Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          RbdqjMb29MvyMs5iDimYf+TMrP1bhtF4rBGSq/ekiyM=
Subject key identifier:   92:2C:14:CB:84:E5:CF:FE:CF:13:B9:77:BA:37:B8:68:16:04:DE:7F
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       01962DF4464D88DE8778F4CE7670466AFB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: XM9qvhgCCApvi27PyVxTEuMbfhm3ZRwKTXPszEdCaQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:46:4d:88:de:87:78:f4:ce:76:70:46:6a:fb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=922c14cb84e5cffecf13b977ba37b8681604de7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:5a:da:16:b9:17:fa:6c:80:e6:a2:c8:30:
                    e7:ac:50:14:a3:73:1e:1b:ac:26:1f:b7:5c:20:f5:
                    99:02:3d:b8:3e:01:34:86:72:1a:f0:72:17:5a:6d:
                    c7:de:16:ed:01:33:08:bf:7e:5e:46:0f:ad:d5:98:
                    fe:40:12:63:18:20:74:93:57:41:37:64:be:82:fa:
                    1c:82:ad:78:42:b3:b7:9b:1d:42:2c:70:a4:c6:e9:
                    82:e3:ab:e1:f0:a9:cb:a4:80:a4:e9:4f:8d:71:a5:
                    ca:31:eb:e4:c7:58:78:ca:73:af:57:db:7c:59:68:
                    fe:84:e7:de:a4:f9:c8:8f:90:cf:f8:57:0d:51:4a:
                    d7:fa:1a:1d:c9:90:6a:87:ee:16:cc:8f:41:dd:3a:
                    e5:6d:aa:81:31:cd:7a:74:2d:f0:9c:b8:1a:3e:52:
                    29:d0:85:51:3d:44:dc:04:3d:d2:b5:a6:a2:90:b3:
                    f5:b3:5c:e4:3d:dc:45:f3:68:f6:ea:17:f3:0d:2c:
                    fb:5c:e6:8d:5b:f8:a8:d8:ec:2e:12:9a:69:23:3f:
                    57:38:fc:93:a6:27:0c:d6:74:41:5d:fa:b1:c1:86:
                    7c:b0:90:67:a2:64:c5:34:6f:81:de:c0:f3:74:89:
                    7a:bb:fc:9f:ea:0f:ec:4c:61:3e:c5:6b:f3:79:b7:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:14:CB:84:E5:CF:FE:CF:13:B9:77:BA:37:B8:68:16:04:DE:7F
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:14:75:f5:03:2a:f2:b0:59:fb:62:8b:ea:bb:fe:fa:a5:
         2c:fd:2d:f8:64:fe:f8:c2:7b:f2:c1:6c:65:5e:76:e4:fa:93:
         c0:3d:28:0c:6e:b7:13:02:e2:c5:cc:2a:13:44:fe:50:77:6f:
         ee:e6:50:6a:c3:1c:f0:53:4a:a4:23:fb:d3:49:51:07:31:eb:
         9b:05:b5:b1:e0:12:5b:7b:84:a5:32:60:69:45:95:a2:88:88:
         49:3b:ee:80:b1:da:16:c6:7b:c3:c4:73:c9:f1:ac:73:59:76:
         32:ef:f0:8d:02:3f:23:49:89:9c:f7:15:e9:fb:da:df:c2:6d:
         0d:51:4c:65:ff:ca:64:03:64:e3:01:b7:66:bf:53:f0:6c:88:
         b4:e1:a3:2f:5c:fc:3e:e8:76:16:2a:14:be:45:20:80:58:ed:
         77:20:0b:27:87:ad:55:97:a7:95:34:c3:84:f2:bc:e8:86:30:
         c5:58:46:2e:1c:b1:a3:f2:4e:32:47:c2:d4:c0:82:26:88:7f:
         ea:a2:3e:bb:f0:75:c1:e9:ab:67:15:89:16:1b:5d:f7:a4:02:
         0e:4a:a8:bf:63:54:c1:c6:cd:e2:67:d2:aa:68:78:c7:4c:11:
         56:47:67:c3:7e:2d:f6:f8:f5:0f:5a:b7:d9:83:88:b3:ba:7c:
         bb:75:96:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EZNiN6HePTOdnBGavthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz
M2I3OGIwHhcNMjUwNDEzMDcwMTQ1WhcNMjUwNDE0MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg5MjJjMTRjYjg0ZTVjZmZlY2YxM2I5NzdiYTM3Yjg2ODE2MDRkZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZNa2ha5F/psgOaiyDDnrFAUo3Me
G6wmH7dcIPWZAj24PgE0hnIa8HIXWm3H3hbtATMIv35eRg+t1Zj+QBJjGCB0k1dB
N2S+gvocgq14QrO3mx1CLHCkxumC46vh8KnLpICk6U+NcaXKMevkx1h4ynOvV9t8
WWj+hOfepPnIj5DP+FcNUUrX+hodyZBqh+4WzI9B3TrlbaqBMc16dC3wnLgaPlIp
0IVRPUTcBD3StaaikLP1s1zkPdxF82j26hfzDSz7XOaNW/io2OwuEpppIz9XOPyT
picM1nRBXfqxwYZ8sJBnomTFNG+B3sDzdIl6u/yf6g/sTGE+xWvzebf2OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIsFMuE5c/+zxO5d7o3uGgWBN5/MB8GA1UdIwQY
MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt
YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5
LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3wUdfUD
KvKwWftii+q7/vqlLP0t+GT++MJ78sFsZV525PqTwD0oDG63EwLixcwqE0T+UHdv
7uZQasMc8FNKpCP700lRBzHrmwW1seASW3uEpTJgaUWVooiISTvugLHaFsZ7w8Rz
yfGsc1l2Mu/wjQI/I0mJnPcV6fva38JtDVFMZf/KZANk4wG3Zr9T8GyItOGjL1z8
Puh2FioUvkUggFjtdyALJ4etVZenlTTDhPK86IYwxVhGLhyxo/JOMkfC1MCCJoh/
6qI+u/B1wemrZxWJFhtd96QCDkqov2NUwcbN4mfSqmh4x0wRVkdnw34t9vj1D1q3
2YOIs7p8u3WWZw==
-----END CERTIFICATE-----