Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File:                     Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier:          /vxU58PNBHnieJL3kMOhwVkUUuQ2IvOmHJstyLb5vTo=
Subject key identifier:   72:FC:55:82:FF:3C:25:80:5D:4A:BD:37:D4:0D:C2:8A:62:5B:15:A2
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer:       /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial:       01962E61B563CA55753733462170AEB0AE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number:          024C
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: Lf02ewaDCp7SOyKY5ZgLNA8p8Og9c3I25A7ozWw8R5w=)
                          2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b5:63:ca:55:75:37:33:46:21:70:ae:b0:ae:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=72fc5582ff3c25805d4abd37d40dc28a625b15a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:cc:dc:31:8c:84:7b:66:b5:07:60:1a:06:
                    39:6b:b5:0e:fa:e4:66:84:69:8b:98:55:fc:07:77:
                    78:a8:e3:f2:35:4d:ea:d1:cd:93:ac:77:59:63:3f:
                    70:bd:ce:a0:52:de:8c:5f:fb:09:68:ef:46:3f:fe:
                    76:2f:54:5c:68:aa:bb:d5:5a:df:97:fd:65:8a:e1:
                    7e:2b:dd:3e:65:a0:f9:22:3f:fa:2a:bb:eb:bd:b3:
                    0c:fc:3b:ce:5e:d6:8a:46:57:a9:e6:04:e5:09:11:
                    1e:94:0c:32:fe:97:0c:f4:4c:70:c3:8b:63:4c:63:
                    fa:e5:7d:85:1f:f9:51:96:7c:3e:ed:c7:eb:bb:87:
                    6b:8c:24:79:26:ed:df:bc:fb:d2:45:18:e2:1b:e8:
                    86:89:05:2a:f6:1e:d8:3c:a1:3a:76:4b:62:7d:62:
                    6b:4f:aa:05:a5:0f:b9:12:58:84:e5:cc:af:98:05:
                    09:67:9b:9e:69:57:eb:ae:03:7d:26:27:15:d1:b2:
                    40:28:05:7f:a4:99:62:f2:07:b1:8d:41:bd:d9:00:
                    f2:6b:df:ff:2a:8a:3b:12:26:1e:8c:b2:eb:02:70:
                    c6:4e:4c:06:d0:20:57:da:b6:69:70:23:5a:ab:08:
                    3c:19:a1:20:8c:0b:3e:13:cf:96:fb:5a:a3:6e:04:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FC:55:82:FF:3C:25:80:5D:4A:BD:37:D4:0D:C2:8A:62:5B:15:A2
            X509v3 Authority Key Identifier:
                keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:56:2e:b7:92:83:33:79:33:65:3a:2c:6c:7f:51:94:d2:
         8d:37:13:c3:ad:79:31:bd:76:3b:7b:a0:9b:d0:3c:a8:e4:05:
         1d:8e:70:82:3f:6d:4e:01:c5:b5:5b:f9:bf:af:05:ce:ca:37:
         13:9a:87:2b:b6:16:bd:7a:46:dc:9c:fc:35:5f:f7:9e:bf:6e:
         c4:c8:ea:eb:50:a4:99:2c:07:44:47:fe:53:40:c9:17:46:59:
         c3:d0:c7:f7:4b:0b:3e:3c:bd:b2:48:6e:f2:d0:39:9b:01:c8:
         61:d1:a2:75:b1:2c:e7:33:d8:3e:47:2e:ee:89:85:c4:3f:18:
         47:36:2f:01:ba:b5:8c:ac:a3:56:6d:46:4a:da:c0:ec:8f:29:
         f2:58:b5:14:b3:63:10:b2:07:05:55:15:50:82:5c:3c:23:c1:
         a8:8e:ab:6f:78:60:b3:4f:a4:cf:f8:ad:4f:ff:bb:a5:3b:bc:
         7c:3a:16:0e:c4:4a:5b:c6:c4:2b:cd:8c:25:2a:6e:d9:bb:b3:
         91:dd:d3:4b:a6:1d:78:04:7d:36:5c:8d:44:2a:ce:0a:29:54:
         43:ca:e8:37:cf:3f:e0:12:09:1a:3f:92:bd:b4:fb:f0:4d:31:
         dc:fc:fc:8c:df:26:c0:eb:4f:ed:11:d1:e1:83:0c:da:69:83:
         1f:3a:06:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbVjylV1NzNGIXCusK5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi
YmM0OWMwHhcNMjUwNDEzMDkwMTE3WhcNMjUwNDE0MDkwMTE3WjAzMTEwLwYDVQQD
Eyg3MmZjNTU4MmZmM2MyNTgwNWQ0YWJkMzdkNDBkYzI4YTYyNWIxNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x3M3DGMhHtmtQdgGgY5a7UO+uRm
hGmLmFX8B3d4qOPyNU3q0c2TrHdZYz9wvc6gUt6MX/sJaO9GP/52L1RcaKq71Vrf
l/1liuF+K90+ZaD5Ij/6KrvrvbMM/DvOXtaKRlep5gTlCREelAwy/pcM9Exww4tj
TGP65X2FH/lRlnw+7cfru4drjCR5Ju3fvPvSRRjiG+iGiQUq9h7YPKE6dktifWJr
T6oFpQ+5EliE5cyvmAUJZ5ueaVfrrgN9JicV0bJAKAV/pJli8gexjUG92QDya9//
Koo7EiYejLLrAnDGTkwG0CBX2rZpcCNaqwg8GaEgjAs+E8+W+1qjbgTn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL8VYL/PCWAXUq9N9QNwopiWxWiMB8GA1UdIwQY
MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZVWLreS
gzN5M2U6LGx/UZTSjTcTw615Mb12O3ugm9A8qOQFHY5wgj9tTgHFtVv5v68Fzso3
E5qHK7YWvXpG3Jz8NV/3nr9uxMjq61CkmSwHREf+U0DJF0ZZw9DH90sLPjy9skhu
8tA5mwHIYdGidbEs5zPYPkcu7omFxD8YRzYvAbq1jKyjVm1GStrA7I8p8li1FLNj
ELIHBVUVUIJcPCPBqI6rb3hgs0+kz/itT/+7pTu8fDoWDsRKW8bEK82MJSpu2buz
kd3TS6YdeAR9NlyNRCrOCilUQ8roN88/4BIJGj+SvbT78E0x3Pz8jN8mwOtP7RHR
4YMM2mmDHzoGcg==
-----END CERTIFICATE-----