Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File:                     8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier:          nLL0TeebaCGClb89/qpRxuS9DwXHA3xRw53AyiIV8po=
Subject key identifier:   63:DB:90:02:E1:EE:7A:68:23:C9:32:05:6B:3F:6B:5A:B6:6D:09:B4
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       01962F0743820885914B5EE73C07969E1B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number:          0BE0
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: ltHx4PzfG/Lkr8rg6d+yynUPWtk07gcq+pwINYyZlLg=)
                          2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:43:82:08:85:91:4b:5e:e7:3c:07:96:9e:1b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=63db9002e1ee7a6823c932056b3f6b5ab66d09b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:a5:79:ee:69:d3:cd:5a:51:a5:d3:0f:49:
                    dc:8f:ac:64:2b:ca:5d:b3:90:b8:bb:25:b5:a6:23:
                    8a:4a:28:6d:28:9b:7d:b7:56:17:49:97:c6:2a:43:
                    fe:d1:c3:73:f1:03:32:3b:de:46:7d:a3:03:59:98:
                    37:c4:be:63:b9:25:bc:37:4b:9a:9d:66:e1:a8:49:
                    6f:9f:49:09:69:40:87:bd:e9:91:1c:97:28:d0:45:
                    31:2f:f1:27:de:6e:48:ab:ed:2d:4e:46:f3:b3:24:
                    55:66:54:b4:f5:88:0f:cf:37:26:e2:56:c8:cc:12:
                    0d:41:59:ca:fa:ec:a9:99:45:76:49:ef:30:8f:cd:
                    90:53:3f:2b:1b:be:0a:f9:31:11:52:e4:bc:31:08:
                    ac:27:1f:96:7b:2c:26:96:e6:ef:1c:53:26:c8:60:
                    c4:5d:0d:1a:51:53:ff:43:7c:05:05:23:1c:9a:c4:
                    28:79:9b:90:a3:98:b6:38:2a:f5:6a:93:ed:0a:50:
                    85:dc:a3:f9:b8:4e:32:0e:73:1e:08:03:3f:60:4f:
                    24:de:1d:02:0c:0e:8f:0e:e6:f7:d8:93:e9:0a:fd:
                    f0:9e:b8:04:1e:47:0f:48:ba:be:c1:4b:e7:cf:eb:
                    29:dd:6a:90:80:df:4c:e4:d9:b9:cd:43:61:a6:1f:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:90:02:E1:EE:7A:68:23:C9:32:05:6B:3F:6B:5A:B6:6D:09:B4
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:48:f2:ec:76:80:d7:e5:4d:e9:84:aa:bc:c7:ee:bb:46:3b:
         7c:cc:a5:88:72:42:9d:e6:13:27:da:47:c5:f6:8d:2b:90:4c:
         cf:29:75:69:fc:65:8c:4d:0b:94:be:d7:2b:79:3c:4e:bf:26:
         d5:57:55:af:06:bc:b6:0a:5f:d0:2f:93:82:c6:b9:ce:9a:84:
         20:2f:cb:a1:ad:15:24:84:ba:9a:c5:36:08:ae:28:d9:93:6d:
         85:75:4e:65:98:74:0a:ef:83:ec:e6:e3:e7:3b:08:0c:de:e7:
         a3:45:ef:4b:4c:90:f1:d0:0b:13:5f:c4:98:d9:3e:48:bc:9d:
         e7:e0:a2:13:17:24:b9:21:a9:7c:f7:c9:15:ab:f8:c2:e9:a4:
         55:77:d9:ae:76:7a:b5:be:36:4a:d6:09:ce:a1:51:cc:26:01:
         5c:67:ee:b9:a8:c7:c0:13:64:9e:cf:d7:96:28:f8:8a:ca:b9:
         df:be:df:8a:37:8f:38:0d:a5:db:ca:96:93:ed:0b:8b:6c:cc:
         06:71:00:ba:b4:0d:ea:40:45:26:22:8b:da:85:23:bb:13:09:
         19:59:a8:da:ff:ac:6b:c2:d7:aa:ea:54:85:a9:dd:8b:85:c5:
         ca:6d:79:f1:91:c4:5a:db:30:4f:0d:95:7b:b7:c7:44:57:31:
         b9:2b:04:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0OCCIWRS17nPAeWnhsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjUwNDEzMTIwMjA3WhcNMjUwNDE0MTIwMjA3WjAzMTEwLwYDVQQD
Eyg2M2RiOTAwMmUxZWU3YTY4MjNjOTMyMDU2YjNmNmI1YWI2NmQwOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTClee5p081aUaXTD0ncj6xkK8pd
s5C4uyW1piOKSihtKJt9t1YXSZfGKkP+0cNz8QMyO95GfaMDWZg3xL5juSW8N0ua
nWbhqElvn0kJaUCHvemRHJco0EUxL/En3m5Iq+0tTkbzsyRVZlS09YgPzzcm4lbI
zBINQVnK+uypmUV2Se8wj82QUz8rG74K+TERUuS8MQisJx+WeywmlubvHFMmyGDE
XQ0aUVP/Q3wFBSMcmsQoeZuQo5i2OCr1apPtClCF3KP5uE4yDnMeCAM/YE8k3h0C
DA6PDub32JPpCv3wnrgEHkcPSLq+wUvnz+sp3WqQgN9M5Nm5zUNhph8QywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPbkALh7npoI8kyBWs/a1q2bQm0MB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEjy7HaA
1+VN6YSqvMfuu0Y7fMyliHJCneYTJ9pHxfaNK5BMzyl1afxljE0LlL7XK3k8Tr8m
1VdVrwa8tgpf0C+Tgsa5zpqEIC/Loa0VJIS6msU2CK4o2ZNthXVOZZh0Cu+D7Obj
5zsIDN7no0XvS0yQ8dALE1/EmNk+SLyd5+CiExckuSGpfPfJFav4wumkVXfZrnZ6
tb42StYJzqFRzCYBXGfuuajHwBNkns/Xlij4isq5377fijePOA2l28qWk+0Li2zM
BnEAurQN6kBFJiKL2oUjuxMJGVmo2v+sa8LXqupUhandi4XFym158ZHEWtswTw2V
e7fHRFcxuSsEWw==
-----END CERTIFICATE-----