Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File:                     orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier:          MQGWvTfXKTfmtXX9gXcRJQmixZHgQIH6b7PE5cBSCk4=
Subject key identifier:   8D:2B:C5:9A:6A:89:C8:DB:24:CB:A2:38:15:A8:45:0A:49:C1:E4:C6
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer:       /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial:       01962F0679E00E9218D699E1D8461A468D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: dTRvsxL2APKWCpGceVS2hPx0HUQ.roa (hash: ckDUOzUXSrfuvc3RkTd1UBfCmEYB7nDoNopZ1OYU3es=)
                          2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: xD83+roFDCnc/kyiWzewIwS3+fqYxB+AeO081QN1PF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:e0:0e:92:18:d6:99:e1:d8:46:1a:46:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=8d2bc59a6a89c8db24cba23815a8450a49c1e4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:0a:b9:cc:a2:f7:58:dd:52:ac:37:74:5e:
                    27:d4:3e:50:c9:c1:18:5b:e2:79:c1:f6:53:45:2c:
                    36:16:86:e5:b7:cb:7b:23:64:7a:91:81:03:c0:a4:
                    5b:6b:b3:ae:78:db:84:ab:23:7e:22:22:ce:2f:69:
                    dd:b7:4a:ec:44:ed:14:40:b6:03:3e:3f:ac:ed:42:
                    81:72:80:b7:3d:e2:d0:75:c4:c6:0b:70:af:71:4b:
                    ee:c3:11:aa:18:ff:f1:ec:78:09:35:ce:c9:f8:b7:
                    b9:34:30:6c:6f:2d:f8:d3:8a:e3:51:22:0f:9d:74:
                    a3:17:89:01:60:66:96:fe:ce:7b:4f:57:53:87:ec:
                    ee:86:ee:91:91:58:69:7c:f2:38:6c:55:d0:45:f5:
                    94:0b:f6:98:21:d7:b9:51:89:76:f3:76:01:d1:d8:
                    f0:3e:b2:90:df:61:75:b4:7e:5b:ee:b3:db:a1:c6:
                    f0:13:9d:be:14:6f:65:eb:9c:50:87:40:6c:e1:3a:
                    31:63:d9:c3:26:cd:33:76:76:a8:64:8d:f1:a0:0f:
                    a8:d2:4b:40:c3:63:3b:b7:ba:04:77:27:43:c3:98:
                    0b:d2:be:32:ea:70:8b:66:ed:ae:c3:d4:5e:ff:de:
                    18:b3:1d:11:90:d3:06:d5:42:e6:b9:f0:6d:6e:bd:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:C5:9A:6A:89:C8:DB:24:CB:A2:38:15:A8:45:0A:49:C1:E4:C6
            X509v3 Authority Key Identifier:
                keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:df:59:ea:03:f9:f9:16:a7:48:c4:77:d2:cd:db:86:20:
         ff:f0:8b:cc:78:28:fe:9d:e6:fa:c7:cf:7d:d8:3e:c9:b8:fc:
         bc:a6:ea:3b:0f:bb:aa:f5:9e:55:0c:85:8a:a6:98:dd:65:61:
         61:97:11:ed:d3:ce:8a:63:9b:3b:41:53:62:cc:89:9b:95:1b:
         25:e9:5a:06:33:62:35:71:16:a8:00:02:fa:e8:53:78:38:c1:
         ef:08:bc:65:fd:19:d1:ac:87:a5:5b:f4:8d:b8:0b:20:34:8b:
         95:85:4f:cf:97:99:12:fd:a5:56:a5:00:f9:44:e7:39:08:01:
         03:59:ee:a6:c1:27:04:d0:69:66:95:68:ed:b5:5c:c1:d4:3e:
         bb:d1:c6:e2:08:d0:86:83:56:59:52:84:25:03:77:7d:8f:47:
         86:5f:1e:f7:84:b2:cc:e0:ac:93:a8:40:68:dc:8f:0f:1a:80:
         f1:a8:f9:21:3f:3a:b8:cd:5a:2d:84:ee:7d:5a:3b:5c:be:d6:
         17:87:af:da:e9:bb:df:09:37:8c:03:66:5f:d2:f9:a6:c9:37:
         3b:c7:25:be:90:f8:3f:8e:40:78:f5:1b:61:8c:21:cf:d3:47:
         c1:7f:50:63:82:ec:ad:11:74:08:fe:bf:7f:fa:d4:70:b3:af:
         5f:1b:7a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnngDpIY1pnh2EYaRo1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk
NjQ3MDIwHhcNMjUwNDEzMTIwMTE1WhcNMjUwNDE0MTIwMTE1WjAzMTEwLwYDVQQD
Eyg4ZDJiYzU5YTZhODljOGRiMjRjYmEyMzgxNWE4NDUwYTQ5YzFlNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvcKucyi91jdUqw3dF4n1D5QycEY
W+J5wfZTRSw2Foblt8t7I2R6kYEDwKRba7OueNuEqyN+IiLOL2ndt0rsRO0UQLYD
Pj+s7UKBcoC3PeLQdcTGC3CvcUvuwxGqGP/x7HgJNc7J+Le5NDBsby3404rjUSIP
nXSjF4kBYGaW/s57T1dTh+zuhu6RkVhpfPI4bFXQRfWUC/aYIde5UYl283YB0djw
PrKQ32F1tH5b7rPbocbwE52+FG9l65xQh0Bs4ToxY9nDJs0zdnaoZI3xoA+o0ktA
w2M7t7oEdydDw5gL0r4y6nCLZu2uw9Re/94Ysx0RkNMG1ULmufBtbr0U1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0rxZpqicjbJMuiOBWoRQpJweTGMB8GA1UdIwQY
MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt
YWFiODYyODYxYTA5LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5
LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVzfWeoD
+fkWp0jEd9LN24Yg//CLzHgo/p3m+sfPfdg+ybj8vKbqOw+7qvWeVQyFiqaY3WVh
YZcR7dPOimObO0FTYsyJm5UbJelaBjNiNXEWqAAC+uhTeDjB7wi8Zf0Z0ayHpVv0
jbgLIDSLlYVPz5eZEv2lVqUA+UTnOQgBA1nupsEnBNBpZpVo7bVcwdQ+u9HG4gjQ
hoNWWVKEJQN3fY9Hhl8e94SyzOCsk6hAaNyPDxqA8aj5IT86uM1aLYTufVo7XL7W
F4ev2um73wk3jANmX9L5psk3O8clvpD4P45AePUbYYwhz9NHwX9QY4LsrRF0CP6/
f/rUcLOvXxt6Mw==
-----END CERTIFICATE-----