Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File:                     IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier:          X+7jm/x+I9dCSfo+XX/V2v9Mb3tx5LPftySIZ2FT0xw=
Subject key identifier:   16:FC:76:AE:B9:F5:80:2D:EE:E6:E0:57:3A:4F:22:DF:61:1F:BF:B9
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer:       /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial:       01962FAB7B05AE564572516F9069B03605F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
                          2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: +aSJojMDXy27+fTuzBcQO5HIkH4LHXlM/Qbmb0sxXJ8=)
                          3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7b:05:ae:56:45:72:51:6f:90:69:b0:36:05:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=16fc76aeb9f5802deee6e0573a4f22df611fbfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:06:75:5d:46:40:d3:98:89:5f:73:2a:e7:
                    69:2c:4a:82:aa:8f:c4:27:40:b4:81:49:9e:ac:d8:
                    b6:8b:23:bb:36:bb:ef:49:db:d1:a4:c5:62:44:f2:
                    53:72:60:c0:c1:eb:79:a4:a7:4c:e3:41:17:4e:83:
                    ad:37:22:e8:e5:b0:32:ab:de:17:10:b2:80:71:de:
                    be:1b:8e:85:26:4b:88:ba:84:ee:7d:a0:f5:00:50:
                    54:01:88:e8:81:90:cb:e7:fd:ce:1b:1b:8a:b9:d1:
                    df:1c:75:4a:39:34:f1:7d:cf:0b:3f:0e:18:6c:80:
                    19:6b:ac:f9:ed:50:a1:32:09:01:61:f9:d3:12:ed:
                    8a:94:58:fc:0b:b1:8d:51:4a:e4:c6:e8:2b:e9:ec:
                    84:8c:ba:2b:e8:78:21:fa:0c:d7:c3:dc:ef:73:6b:
                    e1:70:9d:db:a2:f8:8d:ec:ba:fc:1f:a9:e5:01:67:
                    60:08:6d:0f:b6:d5:4e:04:44:2f:da:29:95:60:d5:
                    3c:35:da:13:ce:39:71:77:96:8e:fd:8e:2a:c4:95:
                    96:48:0b:9f:ec:8f:77:12:8d:fc:7b:4f:68:bc:e2:
                    b9:8c:fb:2f:f0:d8:53:3e:20:c9:0f:b4:93:6a:b7:
                    29:1a:6b:7f:eb:41:e9:b3:6d:84:dd:db:28:af:84:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:76:AE:B9:F5:80:2D:EE:E6:E0:57:3A:4F:22:DF:61:1F:BF:B9
            X509v3 Authority Key Identifier:
                keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:59:6b:a8:4d:6a:57:61:81:56:16:60:2e:fd:75:d4:56:
         bd:ee:62:77:ce:82:83:d4:3d:96:0d:9c:bc:df:90:15:b3:29:
         8f:7c:f9:46:32:a0:05:2a:af:3e:0d:a6:bd:36:8b:f8:9a:99:
         e9:86:25:0d:96:23:5f:e0:86:16:d7:a9:cc:b5:e1:dd:04:44:
         34:2a:32:31:ea:69:03:b4:b6:01:9b:f5:09:e7:34:0e:98:2f:
         f6:84:dd:cb:74:0a:a1:25:69:cc:c1:fa:28:df:52:27:b9:d7:
         6f:7b:0c:77:96:c2:6d:2c:a1:48:8c:99:5d:40:72:0e:8c:f8:
         f4:7c:87:2a:dd:b7:7a:c8:60:74:64:f1:22:74:4b:ae:9f:5e:
         82:a8:1c:75:fe:c5:42:7d:55:1b:c8:aa:5f:37:a6:a2:a4:a5:
         9d:06:bd:b3:24:a3:d0:cc:46:67:be:25:1d:08:9f:df:49:4e:
         69:1a:93:60:b1:17:88:23:64:72:37:ed:14:32:ef:ee:ef:18:
         f5:1e:bd:88:4f:c4:03:b6:fe:97:28:57:d5:92:25:45:cd:17:
         b0:66:a9:47:d1:0e:42:bb:f7:ff:a9:53:3a:77:94:af:90:ea:
         23:3d:da:2b:a2:77:81:b0:c8:7b:c5:db:ef:cf:ed:0d:80:6d:
         98:87:c1:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3sFrlZFclFvkGmwNgX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjUwNDEzMTUwMTI5WhcNMjUwNDE0MTUwMTI5WjAzMTEwLwYDVQQD
EygxNmZjNzZhZWI5ZjU4MDJkZWVlNmUwNTczYTRmMjJkZjYxMWZiZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCwGdV1GQNOYiV9zKudpLEqCqo/E
J0C0gUmerNi2iyO7NrvvSdvRpMViRPJTcmDAwet5pKdM40EXToOtNyLo5bAyq94X
ELKAcd6+G46FJkuIuoTufaD1AFBUAYjogZDL5/3OGxuKudHfHHVKOTTxfc8LPw4Y
bIAZa6z57VChMgkBYfnTEu2KlFj8C7GNUUrkxugr6eyEjLor6Hgh+gzXw9zvc2vh
cJ3boviN7Lr8H6nlAWdgCG0PttVOBEQv2imVYNU8NdoTzjlxd5aO/Y4qxJWWSAuf
7I93Eo38e09ovOK5jPsv8NhTPiDJD7STarcpGmt/60Hps22E3dsor4SgmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb8dq659YAt7ubgVzpPIt9hH7+5MB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7xZa6hN
aldhgVYWYC79ddRWve5id86Cg9Q9lg2cvN+QFbMpj3z5RjKgBSqvPg2mvTaL+JqZ
6YYlDZYjX+CGFtepzLXh3QRENCoyMeppA7S2AZv1Cec0Dpgv9oTdy3QKoSVpzMH6
KN9SJ7nXb3sMd5bCbSyhSIyZXUByDoz49HyHKt23eshgdGTxInRLrp9egqgcdf7F
Qn1VG8iqXzemoqSlnQa9sySj0MxGZ74lHQif30lOaRqTYLEXiCNkcjftFDLv7u8Y
9R69iE/EA7b+lyhX1ZIlRc0XsGapR9EOQrv3/6lTOneUr5DqIz3aK6J3gbDIe8Xb
78/tDYBtmIfBKg==
-----END CERTIFICATE-----