Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          B5elmkLYmHhZ0abL0IXux53CrimEvHpf4yX3KR79XfU=
Subject key identifier:   7B:29:68:1D:C9:F6:66:F6:DE:1D:95:6F:37:E5:F2:A9:26:2E:E5:FA
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       01962F3DB352A2013A8ABCBCD0248476A869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          128C
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: xSdQdK7ZfRYkYsuTgqtoY2divh9TtCm/bsv74bcYklo=)
                          2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:52:a2:01:3a:8a:bc:bc:d0:24:84:76:a8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=7b29681dc9f666f6de1d956f37e5f2a9262ee5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:03:1a:be:6b:34:82:b3:74:e0:fd:58:e7:
                    c7:1b:93:71:ca:39:c9:35:18:d8:dd:34:88:86:ad:
                    67:a0:7d:68:b8:61:fe:82:f5:d6:92:e0:ce:01:32:
                    7e:2c:af:55:3a:bb:c3:17:8f:2f:6a:e7:f4:84:9e:
                    3c:03:4c:c4:88:89:82:4b:89:15:d1:ce:eb:38:b8:
                    3c:57:c0:d4:ea:68:e8:c3:c1:0c:f4:56:d1:fd:5e:
                    fa:e4:20:c1:f5:5a:cd:f2:50:00:01:19:61:e1:6a:
                    e2:e6:3e:c6:ec:e9:ef:35:22:10:0a:ad:b5:fb:ce:
                    04:bc:b6:5e:08:d2:4d:1f:e9:cc:a5:72:5c:1c:d6:
                    c8:a7:9c:e9:b5:14:51:20:1d:11:49:b4:70:97:1d:
                    96:fe:06:d5:04:a5:78:d6:19:c2:ff:06:58:ff:10:
                    35:67:7d:86:13:fe:0d:44:35:6e:e0:2e:6e:4b:67:
                    01:2b:c1:32:32:38:92:fa:0a:a6:b7:a1:f0:de:4c:
                    39:3a:8e:3c:80:73:0a:3e:0b:10:da:d0:f3:4a:bc:
                    38:e2:92:3d:0e:d7:12:8b:4a:e8:de:b1:14:c0:fb:
                    74:c8:6b:47:2f:1e:10:9b:d7:a6:72:30:0c:d5:79:
                    3e:ab:14:f6:7f:05:2e:1b:fa:9e:23:0d:28:7f:a3:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:68:1D:C9:F6:66:F6:DE:1D:95:6F:37:E5:F2:A9:26:2E:E5:FA
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:89:c1:fc:14:d6:da:ab:0f:47:10:ec:38:44:4f:47:86:
         98:73:d7:55:6a:95:45:ed:de:6c:e8:90:c1:c8:51:93:1a:1d:
         f7:71:92:f7:b1:6a:52:ca:4b:58:39:67:e3:f2:66:9a:73:f1:
         cb:95:0d:ce:dc:b8:93:52:25:d8:6d:1b:dd:dc:44:01:46:e4:
         36:bb:98:59:f5:a2:41:2a:d2:7e:ec:64:e4:9d:48:a7:72:f9:
         1b:9d:19:4d:aa:f3:80:0f:78:81:62:59:b5:c3:19:48:f4:6f:
         b2:87:63:32:23:dc:6d:96:74:0e:96:fd:d1:78:f8:e6:9c:cc:
         ec:b1:8f:0b:e7:3a:8c:95:63:c8:63:d3:8b:e6:b5:86:99:17:
         53:89:bd:53:8c:1a:96:e5:05:5a:2e:f7:cf:d7:12:2e:c2:3a:
         c1:af:80:47:55:7b:81:e6:fe:01:f4:fb:d2:4d:4d:93:bb:cd:
         df:99:f9:60:4d:d4:e1:87:2c:f5:51:53:31:a2:f0:f8:2c:27:
         7e:33:01:5b:58:c1:19:e8:55:56:16:f3:4c:14:f7:da:0c:13:
         22:b2:ef:f1:d6:dc:fd:60:fd:57:d8:9f:08:4d:84:71:c2:45:
         57:69:88:49:d7:30:a2:35:03:8c:12:c0:10:c6:bf:11:16:c9:
         08:0a:22:0e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvPbNSogE6iry80CSEdqhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0
ZmM5OGUwHhcNMjUwNDEzMTMwMTM0WhcNMjUwNDE0MTMwMTM0WjAzMTEwLwYDVQQD
Eyg3YjI5NjgxZGM5ZjY2NmY2ZGUxZDk1NmYzN2U1ZjJhOTI2MmVlNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MkDGr5rNIKzdOD9WOfHG5NxyjnJ
NRjY3TSIhq1noH1ouGH+gvXWkuDOATJ+LK9VOrvDF48vauf0hJ48A0zEiImCS4kV
0c7rOLg8V8DU6mjow8EM9FbR/V765CDB9VrN8lAAARlh4Wri5j7G7OnvNSIQCq21
+84EvLZeCNJNH+nMpXJcHNbIp5zptRRRIB0RSbRwlx2W/gbVBKV41hnC/wZY/xA1
Z32GE/4NRDVu4C5uS2cBK8EyMjiS+gqmt6Hw3kw5Oo48gHMKPgsQ2tDzSrw44pI9
DtcSi0ro3rEUwPt0yGtHLx4Qm9emcjAM1Xk+qxT2fwUuG/qeIw0of6OEvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHspaB3J9mb23h2Vbzfl8qkmLuX6MB8GA1UdIwQY
MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj
LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5
MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALayJ
wfwU1tqrD0cQ7DhET0eGmHPXVWqVRe3ebOiQwchRkxod93GS97FqUspLWDln4/Jm
mnPxy5UNzty4k1Il2G0b3dxEAUbkNruYWfWiQSrSfuxk5J1Ip3L5G50ZTarzgA94
gWJZtcMZSPRvsodjMiPcbZZ0Dpb90Xj45pzM7LGPC+c6jJVjyGPTi+a1hpkXU4m9
U4waluUFWi73z9cSLsI6wa+AR1V7geb+AfT70k1Nk7vN35n5YE3U4Ycs9VFTMaLw
+CwnfjMBW1jBGehVVhbzTBT32gwTIrLv8dbc/WD9V9ifCE2EccJFV2mISdcwojUD
jBLAEMa/ERbJCAoiDg==
-----END CERTIFICATE-----