Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          EM0BMPv9XpNg/HOPXRZRxepZILcF66AiaLZSgm55ibg=
Subject key identifier:   1D:64:22:E2:BA:D4:FE:99:C0:E9:7D:91:80:7F:85:1A:D6:B5:9D:94
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       01962E6209506DC2E1975BBFB8D07CFCB996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          0FC6
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: /Vmqe2WlM5UCvj03i/J7jMUMmPCrQkHmyHvJHiJBj8o=)
                          2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:09:50:6d:c2:e1:97:5b:bf:b8:d0:7c:fc:b9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=1d6422e2bad4fe99c0e97d91807f851ad6b59d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:7c:da:09:43:2f:31:85:51:91:28:24:2f:
                    49:cc:0e:13:20:ea:9f:c3:2c:a6:02:b9:fd:d2:cf:
                    45:aa:a0:62:1e:f0:3d:04:48:e6:03:fe:12:a4:6f:
                    11:2a:59:ba:d2:18:68:d0:60:9a:7e:24:0a:e7:27:
                    6a:64:b1:4a:b8:b2:a5:ed:ea:c1:3b:74:11:68:52:
                    9c:75:fc:15:a8:b1:c7:02:69:3a:22:d1:a1:da:c9:
                    26:88:29:e6:49:91:c9:31:40:b1:8c:d0:3b:c2:bc:
                    b4:d3:9c:61:1c:ea:92:61:20:3a:9c:ca:26:7c:78:
                    ce:11:46:f9:1f:f8:64:f8:89:81:4b:c5:cf:95:f4:
                    d1:f1:e2:0d:f9:ce:e3:bf:fe:38:c7:35:43:57:2e:
                    8a:43:63:d5:e2:fc:b9:79:d6:07:6e:34:17:b5:8f:
                    5e:50:bf:c0:24:5f:ed:0f:e5:2f:44:93:fa:19:2b:
                    fb:44:9f:5b:ac:9d:b1:22:94:04:ee:3e:52:79:41:
                    77:81:dd:ee:8f:b0:be:d9:28:42:19:e0:f4:4d:66:
                    b4:30:33:f1:d5:0d:e6:88:01:0e:53:0f:b2:90:23:
                    1d:b5:59:22:27:8f:d2:6e:a5:d9:ee:aa:51:fc:7a:
                    8c:27:fb:d6:4b:b4:5f:5e:b9:9a:dd:32:bc:7f:31:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:22:E2:BA:D4:FE:99:C0:E9:7D:91:80:7F:85:1A:D6:B5:9D:94
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:d0:fd:f2:0a:82:95:85:ae:3f:32:13:9e:41:8b:4d:d3:
         a3:ee:fb:0d:f6:a9:3f:55:cb:09:0b:48:44:39:48:1b:a4:fb:
         f5:68:9a:38:c1:58:73:d5:d2:f2:04:76:f2:ef:00:23:0c:6d:
         26:a6:2b:d3:8a:c6:8c:1e:e0:7e:b5:3f:94:37:3a:9d:7b:cb:
         c1:1f:56:65:c4:f2:67:94:c0:b1:3d:48:f7:41:64:b2:7e:ea:
         1d:2b:8f:17:18:cf:ba:10:74:c7:8c:ec:2d:4f:02:0a:f8:d4:
         63:fe:bd:46:cc:c1:a2:58:ac:b8:97:a5:de:0d:17:9c:38:75:
         5a:2f:06:52:a0:90:a9:5a:67:77:32:95:92:4a:74:8c:ad:44:
         f6:a4:0e:a1:21:19:20:5a:e0:86:7b:b6:f2:3d:b5:3e:26:e3:
         44:de:a2:67:a9:ff:91:aa:1e:70:84:b5:f3:5c:e7:aa:d5:67:
         bb:1d:e2:40:fb:da:bc:74:c2:55:59:cf:b1:4e:5e:a7:b8:d2:
         66:cf:b1:79:a7:b7:f3:60:17:32:58:53:34:15:f1:cf:78:1e:
         3e:bb:cc:d4:df:f3:a3:cf:0e:b8:39:10:26:87:43:9f:18:f9:
         74:1c:7e:27:62:60:c5:3b:e4:2b:bb:49:75:4c:75:33:84:6f:
         b8:7e:31:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYglQbcLhl1u/uNB8/LmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm
YzFjYjcwHhcNMjUwNDEzMDkwMTM4WhcNMjUwNDE0MDkwMTM4WjAzMTEwLwYDVQQD
EygxZDY0MjJlMmJhZDRmZTk5YzBlOTdkOTE4MDdmODUxYWQ2YjU5ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodV82glDLzGFUZEoJC9JzA4TIOqf
wyymArn90s9FqqBiHvA9BEjmA/4SpG8RKlm60hho0GCafiQK5ydqZLFKuLKl7erB
O3QRaFKcdfwVqLHHAmk6ItGh2skmiCnmSZHJMUCxjNA7wry005xhHOqSYSA6nMom
fHjOEUb5H/hk+ImBS8XPlfTR8eIN+c7jv/44xzVDVy6KQ2PV4vy5edYHbjQXtY9e
UL/AJF/tD+UvRJP6GSv7RJ9brJ2xIpQE7j5SeUF3gd3uj7C+2ShCGeD0TWa0MDPx
1Q3miAEOUw+ykCMdtVkiJ4/SbqXZ7qpR/HqMJ/vWS7RfXrma3TK8fzGNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1kIuK61P6ZwOl9kYB/hRrWtZ2UMB8GA1UdIwQY
MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt
OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5
LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcfQ/fIK
gpWFrj8yE55Bi03To+77DfapP1XLCQtIRDlIG6T79WiaOMFYc9XS8gR28u8AIwxt
JqYr04rGjB7gfrU/lDc6nXvLwR9WZcTyZ5TAsT1I90Fksn7qHSuPFxjPuhB0x4zs
LU8CCvjUY/69RszBolisuJel3g0XnDh1Wi8GUqCQqVpndzKVkkp0jK1E9qQOoSEZ
IFrghnu28j21PibjRN6iZ6n/kaoecIS181znqtVnux3iQPvavHTCVVnPsU5ep7jS
Zs+xeae382AXMlhTNBXxz3gePrvM1N/zo88OuDkQJodDnxj5dBx+J2JgxTvkK7tJ
dUx1M4RvuH4x7w==
-----END CERTIFICATE-----