Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File:                     StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier:          nqrtcWUyohjDwpwGuns5Y15NxrUsE18wPv+WzLhnBpA=
Subject key identifier:   B1:11:09:A7:EF:5D:E7:46:69:0A:E0:29:97:A9:38:65:A8:23:AD:A6
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer:       /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial:       01962FAB1A1DF3F1EE64077EC07C8068B7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: Rt1gtqsL3XGckE6ravfPMbXd82w.roa (hash: 2JwbGC82Puo98akTLN0YA0GBgvd3GFrPbqPDWMBfEo8=)
                          2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: 5j/vOYrLhLNu93OoevE0QPmjFI7JPpENathKTwQCz98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:1d:f3:f1:ee:64:07:7e:c0:7c:80:68:b7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=b11109a7ef5de746690ae02997a93865a823ada6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:45:b1:e9:3b:25:1d:41:83:af:8a:6b:a0:e7:
                    8c:89:35:c3:a8:80:6e:12:ee:bc:75:85:5d:a9:1b:
                    73:ad:0e:0c:36:52:44:2a:79:d4:a1:98:e9:0e:05:
                    99:b7:b0:34:af:85:42:8a:16:2d:71:6b:12:be:d2:
                    9d:68:61:09:5f:3e:07:f9:54:5b:9e:8c:94:1c:39:
                    ac:2c:3a:be:3f:7d:3d:b8:e4:0b:7e:7a:55:3e:6f:
                    6f:e0:ef:c7:2b:49:f4:47:8c:c9:62:d2:58:29:bb:
                    2d:a7:12:a0:fc:48:47:0e:26:da:8d:28:e5:33:36:
                    6e:c7:d4:aa:dc:52:ee:f1:ed:50:0f:14:d7:ad:54:
                    91:8a:78:6a:a4:e0:ca:76:d5:25:7f:74:31:dc:58:
                    9f:fc:69:f0:d4:55:81:2a:c2:a3:19:56:35:dc:18:
                    46:80:8d:30:2b:07:1d:e7:76:fc:a6:07:5b:59:99:
                    6a:bf:35:39:95:b6:16:83:bf:66:60:1b:73:80:70:
                    dd:17:5a:40:83:65:a7:02:ba:3f:70:09:9c:cb:2c:
                    3a:9f:8f:5f:a9:54:73:c0:f0:42:76:dc:93:62:c4:
                    a9:ae:b4:21:37:65:19:43:4d:a2:94:25:c6:9f:5a:
                    8d:c6:5a:bd:da:95:7f:b3:93:53:f4:0c:90:2b:40:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:09:A7:EF:5D:E7:46:69:0A:E0:29:97:A9:38:65:A8:23:AD:A6
            X509v3 Authority Key Identifier:
                keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:37:21:0a:98:74:00:b0:7f:13:d2:4e:71:3b:3a:4d:7a:27:
         52:93:e9:44:dc:c9:e7:e1:56:7b:d2:7d:ef:57:76:7f:02:c6:
         cd:17:3b:c2:4b:fa:4d:38:70:87:aa:4f:f5:e7:31:63:01:5b:
         43:95:e2:49:a3:53:d7:9e:b5:7d:c2:5e:77:f4:fc:e8:0a:be:
         5e:d0:70:25:68:dc:d6:b6:ed:8e:32:c2:32:25:28:3e:06:64:
         4a:a0:5d:b8:57:ad:63:9f:c4:9d:67:4e:66:b9:c7:99:34:8a:
         f4:52:24:8b:fc:78:02:ec:69:f7:5e:6a:71:c5:75:dd:9b:e3:
         ec:a9:1a:43:3a:4a:a1:03:53:21:49:de:78:8a:67:42:4d:a8:
         2f:12:a0:65:7d:ca:42:fd:3d:f0:f8:b1:ba:a3:7a:94:e7:fc:
         0a:5f:4a:a9:07:80:28:5a:07:d9:5b:b8:96:e3:31:e8:d8:08:
         be:ba:bb:32:fd:f9:4c:68:09:c0:be:f0:2c:db:af:b8:f4:10:
         67:c8:66:51:1e:be:39:0b:e3:28:fd:94:49:96:8e:8f:46:e7:
         5a:c9:51:72:fa:33:24:38:4f:b6:d0:92:4b:98:99:0b:fe:6c:
         a8:a5:09:11:4f:15:5c:48:69:d2:66:a8:ba:ea:02:cf:27:76:
         2f:7c:c4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxod8/HuZAd+wHyAaLfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDQ2N2YxNmQwOTUxZTQzMDcxMzgzMmM2Yzc1OTU2MWU3
NjA0MWYwHhcNMjUwNDEzMTUwMTA0WhcNMjUwNDE0MTUwMTA0WjAzMTEwLwYDVQQD
EyhiMTExMDlhN2VmNWRlNzQ2NjkwYWUwMjk5N2E5Mzg2NWE4MjNhZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EWx6TslHUGDr4proOeMiTXDqIBu
Eu68dYVdqRtzrQ4MNlJEKnnUoZjpDgWZt7A0r4VCihYtcWsSvtKdaGEJXz4H+VRb
noyUHDmsLDq+P309uOQLfnpVPm9v4O/HK0n0R4zJYtJYKbstpxKg/EhHDibajSjl
MzZux9Sq3FLu8e1QDxTXrVSRinhqpODKdtUlf3Qx3Fif/Gnw1FWBKsKjGVY13BhG
gI0wKwcd53b8pgdbWZlqvzU5lbYWg79mYBtzgHDdF1pAg2WnAro/cAmcyyw6n49f
qVRzwPBCdtyTYsSprrQhN2UZQ02ilCXGn1qNxlq92pV/s5NT9AyQK0DOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLERCafvXedGaQrgKZepOGWoI62mMB8GA1UdIwQY
MBaAFErUZ/FtCVHkMHE4MsbHWVYedgQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAt
NTY0MjM1M2Q0MzFhLzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAtNTY0MjM1M2Q0MzFh
LzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDchCph0
ALB/E9JOcTs6TXonUpPpRNzJ5+FWe9J971d2fwLGzRc7wkv6TThwh6pP9ecxYwFb
Q5XiSaNT1561fcJed/T86Aq+XtBwJWjc1rbtjjLCMiUoPgZkSqBduFetY5/EnWdO
ZrnHmTSK9FIki/x4Auxp915qccV13Zvj7KkaQzpKoQNTIUneeIpnQk2oLxKgZX3K
Qv098PixuqN6lOf8Cl9KqQeAKFoH2Vu4luMx6NgIvrq7Mv35TGgJwL7wLNuvuPQQ
Z8hmUR6+OQvjKP2USZaOj0bnWslRcvozJDhPttCSS5iZC/5sqKUJEU8VXEhp0mao
uuoCzyd2L3zE4g==
-----END CERTIFICATE-----