Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File:                     pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier:          697fVdlX8O5R2+LS9bz/DHo5K2LLrGWcvbo15y5mYKM=
Subject key identifier:   1A:29:D4:97:14:2D:10:80:6D:E2:D9:9D:39:DB:02:E8:04:21:26:B3
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer:       /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial:       01962E2AF169F1AFD24C3149FE68F96D77B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: 3Bs5OeXgBmIpTOSXcd5WLzy77Cu93XjMbbK7POsbUNw=)
                          2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:69:f1:af:d2:4c:31:49:fe:68:f9:6d:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=1a29d497142d10806de2d99d39db02e8042126b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:17:4e:0a:1a:c9:a3:21:79:bd:91:8a:0c:
                    05:7e:cf:5e:55:9e:02:f3:40:5b:51:8f:24:d5:01:
                    8a:f3:42:70:8c:42:d9:12:48:97:0d:05:e3:8d:3f:
                    46:ff:c5:7c:05:15:cb:55:1d:5c:43:d5:d3:a8:cb:
                    3d:ac:20:4a:84:75:96:7b:e3:18:4a:48:51:e9:72:
                    1e:61:42:49:91:7d:69:98:08:ad:91:f9:fa:f3:5f:
                    1e:d2:3b:c8:cb:3e:67:fe:2f:18:00:a1:7c:cd:7a:
                    29:6f:52:a5:6c:3a:f0:90:b9:58:33:3f:f6:a9:2f:
                    9a:83:0c:b4:ac:21:98:6d:9f:b5:fb:52:40:b9:8d:
                    9f:e2:f8:fd:ad:53:0b:aa:ed:f6:34:d3:42:26:18:
                    b4:1a:dd:7c:ee:b1:ae:f5:9c:25:d4:af:97:ac:6c:
                    2f:78:fe:7d:78:ad:73:dd:57:57:64:64:f0:27:6b:
                    20:c8:62:6c:52:e3:e6:1a:dd:62:4e:b7:9d:6e:ec:
                    39:c7:74:d6:3e:32:49:4b:b0:d7:80:e8:37:a4:d9:
                    f2:61:cb:64:ce:ca:5e:2c:82:c0:98:46:08:6e:ef:
                    d6:2d:8c:89:07:20:9a:90:e0:93:10:b5:8b:42:fa:
                    b7:3f:01:91:22:19:c9:cc:b6:25:44:d9:45:19:9d:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:29:D4:97:14:2D:10:80:6D:E2:D9:9D:39:DB:02:E8:04:21:26:B3
            X509v3 Authority Key Identifier:
                keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d0:f1:61:5f:c0:1a:08:9f:f8:ec:6b:12:ad:ab:fa:b0:4b:
         bb:7c:7b:b4:06:ce:75:24:89:74:d7:1f:4c:e3:1a:d7:d5:51:
         88:c2:f8:44:e2:66:98:0c:61:05:3c:bc:52:84:63:b4:ba:76:
         d0:b1:99:ea:f5:ab:09:0e:48:8a:c1:0b:b8:1b:33:f7:94:01:
         bc:12:95:41:a7:6e:74:ec:2f:72:13:b6:f1:28:2d:71:d6:39:
         4a:1d:2e:10:e8:74:03:19:69:a3:60:b8:90:56:db:bd:76:ea:
         d3:04:e8:9b:23:2f:bb:c0:4c:ae:7d:9b:bc:cd:f4:72:27:7a:
         d5:e9:24:ea:a9:9b:ec:ff:bf:7e:b6:db:f0:bb:34:fa:74:1a:
         9e:14:55:a6:4c:21:bb:a2:13:2a:54:be:d9:b7:70:80:0e:9e:
         9a:46:5f:85:e4:34:4e:4b:68:e6:78:31:09:b5:46:1b:95:93:
         51:ce:d3:60:b2:63:e6:bf:db:f4:00:6e:17:99:a3:6c:63:7e:
         40:39:b0:e8:6f:62:85:88:3b:84:2e:f2:e5:e3:f2:c3:12:53:
         d9:54:6a:02:f4:ee:1a:0e:18:12:b5:7d:18:39:8f:c2:8a:38:
         93:f4:35:73:b4:c4:db:c8:dc:62:5c:48:f7:c2:9e:4b:30:75:
         33:f3:33:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvFp8a/STDFJ/mj5bXewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YWE5YmNkMDZlYTZjNTY1ZGQ5MDdjYTA0ZTUwNzdkNjhj
MDY2NGYwHhcNMjUwNDEzMDgwMTI4WhcNMjUwNDE0MDgwMTI4WjAzMTEwLwYDVQQD
EygxYTI5ZDQ5NzE0MmQxMDgwNmRlMmQ5OWQzOWRiMDJlODA0MjEyNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP4XTgoayaMheb2RigwFfs9eVZ4C
80BbUY8k1QGK80JwjELZEkiXDQXjjT9G/8V8BRXLVR1cQ9XTqMs9rCBKhHWWe+MY
SkhR6XIeYUJJkX1pmAitkfn6818e0jvIyz5n/i8YAKF8zXopb1KlbDrwkLlYMz/2
qS+agwy0rCGYbZ+1+1JAuY2f4vj9rVMLqu32NNNCJhi0Gt187rGu9Zwl1K+XrGwv
eP59eK1z3VdXZGTwJ2sgyGJsUuPmGt1iTredbuw5x3TWPjJJS7DXgOg3pNnyYctk
zspeLILAmEYIbu/WLYyJByCakOCTELWLQvq3PwGRIhnJzLYlRNlFGZ3QUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBop1JcULRCAbeLZnTnbAugEISazMB8GA1UdIwQY
MBaAFKSqm80G6mxWXdkHygTlB31owGZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQt
MGFiOGRkOWViYWIxLzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQtMGFiOGRkOWViYWIx
LzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNDxYV/A
Ggif+OxrEq2r+rBLu3x7tAbOdSSJdNcfTOMa19VRiML4ROJmmAxhBTy8UoRjtLp2
0LGZ6vWrCQ5IisELuBsz95QBvBKVQadudOwvchO28SgtcdY5Sh0uEOh0Axlpo2C4
kFbbvXbq0wTomyMvu8BMrn2bvM30cid61ekk6qmb7P+/frbb8Ls0+nQanhRVpkwh
u6ITKlS+2bdwgA6emkZfheQ0Tkto5ngxCbVGG5WTUc7TYLJj5r/b9ABuF5mjbGN+
QDmw6G9ihYg7hC7y5ePywxJT2VRqAvTuGg4YErV9GDmPwoo4k/Q1c7TE28jcYlxI
98KeSzB1M/Mz8A==
-----END CERTIFICATE-----