Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
File:                     FVCvriuu-2uI-XUbsyGOs5uUtXY.mft (raw, json)
Hash identifier:          0xD4pGYmjEwml9CTPN6KLd6VW2rffLjYxQmgi0fsZQg=
Subject key identifier:   61:A3:DF:C9:8E:BF:03:B0:0C:36:82:C6:1B:BC:DF:85:34:FD:2A:CB
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Certificate issuer:       /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial:       01962FAB2E2F75130D05C774BF87022C8703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: FVCvriuu-2uI-XUbsyGOs5uUtXY.crl (hash: rTNyGuS8cgcCcfadVrBWuYp01C55QWvt1MV9Y+2MjVA=)
                          2: t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa (hash: bT5E6LtHCC1AluQgd2lvyOIQ+/FsjKMjc8eOVOWcAoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:2f:75:13:0d:05:c7:74:bf:87:02:2c:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=61a3dfc98ebf03b00c3682c61bbcdf8534fd2acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:04:ce:0e:8e:40:68:f6:25:b4:af:67:e2:
                    b1:45:ff:a3:26:8f:01:a4:14:d0:d6:ee:f7:77:41:
                    48:26:ad:1a:83:00:31:41:27:fb:20:bc:d5:05:b7:
                    07:99:c0:6f:2d:00:4a:97:f0:95:c4:59:66:32:c6:
                    2c:dc:ad:b8:93:f0:d6:a8:d8:76:fd:26:95:0b:fb:
                    ba:b6:c2:d3:1e:59:29:1a:51:5f:0c:32:58:7e:75:
                    90:e1:90:dc:f7:85:ff:a3:11:67:17:9f:bb:62:17:
                    6f:b4:16:9b:37:0b:98:5b:d9:16:a8:bf:d4:ee:64:
                    07:a6:f7:84:fe:2e:dd:77:a2:0e:a4:12:2c:c4:f2:
                    5a:40:cd:80:a5:e1:31:ae:c8:a9:2e:0a:54:f0:75:
                    b2:ee:dd:ea:c0:ba:96:09:8b:aa:a3:dc:2f:56:b7:
                    b9:01:02:f6:3c:8c:c5:9f:86:cc:4d:c7:0a:cd:c8:
                    58:70:e1:8a:4b:41:69:6a:86:02:2c:02:71:78:ef:
                    91:e3:03:bd:54:c6:5a:e6:5b:d4:e3:50:0e:b2:2d:
                    b4:71:ea:45:2a:f7:70:b7:62:a7:14:7b:f6:68:59:
                    07:42:bb:4e:d1:2f:93:22:0d:d6:0a:05:dc:f4:32:
                    2a:4b:f9:ee:84:e7:1c:47:57:d5:2f:8d:16:f0:17:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:DF:C9:8E:BF:03:B0:0C:36:82:C6:1B:BC:DF:85:34:FD:2A:CB
            X509v3 Authority Key Identifier:
                keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:1a:e8:f7:44:bc:c7:59:c0:b4:db:67:cc:32:1b:38:78:
         29:5f:4b:08:27:61:da:67:77:bc:1f:42:29:95:b4:7c:16:2e:
         57:41:94:9f:c0:ef:32:38:d5:49:59:9c:e7:8c:ac:5d:0f:84:
         4f:94:ac:67:05:ea:50:1e:6b:09:3e:1c:3a:8c:f7:c9:f8:ec:
         56:68:da:e0:45:0d:c9:31:8e:d4:44:11:20:e0:c5:2f:c1:03:
         ae:90:0f:7e:5d:ec:49:5c:86:1e:af:48:f8:3f:73:c6:d5:86:
         49:c6:45:eb:42:54:1e:33:00:6a:e7:db:71:98:d4:41:9c:fe:
         68:52:a0:df:6e:f0:f7:25:68:49:17:37:a1:61:f1:c3:17:6e:
         11:33:83:84:91:2f:6a:65:f3:e4:16:45:30:ba:6c:3d:c7:dc:
         7f:d8:a5:01:c8:58:80:4a:22:0c:92:57:01:bb:0f:56:81:f2:
         4f:c2:3c:d9:94:dc:f5:ab:48:80:bb:07:3c:80:d3:8c:13:2a:
         f5:72:66:39:25:08:79:28:b0:f4:58:d7:e6:4c:c4:f2:1f:6e:
         28:98:2c:c6:ab:77:53:ce:19:24:a2:00:2a:c7:04:49:ca:69:
         48:15:19:e3:a1:8c:58:10:a5:9a:92:eb:20:84:1e:08:78:ba:
         76:a3:e3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqy4vdRMNBcd0v4cCLIcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NTBhZmFlMmJhZWZiNmI4OGY5NzUxYmIzMjE4ZWIzOWI5
NGI1NzYwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
Eyg2MWEzZGZjOThlYmYwM2IwMGMzNjgyYzYxYmJjZGY4NTM0ZmQyYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXIEzg6OQGj2JbSvZ+KxRf+jJo8B
pBTQ1u73d0FIJq0agwAxQSf7ILzVBbcHmcBvLQBKl/CVxFlmMsYs3K24k/DWqNh2
/SaVC/u6tsLTHlkpGlFfDDJYfnWQ4ZDc94X/oxFnF5+7YhdvtBabNwuYW9kWqL/U
7mQHpveE/i7dd6IOpBIsxPJaQM2ApeExrsipLgpU8HWy7t3qwLqWCYuqo9wvVre5
AQL2PIzFn4bMTccKzchYcOGKS0FpaoYCLAJxeO+R4wO9VMZa5lvU41AOsi20cepF
Kvdwt2KnFHv2aFkHQrtO0S+TIg3WCgXc9DIqS/nuhOccR1fVL40W8BeutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGj38mOvwOwDDaCxhu834U0/SrLMB8GA1UdIwQY
MBaAFBVQr64rrvtriPl1G7MhjrOblLV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlZDdnJpdXUtMnVJLVhVYnN5R09zNXVVdFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82Mjc4YzYtYzIwMS00NzQwLWE1ZjEt
NjZkNjcxZjg0MmIzLzEvRlZDdnJpdXUtMnVJLVhVYnN5R09zNXVVdFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82Mjc4YzYtYzIwMS00NzQwLWE1ZjEtNjZkNjcxZjg0MmIz
LzEvRlZDdnJpdXUtMnVJLVhVYnN5R09zNXVVdFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK4a6PdE
vMdZwLTbZ8wyGzh4KV9LCCdh2md3vB9CKZW0fBYuV0GUn8DvMjjVSVmc54ysXQ+E
T5SsZwXqUB5rCT4cOoz3yfjsVmja4EUNyTGO1EQRIODFL8EDrpAPfl3sSVyGHq9I
+D9zxtWGScZF60JUHjMAaufbcZjUQZz+aFKg327w9yVoSRc3oWHxwxduETODhJEv
amXz5BZFMLpsPcfcf9ilAchYgEoiDJJXAbsPVoHyT8I82ZTc9atIgLsHPIDTjBMq
9XJmOSUIeSiw9FjX5kzE8h9uKJgsxqt3U84ZJKIAKscEScppSBUZ46GMWBClmpLr
IIQeCHi6dqPjyA==
-----END CERTIFICATE-----