Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File:                     Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier:          GLcNXz9e/s3M5BD7k44pTmYfysLPDXQphj1ajuWYsrk=
Subject key identifier:   8A:A7:5B:F3:B9:9B:A5:1E:E9:3E:EE:68:63:06:A2:07:85:94:BC:21
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer:       /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial:       01962DF3FBDE2513261CDE2ABBA80906B77E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: YWkA7mdQgLvK/wF/4ZQvNmz+ZQnTb9mObtV0HMqrdTM=)
                          2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:de:25:13:26:1c:de:2a:bb:a8:09:06:b7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=8aa75bf3b99ba51ee93eee686306a2078594bc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:c0:83:7b:56:ac:7e:c2:c7:69:f5:0b:8b:
                    b0:53:22:09:08:93:0f:f5:17:48:15:a2:f8:3a:09:
                    10:a2:c5:c2:85:2d:3b:a6:28:6d:18:87:8b:8b:65:
                    6b:9e:fd:2d:24:b5:3d:31:93:29:01:74:5e:09:b3:
                    97:d6:b0:bc:f5:01:40:47:d6:40:2d:64:0c:dd:67:
                    a3:cb:1e:d7:8f:6e:79:3f:db:f0:8e:7f:15:8b:40:
                    58:80:9a:75:dd:2e:88:98:2a:44:67:1b:0c:c4:cc:
                    72:a1:8c:78:fd:a7:b2:41:58:88:ab:0d:42:fa:2a:
                    e5:c2:40:9f:63:46:75:e6:89:3c:b9:79:5d:8f:79:
                    6c:ce:74:68:50:de:1f:2c:5a:e0:ae:ac:db:57:b1:
                    fa:39:90:79:24:07:62:b8:17:8b:b7:58:a9:e8:d1:
                    10:bb:b8:43:07:1d:04:0b:3a:2b:f0:02:da:3f:82:
                    b9:69:09:2c:ca:93:9d:0d:05:dc:0d:08:af:7d:79:
                    ac:32:99:8c:8b:89:9d:57:e8:11:e3:29:7e:88:7b:
                    5e:51:af:72:da:bb:65:d9:69:17:ea:e9:3f:fd:64:
                    1c:59:1b:c2:af:67:ed:ed:ac:f3:b0:50:14:40:7d:
                    5c:02:7e:fa:f9:1e:a1:80:2c:d0:7e:31:6e:a1:47:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:5B:F3:B9:9B:A5:1E:E9:3E:EE:68:63:06:A2:07:85:94:BC:21
            X509v3 Authority Key Identifier:
                keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:21:ef:03:60:ed:f9:fb:3b:dd:71:48:2f:1b:80:83:5c:
         e1:e9:d7:46:2d:69:19:eb:c6:55:6c:7d:72:f5:92:3b:59:ad:
         5d:92:d3:8d:a7:6b:7e:ed:55:e1:9a:cb:98:93:15:2c:b3:b1:
         c9:8a:13:82:37:d4:2f:e7:68:7b:cf:c7:d7:77:88:40:15:75:
         4e:fb:93:42:e3:cf:14:00:1a:f1:f1:40:a3:7e:7c:cd:84:0b:
         fc:45:b6:67:16:0f:9c:81:a2:07:c4:d1:4b:e2:17:f4:4c:2a:
         0c:20:6d:fb:8a:d0:80:90:c3:1b:6c:2c:2b:84:0d:38:67:72:
         38:b7:46:28:a5:03:fe:5a:0a:3d:51:19:51:4f:ae:51:5f:99:
         1f:0c:ac:35:1b:23:e8:6c:5b:87:13:6e:af:48:1f:f3:00:a7:
         73:cb:49:d8:6a:6e:25:f0:06:ed:8c:62:7c:5b:60:33:e3:71:
         13:ac:cb:25:bc:53:30:c4:c4:c7:91:86:c4:d1:43:bc:2d:ca:
         ed:fb:04:83:64:e3:56:56:64:2e:62:48:50:c8:35:63:3a:8b:
         eb:66:29:dc:2b:45:d4:39:2e:d9:df:3d:81:e5:2f:e0:e4:5b:
         c4:d0:af:a0:34:be:11:80:af:8a:11:65:6c:47:9e:a0:57:10:
         9d:1f:5c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/veJRMmHN4qu6gJBrd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWJhYzhmYjI0OTA5MDFmYTYxMDQ4MGEwNWI2NjM1OGI5
MTI0NmMwHhcNMjUwNDEzMDcwMTI2WhcNMjUwNDE0MDcwMTI2WjAzMTEwLwYDVQQD
Eyg4YWE3NWJmM2I5OWJhNTFlZTkzZWVlNjg2MzA2YTIwNzg1OTRiYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO7Ag3tWrH7Cx2n1C4uwUyIJCJMP
9RdIFaL4OgkQosXChS07pihtGIeLi2Vrnv0tJLU9MZMpAXReCbOX1rC89QFAR9ZA
LWQM3Wejyx7Xj255P9vwjn8Vi0BYgJp13S6ImCpEZxsMxMxyoYx4/aeyQViIqw1C
+irlwkCfY0Z15ok8uXldj3lsznRoUN4fLFrgrqzbV7H6OZB5JAdiuBeLt1ip6NEQ
u7hDBx0ECzor8ALaP4K5aQksypOdDQXcDQivfXmsMpmMi4mdV+gR4yl+iHteUa9y
2rtl2WkX6uk//WQcWRvCr2ft7azzsFAUQH1cAn76+R6hgCzQfjFuoUegMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqnW/O5m6Ue6T7uaGMGogeFlLwhMB8GA1UdIwQY
MBaAFApbrI+ySQkB+mEEgKBbZjWLkSRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQt
MWY2YjBiM2E3NjQ0LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQtMWY2YjBiM2E3NjQ0
LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNch7wNg
7fn7O91xSC8bgINc4enXRi1pGevGVWx9cvWSO1mtXZLTjadrfu1V4ZrLmJMVLLOx
yYoTgjfUL+doe8/H13eIQBV1TvuTQuPPFAAa8fFAo358zYQL/EW2ZxYPnIGiB8TR
S+IX9EwqDCBt+4rQgJDDG2wsK4QNOGdyOLdGKKUD/loKPVEZUU+uUV+ZHwysNRsj
6GxbhxNur0gf8wCnc8tJ2GpuJfAG7YxifFtgM+NxE6zLJbxTMMTEx5GGxNFDvC3K
7fsEg2TjVlZkLmJIUMg1YzqL62Yp3CtF1Dku2d89geUv4ORbxNCvoDS+EYCvihFl
bEeeoFcQnR9chg==
-----END CERTIFICATE-----