Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
File:                     pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json)
Hash identifier:          2ohM1k51PPjdXWMwpSOoefgw3lr6EXlVp0UqEMF8cU4=
Subject key identifier:   9C:D5:5B:6D:91:45:C1:C7:6E:78:75:83:BC:4D:B6:DD:F7:A7:0B:01
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Certificate issuer:       /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial:       01962E2B130EAF14E074B71BE7CCFCFED57B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
Manifest number:          0847
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: D5eci654E86WgV4QeWe0mVBSIQA.roa (hash: 9EDx7nuNfSAVu4VJ7kFsnukQOFsHdN+PaVjNZkLYUS0=)
                          2: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: 580iU8PVBsvLOcTltBaofBm5wkg37hsL490i/QBcA7E=)
                          3: yvO64MJqKXwU9zQx1VNZmF0vwiQ.roa (hash: suqTW5OcdpqYPj7vinRk1PIGqjKi/55px0F96ecmjEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:13:0e:af:14:e0:74:b7:1b:e7:cc:fc:fe:d5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=9cd55b6d9145c1c76e787583bc4db6ddf7a70b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:b2:86:80:c0:53:cc:1e:7d:f6:05:6b:94:
                    09:58:11:fe:91:dc:ab:3a:89:5e:7c:e4:25:65:8d:
                    9b:f6:c2:aa:a0:94:56:03:1c:3c:3f:49:e7:7a:5b:
                    c3:ca:ce:5e:65:47:3b:c0:4e:c7:34:d3:53:66:19:
                    1c:d3:44:10:00:a3:55:6e:73:1e:95:8d:6b:00:fc:
                    f2:5f:9e:73:8e:1e:7c:1d:e0:d3:88:0d:31:b0:43:
                    f9:e3:bb:4c:84:c0:39:28:c0:99:54:4f:eb:76:4d:
                    e2:f7:ce:49:1b:e1:7f:e5:5b:93:f0:a5:07:ff:ff:
                    44:7f:c1:9f:d6:59:36:95:c6:65:c8:21:e1:cb:d9:
                    f0:f5:7f:25:c9:22:d7:cd:84:c4:0f:c5:84:d6:b3:
                    0a:2e:99:35:78:30:3c:12:cc:2d:8b:d1:78:d7:45:
                    ee:c3:84:55:d0:92:0e:27:a4:ad:eb:e4:c5:24:f7:
                    b9:ef:80:b2:7c:3e:79:0b:d8:e4:ea:14:fd:90:99:
                    60:d1:fb:99:08:b4:56:3f:63:ac:f4:11:2a:73:f4:
                    21:d9:5c:ec:f5:5a:d3:71:ef:2e:76:fe:3e:bb:fe:
                    cc:fc:d0:5d:45:47:08:a1:89:6d:1c:a2:87:7e:ca:
                    9c:b9:22:bc:b7:9c:24:18:62:09:41:f4:9c:1c:d9:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D5:5B:6D:91:45:C1:C7:6E:78:75:83:BC:4D:B6:DD:F7:A7:0B:01
            X509v3 Authority Key Identifier:
                keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:8a:64:55:d4:c2:da:4e:b5:f1:d8:a0:6e:d5:02:17:30:
         6a:19:4b:ff:5e:6c:57:66:bf:7c:89:6e:33:5f:ae:f2:1b:ae:
         69:46:eb:54:53:47:ac:e2:2a:26:44:ec:2a:ca:6f:39:50:13:
         63:1d:76:e7:2c:46:bf:d2:96:19:7c:a3:5e:6f:42:c3:f8:23:
         c7:55:6f:44:15:6b:38:45:07:d6:6c:d1:24:28:81:60:aa:89:
         20:ba:67:19:d5:9c:6b:7a:73:5a:6c:8e:1c:fc:df:cb:f6:09:
         bb:b0:b3:a0:46:a2:eb:37:cf:68:75:36:cf:21:c7:e8:60:1b:
         fe:50:ae:21:26:be:ae:ea:59:74:87:68:57:e6:0c:40:ab:6e:
         48:b4:2d:be:61:27:2c:54:e4:62:7e:2a:78:a4:cc:50:71:81:
         26:fb:60:34:b1:3c:55:ea:3a:a4:3b:67:ec:94:b9:fe:b4:25:
         48:48:8c:9d:1e:2d:2f:d7:d0:cc:2a:b4:4a:8f:22:36:9c:a7:
         34:69:30:b5:3d:13:fc:35:a4:a6:00:16:d1:5e:41:f4:e9:05:
         68:ab:4f:7c:e1:23:bb:9a:80:1c:73:8e:49:8d:ce:e9:db:36:
         1d:e6:cf:12:c8:7f:d1:fd:63:88:30:5e:7a:94:75:28:54:84:
         1d:86:e7:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxMOrxTgdLcb58z8/tV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTk3NTIzOWZkZDQ0M2I3ZDNkODJlMzkyYTllNGFlMzky
MThlZjYwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
Eyg5Y2Q1NWI2ZDkxNDVjMWM3NmU3ODc1ODNiYzRkYjZkZGY3YTcwYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD2yhoDAU8weffYFa5QJWBH+kdyr
OolefOQlZY2b9sKqoJRWAxw8P0nnelvDys5eZUc7wE7HNNNTZhkc00QQAKNVbnMe
lY1rAPzyX55zjh58HeDTiA0xsEP547tMhMA5KMCZVE/rdk3i985JG+F/5VuT8KUH
//9Ef8Gf1lk2lcZlyCHhy9nw9X8lySLXzYTED8WE1rMKLpk1eDA8Eswti9F410Xu
w4RV0JIOJ6St6+TFJPe574CyfD55C9jk6hT9kJlg0fuZCLRWP2Os9BEqc/Qh2Vzs
9VrTce8udv4+u/7M/NBdRUcIoYltHKKHfsqcuSK8t5wkGGIJQfScHNm7AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzVW22RRcHHbnh1g7xNtt33pwsBMB8GA1UdIwQY
MBaAFKWpdSOf3UQ7fT2C45Kp5K45IY72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFsMUk1X2RSRHQ5UFlMamtxbmtyamtoanZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMjcwMGItOTg1My00MTcyLTlhNjEt
YTY5MTQ0OGIyZWM0LzEvcGFsMUk1X2RSRHQ5UFlMamtxbmtyamtoanZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mMjcwMGItOTg1My00MTcyLTlhNjEtYTY5MTQ0OGIyZWM0
LzEvcGFsMUk1X2RSRHQ5UFlMamtxbmtyamtoanZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLyKZFXU
wtpOtfHYoG7VAhcwahlL/15sV2a/fIluM1+u8huuaUbrVFNHrOIqJkTsKspvOVAT
Yx125yxGv9KWGXyjXm9Cw/gjx1VvRBVrOEUH1mzRJCiBYKqJILpnGdWca3pzWmyO
HPzfy/YJu7CzoEai6zfPaHU2zyHH6GAb/lCuISa+rupZdIdoV+YMQKtuSLQtvmEn
LFTkYn4qeKTMUHGBJvtgNLE8Veo6pDtn7JS5/rQlSEiMnR4tL9fQzCq0So8iNpyn
NGkwtT0T/DWkpgAW0V5B9OkFaKtPfOEju5qAHHOOSY3O6ds2HebPEsh/0f1jiDBe
epR1KFSEHYbnbA==
-----END CERTIFICATE-----