Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          HKDESHfVtMpT9Q0E8ja+hmFP8u2jVB45bqsMWMwdq/E=
Subject key identifier:   B2:CC:7E:13:FD:51:3C:03:B8:B7:80:7F:05:59:10:77:D8:E8:A5:B9
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       01962E2AF509F7097C8BF3785AC84B21AD84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          F0
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
                          2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: J/iIx1Tp5nWTbdilfneUDvFxCAX1kHunEBdRgdXqGQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:09:f7:09:7c:8b:f3:78:5a:c8:4b:21:ad:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=b2cc7e13fd513c03b8b7807f05591077d8e8a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:cb:30:95:61:fd:41:55:fa:29:10:01:1c:
                    92:98:a3:2e:39:0f:83:b2:fa:c3:bc:5c:5b:0c:1d:
                    6a:d6:c9:bf:75:ec:a8:06:90:0b:de:f3:33:d9:03:
                    7b:e6:fb:7d:c4:f5:33:fa:96:58:ec:b0:3a:d6:7b:
                    70:30:8b:28:68:a3:13:ea:ab:58:0f:69:81:8c:05:
                    21:73:0f:21:ae:0a:5d:d9:a7:c1:a0:d3:44:b8:e0:
                    f4:88:3f:91:52:fd:53:b7:d6:ad:0a:67:33:75:f2:
                    09:fe:a6:79:c6:72:d1:f3:1e:62:0d:94:53:72:5e:
                    07:d7:5f:3c:9f:88:0b:21:32:05:ae:67:5f:f6:30:
                    d8:5a:62:38:cf:f8:f8:f5:c7:8c:68:8c:ba:77:42:
                    a3:cf:f9:29:f6:95:07:51:46:e7:b2:58:a5:1d:db:
                    5b:a7:f3:63:00:7e:de:00:c7:3a:39:69:37:b3:78:
                    7b:85:2a:62:0c:a8:73:f0:aa:06:01:bc:39:4e:0a:
                    99:81:d2:56:49:d7:e5:8a:ce:88:03:79:bd:85:ab:
                    83:09:3d:ea:a2:cb:4c:50:ee:2b:f3:30:2f:9e:d4:
                    d8:f5:d4:e5:c8:6f:b1:75:d9:ac:1d:28:f0:0e:11:
                    54:38:49:58:ce:0f:0b:cb:3e:e1:c8:ba:83:8b:19:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:7E:13:FD:51:3C:03:B8:B7:80:7F:05:59:10:77:D8:E8:A5:B9
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:5e:d5:fe:e7:dd:de:5c:47:53:83:b3:01:ce:4c:9a:b5:fd:
         78:e8:8b:aa:e4:48:8e:66:73:8c:aa:f7:b2:3e:26:b5:79:cf:
         4f:74:5a:0c:82:a8:ce:19:94:cf:1f:b9:41:e4:5c:f9:a2:5f:
         84:63:6d:bf:50:04:82:77:9f:a1:b4:51:d7:bb:82:90:cb:ff:
         b8:d1:4e:fc:21:cb:e7:d1:bd:a7:fd:be:70:c9:bf:56:48:fc:
         dd:b8:88:72:ee:82:76:51:f6:59:a6:14:27:d8:f6:de:f3:89:
         e4:1b:14:2e:a9:2b:32:ba:fc:1d:18:cf:87:90:1b:86:1c:f4:
         84:41:85:28:83:3a:06:3c:0d:64:eb:04:39:e6:1d:10:33:ff:
         7e:72:05:3a:91:7e:37:3d:29:fb:55:19:e2:6c:96:5f:83:b5:
         47:6e:ed:c2:fc:93:c6:f7:f6:89:8a:ce:9b:3f:8d:a7:72:89:
         87:b7:d6:67:21:35:1e:24:d5:00:68:92:27:bf:e6:a2:39:a5:
         88:ae:58:23:e9:9e:25:d3:ee:ed:6e:78:41:8e:b4:9f:72:50:
         38:f2:78:28:8e:54:5e:5f:ac:76:01:c7:ea:08:57:d7:8e:9a:
         fc:ea:2f:6c:14:2e:4d:ff:da:56:3b:69:01:7e:16:72:c8:0e:
         c5:65:4a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvUJ9wl8i/N4WshLIa2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjZmZTlhN2UyMWE3NzNmNjFkNjUxMjNmODNlMjgyOGZk
MDQyOWYwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
EyhiMmNjN2UxM2ZkNTEzYzAzYjhiNzgwN2YwNTU5MTA3N2Q4ZThhNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ7LMJVh/UFV+ikQARySmKMuOQ+D
svrDvFxbDB1q1sm/deyoBpAL3vMz2QN75vt9xPUz+pZY7LA61ntwMIsoaKMT6qtY
D2mBjAUhcw8hrgpd2afBoNNEuOD0iD+RUv1Tt9atCmczdfIJ/qZ5xnLR8x5iDZRT
cl4H1188n4gLITIFrmdf9jDYWmI4z/j49ceMaIy6d0Kjz/kp9pUHUUbnslilHdtb
p/NjAH7eAMc6OWk3s3h7hSpiDKhz8KoGAbw5TgqZgdJWSdflis6IA3m9hauDCT3q
ostMUO4r8zAvntTY9dTlyG+xddmsHSjwDhFUOElYzg8Lyz7hyLqDixmQYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLMfhP9UTwDuLeAfwVZEHfY6KW5MB8GA1UdIwQY
MBaAFC0m/pp+Iadz9h1lEj+D4oKP0EKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUt
ZWIzMDZhOGQ0YWI1LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUtZWIzMDZhOGQ0YWI1
LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA717V/ufd
3lxHU4OzAc5MmrX9eOiLquRIjmZzjKr3sj4mtXnPT3RaDIKozhmUzx+5QeRc+aJf
hGNtv1AEgnefobRR17uCkMv/uNFO/CHL59G9p/2+cMm/Vkj83biIcu6CdlH2WaYU
J9j23vOJ5BsULqkrMrr8HRjPh5Abhhz0hEGFKIM6BjwNZOsEOeYdEDP/fnIFOpF+
Nz0p+1UZ4myWX4O1R27twvyTxvf2iYrOmz+Np3KJh7fWZyE1HiTVAGiSJ7/mojml
iK5YI+meJdPu7W54QY60n3JQOPJ4KI5UXl+sdgHH6ghX146a/OovbBQuTf/aVjtp
AX4WcsgOxWVK1Q==
-----END CERTIFICATE-----