Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File:                     6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier:          7YZUxf8dYbEU1zk3cOf0op9iqBaDKunePlGzmZ+gZWk=
Subject key identifier:   38:1F:C4:CC:83:13:3D:EB:E7:C2:DF:20:FE:90:FB:AF:53:C7:99:54
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer:       /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial:       01962E98E8DEC6ACBBABB6A2F85B337AA697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: TG8YdEGwPcAAjemrSytunm45YnrXqxNKsOxxAp00QwQ=)
                          2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
                          3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e8:de:c6:ac:bb:ab:b6:a2:f8:5b:33:7a:a6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=381fc4cc83133debe7c2df20fe90fbaf53c79954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:2b:ad:cb:90:d6:71:4a:6d:0c:ff:d0:54:
                    2f:85:06:13:93:4b:16:b5:e3:6a:c6:74:e3:f3:e5:
                    e6:95:a1:cf:fa:1b:8b:11:71:09:56:21:ee:73:af:
                    9a:81:a4:ea:72:ca:de:9c:1e:e3:9b:d1:42:e3:78:
                    c8:15:aa:4b:6e:e5:0c:04:09:50:a1:ec:c5:29:38:
                    50:2a:ae:0b:46:a5:b4:af:c3:1e:d1:17:7f:33:25:
                    f3:60:3b:eb:5a:2c:58:22:a5:52:01:cb:46:64:64:
                    d8:95:b0:2c:c0:6d:30:94:0c:fa:a0:77:4c:b7:3f:
                    85:14:8f:ce:55:1d:dc:64:58:6b:4b:32:87:6e:ea:
                    89:5e:f0:ad:67:f2:93:15:69:41:a5:69:0e:ac:41:
                    a8:dc:94:25:42:21:33:3d:95:29:ac:15:b1:5f:89:
                    b5:9a:bb:60:25:65:e5:5c:fc:ac:ad:8b:6d:a1:dd:
                    77:23:27:d9:9a:6a:74:b9:04:69:29:f5:54:cc:58:
                    e6:44:13:76:11:6c:cf:70:4b:ec:c7:d8:bf:7c:7d:
                    35:0e:31:ac:25:98:07:66:41:ee:95:59:ba:a7:fa:
                    6c:37:b8:d5:ad:9f:3d:b5:87:13:16:dc:d1:e3:9f:
                    dd:7a:98:0c:72:ef:24:7d:64:3b:76:79:3f:e3:2b:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1F:C4:CC:83:13:3D:EB:E7:C2:DF:20:FE:90:FB:AF:53:C7:99:54
            X509v3 Authority Key Identifier:
                keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:39:0f:76:c5:d6:ab:98:07:06:e7:01:88:33:48:60:0b:
         d9:98:e0:32:87:54:af:fb:10:ab:14:b3:ef:b6:2e:a9:7c:97:
         90:d7:16:7f:a5:17:dd:f1:f0:ac:75:27:fd:b4:2b:d0:5a:f5:
         35:c2:be:5e:28:a5:ec:08:92:71:60:bb:a9:0d:cd:db:e0:e1:
         24:f3:4a:a6:09:f9:31:35:d6:26:30:c5:23:36:7d:40:b0:d6:
         1b:86:57:8e:1c:01:4f:81:1c:f6:c6:08:d9:d4:e6:8d:71:d9:
         1a:cc:53:fe:47:ff:2c:a3:cd:c6:61:18:83:4e:39:7c:35:c3:
         d9:1c:94:c8:24:37:fa:7e:7c:90:3f:3a:06:ab:c0:a0:49:7f:
         ce:ed:8a:51:9a:d4:5f:96:a5:63:80:28:f1:ae:c7:a2:fc:8e:
         ed:8f:6c:e2:cd:28:e4:8e:82:c9:0e:b7:d5:35:74:73:c6:6d:
         bd:c0:ac:08:df:03:2d:18:49:4b:95:c7:cd:76:d1:75:08:70:
         d2:4b:d7:71:15:63:60:73:28:09:29:d9:e3:50:d8:95:89:b1:
         83:ef:a9:a4:bb:ce:27:f3:03:8f:74:69:4e:0b:6f:29:fb:48:
         95:e9:ef:75:e7:b5:2b:cb:c7:4d:3d:c5:0e:53:0a:8b:c8:f4:
         c7:1c:fe:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOjexqy7q7ai+FszeqaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjUwNDEzMTAwMTM1WhcNMjUwNDE0MTAwMTM1WjAzMTEwLwYDVQQD
EygzODFmYzRjYzgzMTMzZGViZTdjMmRmMjBmZTkwZmJhZjUzYzc5OTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYArrcuQ1nFKbQz/0FQvhQYTk0sW
teNqxnTj8+XmlaHP+huLEXEJViHuc6+agaTqcsrenB7jm9FC43jIFapLbuUMBAlQ
oezFKThQKq4LRqW0r8Me0Rd/MyXzYDvrWixYIqVSActGZGTYlbAswG0wlAz6oHdM
tz+FFI/OVR3cZFhrSzKHbuqJXvCtZ/KTFWlBpWkOrEGo3JQlQiEzPZUprBWxX4m1
mrtgJWXlXPysrYttod13IyfZmmp0uQRpKfVUzFjmRBN2EWzPcEvsx9i/fH01DjGs
JZgHZkHulVm6p/psN7jVrZ89tYcTFtzR45/depgMcu8kfWQ7dnk/4yuF5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgfxMyDEz3r58LfIP6Q+69Tx5lUMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMo5D3bF
1quYBwbnAYgzSGAL2ZjgModUr/sQqxSz77YuqXyXkNcWf6UX3fHwrHUn/bQr0Fr1
NcK+Xiil7AiScWC7qQ3N2+DhJPNKpgn5MTXWJjDFIzZ9QLDWG4ZXjhwBT4Ec9sYI
2dTmjXHZGsxT/kf/LKPNxmEYg045fDXD2RyUyCQ3+n58kD86BqvAoEl/zu2KUZrU
X5alY4Ao8a7HovyO7Y9s4s0o5I6CyQ631TV0c8ZtvcCsCN8DLRhJS5XHzXbRdQhw
0kvXcRVjYHMoCSnZ41DYlYmxg++ppLvOJ/MDj3RpTgtvKftIlenvdee1K8vHTT3F
DlMKi8j0xxz+3w==
-----END CERTIFICATE-----