Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File:                     lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier:          YeFfQoqneMYxBjw3MeYXJLvNr+tX01AxSy5vUWOcJRM=
Subject key identifier:   81:E1:51:DA:1D:37:7E:D9:AF:08:BC:E8:BE:58:EC:84:66:1F:D4:7F
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer:       /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial:       01962E2B449486B5BEDFB89086275FBC4F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number:          1390
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (hash: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=)
                          2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: PH4byrZHmLuw5YeVdt5HkfksrV/tj/QX1OKNPDrxLc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:94:86:b5:be:df:b8:90:86:27:5f:bc:4f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=81e151da1d377ed9af08bce8be58ec84661fd47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:61:b9:de:b2:6e:f6:17:22:96:8c:e6:a5:
                    2e:3a:8f:35:2e:46:1c:4e:66:09:7b:ee:12:03:fe:
                    d4:6d:c1:9b:91:26:db:46:2f:ab:83:47:8f:a2:af:
                    c8:fb:2c:3d:bc:73:0e:89:1a:50:b7:98:d9:21:a2:
                    4a:66:f1:1f:3c:3a:46:f7:ca:15:0d:97:79:a9:0c:
                    61:0e:c0:60:9b:d9:fa:b9:d3:61:3a:27:bc:02:61:
                    d9:81:25:42:2b:b5:5a:40:fb:17:65:67:6d:41:4f:
                    31:c5:79:43:02:ea:4d:a7:be:1f:a0:1c:d5:b0:73:
                    bc:83:8e:84:c7:68:fb:19:57:81:bd:d7:9e:55:bf:
                    3a:5f:aa:c1:bd:93:b7:ee:ec:25:de:9e:1a:78:fb:
                    6b:4f:94:69:bf:77:e2:e1:8f:89:d2:18:60:b5:57:
                    e2:36:0e:f7:1d:03:b6:37:ae:83:61:ca:d1:d8:ac:
                    26:9e:8a:b0:2f:d1:4d:f6:c1:1d:9b:99:64:1c:05:
                    e0:00:6a:af:0f:7a:cc:e1:78:16:af:54:c7:45:30:
                    41:14:3a:5a:b6:47:65:1e:e2:d1:ef:23:b4:9a:37:
                    0c:04:00:ef:83:c7:49:e3:fb:67:51:db:43:6d:f7:
                    02:7b:e7:49:f3:d2:9a:a4:ef:79:7c:de:e6:1f:bb:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E1:51:DA:1D:37:7E:D9:AF:08:BC:E8:BE:58:EC:84:66:1F:D4:7F
            X509v3 Authority Key Identifier:
                keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:c9:cd:a1:5c:7e:a9:74:1c:12:7d:79:ca:2c:59:11:bb:
         09:85:6d:89:7e:24:35:94:f9:ee:53:98:ef:2d:e0:c1:13:a9:
         76:6a:e8:7b:41:9b:20:96:d0:85:85:5d:07:b4:da:77:47:6d:
         f5:94:a0:7b:c7:66:40:3c:a7:1a:74:d8:f7:6b:fd:1c:00:d6:
         31:c0:42:26:16:69:46:26:b9:3d:10:45:bb:20:2b:3f:2c:6a:
         fc:e2:0e:a0:1c:a9:02:66:c3:c3:35:82:49:e6:14:29:7f:39:
         4c:3e:d7:ab:a2:00:5f:36:e2:73:68:8a:d4:09:d7:2a:3d:5d:
         1d:f9:52:34:a0:68:db:d9:d8:c8:b6:f6:93:e8:f2:ed:e9:2b:
         d7:e2:af:0f:9e:5d:1a:07:ca:d0:f6:19:94:50:ae:95:ca:86:
         e4:64:2b:a0:4b:29:8e:e9:01:d3:82:26:51:b2:76:4c:49:51:
         ed:e5:e7:18:86:ba:ac:21:89:59:f4:50:d0:e0:d4:1d:e0:2d:
         f6:ae:22:1a:ae:94:1e:1e:64:34:cc:4c:8b:f4:4e:c7:eb:5a:
         bf:e6:2f:de:1a:ee:b0:55:6b:92:a7:02:33:01:6e:3e:98:78:
         26:55:36:1f:d7:31:93:70:22:c7:bc:5f:1d:ea:bf:88:e1:c3:
         4f:c3:5e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0SUhrW+37iQhidfvE9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjUwNDEzMDgwMTQ5WhcNMjUwNDE0MDgwMTQ5WjAzMTEwLwYDVQQD
Eyg4MWUxNTFkYTFkMzc3ZWQ5YWYwOGJjZThiZTU4ZWM4NDY2MWZkNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvBhud6ybvYXIpaM5qUuOo81LkYc
TmYJe+4SA/7UbcGbkSbbRi+rg0ePoq/I+yw9vHMOiRpQt5jZIaJKZvEfPDpG98oV
DZd5qQxhDsBgm9n6udNhOie8AmHZgSVCK7VaQPsXZWdtQU8xxXlDAupNp74foBzV
sHO8g46Ex2j7GVeBvdeeVb86X6rBvZO37uwl3p4aePtrT5Rpv3fi4Y+J0hhgtVfi
Ng73HQO2N66DYcrR2KwmnoqwL9FN9sEdm5lkHAXgAGqvD3rM4XgWr1THRTBBFDpa
tkdlHuLR7yO0mjcMBADvg8dJ4/tnUdtDbfcCe+dJ89KapO95fN7mH7vQmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHhUdodN37Zrwi86L5Y7IRmH9R/MB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/LJzaFc
fql0HBJ9ecosWRG7CYVtiX4kNZT57lOY7y3gwROpdmroe0GbIJbQhYVdB7Tad0dt
9ZSge8dmQDynGnTY92v9HADWMcBCJhZpRia5PRBFuyArPyxq/OIOoBypAmbDwzWC
SeYUKX85TD7Xq6IAXzbic2iK1AnXKj1dHflSNKBo29nYyLb2k+jy7ekr1+KvD55d
GgfK0PYZlFCulcqG5GQroEspjukB04ImUbJ2TElR7eXnGIa6rCGJWfRQ0ODUHeAt
9q4iGq6UHh5kNMxMi/ROx+tav+Yv3hrusFVrkqcCMwFuPph4JlU2H9cxk3Aix7xf
Heq/iOHDT8Nehw==
-----END CERTIFICATE-----