg8aXz6eOQ3LIY1aLMx5BpUd+DY=)
                          2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
                          3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:88:01:99:98:d1:4e:17:c2:91:5d:94:02:4c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=2cef922a5ca879f551f00abb385f285f3d20904c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:e9:c9:15:14:73:a1:a9:ca:6d:8e:b1:47:
                    70:4a:91:77:c9:08:5a:93:65:27:4e:a0:58:97:39:
                    5f:ed:ba:e2:ee:15:1c:29:b6:86:f0:58:17:02:6f:
                    a0:f3:e4:b7:8c:6a:d9:30:94:2d:84:b1:eb:ff:02:
                    c3:70:ec:08:df:8e:15:33:fe:ca:c7:58:4e:93:7e:
                    fd:54:02:fe:13:fa:b1:96:d5:9e:1d:d9:c7:a4:dd:
                    3e:de:10:52:33:34:70:31:ad:e3:bc:42:1e:f2:3c:
                    2a:37:72:5a:ee:ef:f0:87:c2:28:0e:89:f0:d2:ae:
                    8c:6b:03:cc:84:9b:0a:37:90:45:65:d4:a9:86:30:
                    67:e4:a2:b0:95:4e:2a:c9:41:52:4c:71:7a:2b:66:
                    26:83:be:33:5a:35:ab:2a:d1:75:91:cb:5d:32:40:
                    1f:84:ab:24:02:ce:a2:4d:5d:6c:62:5c:4f:05:c4:
                    f2:b8:83:e5:7b:81:84:5b:0b:e7:3a:0b:52:ba:5e:
                    d8:81:c1:4e:69:95:da:db:9c:d6:ad:57:f2:67:e3:
                    8d:f7:da:40:d1:e8:fd:3a:49:38:2a:c8:fa:6b:b7:
                    49:4a:12:9e:e4:b1:5d:9f:ad:73:c7:f2:9b:90:9a:
                    b3:b6:9c:4e:88:57:d0:8b:7e:15:f8:e3:68:f7:a4:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:92:2A:5C:A8:79:F5:51:F0:0A:BB:38:5F:28:5F:3D:20:90:4C
            X509v3 Authority Key Identifier:
                keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:39:84:c9:23:d6:10:36:d1:ba:36:5c:4a:81:41:30:11:
         9d:3c:d5:9a:75:e5:ac:3a:67:4a:2d:50:4f:d2:70:ee:1c:92:
         18:27:07:de:20:f0:96:7e:1f:4a:b3:8b:b2:f9:c0:2e:d5:41:
         4b:6b:91:a5:78:ca:f3:18:27:94:5e:79:90:f8:c2:37:b2:4f:
         1e:f2:9b:db:16:28:d6:3e:cd:48:c3:1d:b4:51:5d:d9:86:7d:
         9b:79:e5:2e:85:9b:0f:8e:29:c4:77:4e:0e:49:45:a5:70:8d:
         5d:38:3b:c8:68:5e:65:95:5a:f4:21:7e:f3:89:81:97:e2:e2:
         53:b0:c1:b1:74:29:39:ab:57:13:51:05:26:ea:19:8a:60:90:
         3d:8b:c6:d5:dd:d0:2b:05:71:c1:0a:a1:74:ed:bc:11:ae:82:
         58:c0:8a:1e:5f:dd:32:3e:e4:6f:88:17:e1:32:eb:e7:a1:17:
         b4:91:47:23:c0:e4:3b:db:32:76:36:dc:21:5f:60:65:6b:7d:
         14:7b:06:9e:65:6d:25:ef:c7:d1:b2:d3:8b:ba:72:1b:6c:3c:
         12:f9:86:eb:26:dd:3e:ee:0e:a3:c1:5c:ea:26:1e:16:03:a6:
         2b:9a:c8:5b:96:01:19:b1:14:55:ae:a2:2c:40:cd:48:72:7d:
         ca:da:c9:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq4gBmZjRThfCkV2UAkw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4
YzE4YzcwHhcNMjUwNDEzMTUwMTMyWhcNMjUwNDE0MTUwMTMyWjAzMTEwLwYDVQQD
EygyY2VmOTIyYTVjYTg3OWY1NTFmMDBhYmIzODVmMjg1ZjNkMjA5MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9zpyRUUc6Gpym2OsUdwSpF3yQha
k2UnTqBYlzlf7bri7hUcKbaG8FgXAm+g8+S3jGrZMJQthLHr/wLDcOwI344VM/7K
x1hOk379VAL+E/qxltWeHdnHpN0+3hBSMzRwMa3jvEIe8jwqN3Ja7u/wh8IoDonw
0q6MawPMhJsKN5BFZdSphjBn5KKwlU4qyUFSTHF6K2Ymg74zWjWrKtF1kctdMkAf
hKskAs6iTV1sYlxPBcTyuIPle4GEWwvnOgtSul7YgcFOaZXa25zWrVfyZ+ON99pA
0ej9Okk4Ksj6a7dJShKe5LFdn61zx/KbkJqztpxOiFfQi34V+ONo96QM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzvkipcqHn1UfAKuzhfKF89IJBMMB8GA1UdIwQY
MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt
M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4
LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsI5hMkj
1hA20bo2XEqBQTARnTzVmnXlrDpnSi1QT9Jw7hySGCcH3iDwln4fSrOLsvnALtVB
S2uRpXjK8xgnlF55kPjCN7JPHvKb2xYo1j7NSMMdtFFd2YZ9m3nlLoWbD44pxHdO
DklFpXCNXTg7yGheZZVa9CF+84mBl+LiU7DBsXQpOatXE1EFJuoZimCQPYvG1d3Q
KwVxwQqhdO28Ea6CWMCKHl/dMj7kb4gX4TLr56EXtJFHI8DkO9sydjbcIV9gZWt9
FHsGnmVtJe/H0bLTi7pyG2w8EvmG6ybdPu4Oo8Fc6iYeFgOmK5rIW5YBGbEUVa6i
LEDNSHJ9ytrJBA==
-----END CERTIFICATE-----