Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File:                     lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier:          zQ4nyNo/TPprf5IKlXvzYo9oE1AW5lOa5SrsFTg7y8g=
Subject key identifier:   23:2D:99:4C:83:8B:07:58:93:A5:46:33:30:6A:AD:69:70:E6:84:58
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer:       /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial:       01962E2AEEAA2462CBF206D5BFE6B6EB4E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number:          020A
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
                          2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: xfbBYI9hwiWaFW0++DXN4M3q9bZ5Zkt1vp8ts0iAS+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ee:aa:24:62:cb:f2:06:d5:bf:e6:b6:eb:4e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=232d994c838b075893a54633306aad6970e68458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:12:03:7f:3b:4c:b3:75:0c:1c:11:9d:11:
                    e8:0c:1b:db:b3:ca:d5:d1:64:df:34:ab:a4:86:9c:
                    79:9e:53:3f:0c:3c:7e:92:06:9c:29:b3:cf:4f:1c:
                    71:d2:40:5b:86:02:b2:50:72:35:7c:63:ab:66:8f:
                    73:fb:01:d1:f9:6c:65:c0:b2:33:19:92:ea:25:8f:
                    c6:69:52:62:80:cd:00:96:af:14:bf:b6:a8:6a:99:
                    42:d8:8f:50:97:02:8a:82:99:a0:17:04:04:ed:0a:
                    55:ac:e6:36:f7:c7:e2:d3:40:5a:10:10:0b:f5:f7:
                    63:b3:91:84:3a:4e:91:f9:0c:59:7e:e7:a3:93:2f:
                    34:d6:3b:05:c1:54:c7:63:d0:3d:33:6f:0b:5e:4b:
                    18:01:9a:8b:95:3f:6e:20:19:05:08:75:ff:72:72:
                    54:30:8e:40:8c:51:5b:4b:a5:3c:45:88:ea:5a:a3:
                    55:53:fb:ee:63:17:9b:38:45:14:29:65:ba:1c:72:
                    60:40:44:2c:af:93:c3:15:cb:a2:7d:94:a2:80:d0:
                    4d:95:e8:c8:ad:43:64:d7:e0:6c:47:50:74:9f:b0:
                    54:c8:51:5f:93:06:7e:f7:3d:49:06:0f:c3:73:b2:
                    03:4b:94:c8:2b:fd:6a:87:d2:4c:f4:1c:d6:1c:cc:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2D:99:4C:83:8B:07:58:93:A5:46:33:30:6A:AD:69:70:E6:84:58
            X509v3 Authority Key Identifier:
                keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:f6:55:b1:b3:fb:ed:e4:51:16:a8:f6:e5:d0:50:05:1c:
         84:2e:f6:e3:2d:a9:c3:de:d0:5b:97:ef:97:f9:b4:e1:f4:8a:
         55:0e:cb:11:97:23:63:66:e5:eb:f8:e4:d5:14:36:ba:9f:11:
         39:aa:1a:90:38:69:48:18:46:c3:14:c6:ae:81:fc:d9:91:e8:
         21:f4:d9:0f:e4:b3:a2:37:5d:eb:e6:66:4e:ea:ce:e9:5e:2a:
         7e:4f:65:51:33:ad:90:bc:b0:7c:d4:cb:ee:5c:98:87:3e:30:
         4a:34:bf:b5:74:78:b1:76:32:fe:2e:70:fd:99:e4:fe:46:c2:
         19:f1:c4:8f:b3:4e:22:e5:a8:dd:53:6d:b9:57:bf:31:90:00:
         07:0a:2f:24:60:92:90:2e:9f:a2:11:4f:c6:62:c6:bf:d9:5a:
         cb:e7:7e:c5:31:03:e2:e7:95:6a:fe:80:26:bf:76:60:1e:21:
         a4:7f:a8:4d:e8:ec:e1:c9:da:47:93:5c:07:61:4f:10:ea:74:
         c1:2f:24:77:d1:5f:4c:a1:ec:67:db:eb:3e:26:7f:d0:14:a5:
         bc:45:40:cc:7e:42:52:64:ca:f6:30:29:ba:02:7b:f4:c0:33:
         58:cf:93:14:a5:c1:e2:37:9b:78:6d:71:97:1c:8e:df:cd:cb:
         66:87:42:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu6qJGLL8gbVv+a2605dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4
OGExZTQwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
EygyMzJkOTk0YzgzOGIwNzU4OTNhNTQ2MzMzMDZhYWQ2OTcwZTY4NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRYSA387TLN1DBwRnRHoDBvbs8rV
0WTfNKukhpx5nlM/DDx+kgacKbPPTxxx0kBbhgKyUHI1fGOrZo9z+wHR+WxlwLIz
GZLqJY/GaVJigM0Alq8Uv7aoaplC2I9QlwKKgpmgFwQE7QpVrOY298fi00BaEBAL
9fdjs5GEOk6R+QxZfuejky801jsFwVTHY9A9M28LXksYAZqLlT9uIBkFCHX/cnJU
MI5AjFFbS6U8RYjqWqNVU/vuYxebOEUUKWW6HHJgQEQsr5PDFcuifZSigNBNlejI
rUNk1+BsR1B0n7BUyFFfkwZ+9z1JBg/Dc7IDS5TIK/1qh9JM9BzWHMwE9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMtmUyDiwdYk6VGMzBqrWlw5oRYMB8GA1UdIwQY
MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt
YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw
LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZP2VbGz
++3kURao9uXQUAUchC724y2pw97QW5fvl/m04fSKVQ7LEZcjY2bl6/jk1RQ2up8R
OaoakDhpSBhGwxTGroH82ZHoIfTZD+Szojdd6+ZmTurO6V4qfk9lUTOtkLywfNTL
7lyYhz4wSjS/tXR4sXYy/i5w/Znk/kbCGfHEj7NOIuWo3VNtuVe/MZAABwovJGCS
kC6fohFPxmLGv9lay+d+xTED4ueVav6AJr92YB4hpH+oTejs4cnaR5NcB2FPEOp0
wS8kd9FfTKHsZ9vrPiZ/0BSlvEVAzH5CUmTK9jApugJ79MAzWM+TFKXB4jebeG1x
lxyO383LZodCYA==
-----END CERTIFICATE-----