Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File:                     Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier:          Xp6sBmaRJuiSCkTp9t2cP22zvH/f0ux5eoFgL+LRC4U=
Subject key identifier:   0C:D8:5B:B2:EC:FE:92:65:8A:35:E6:5F:70:5C:17:76:79:B9:B6:23
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer:       /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial:       01962F06D627847ACDF29EC186B3FF7045A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
                          2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: NsKJk/2P/v8AjpELkSY0hue6c9tpzofYHn9bwwUi2rg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:27:84:7a:cd:f2:9e:c1:86:b3:ff:70:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=0cd85bb2ecfe92658a35e65f705c177679b9b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:9a:63:9a:90:15:c7:11:ab:46:ff:5c:37:
                    6a:cf:ea:c3:ae:5c:aa:35:2a:1f:96:c6:36:8e:34:
                    b1:ab:3f:4b:ee:90:b7:70:4a:1c:f4:41:47:44:db:
                    75:f1:2a:64:83:cb:75:f6:db:8a:3c:e3:7c:18:27:
                    fe:f7:50:23:6e:3b:63:e4:cd:12:f9:00:cf:f4:c9:
                    03:06:6a:f7:fe:f4:cd:37:ae:6d:8f:12:b0:a1:da:
                    12:52:5a:17:a2:f0:b6:87:0c:dc:5a:7b:aa:23:70:
                    3e:94:4a:c4:3f:fe:04:e1:85:13:12:45:a9:cf:19:
                    25:96:c3:a3:8e:d5:1c:95:12:cd:25:45:34:e4:81:
                    da:90:30:ad:01:26:19:70:22:fc:6e:2f:4d:4c:d7:
                    9a:a1:b7:cc:cb:b0:08:1f:4d:a2:08:aa:d3:d7:d3:
                    4f:af:ed:0b:e7:b7:07:b9:84:c1:7e:e9:99:95:66:
                    db:4a:b8:ea:1b:6c:f5:ce:9d:1d:f0:27:10:1d:8f:
                    00:e0:0f:21:0b:7c:b0:db:3f:e8:bc:94:72:44:5f:
                    82:fe:75:af:9d:6b:c8:e7:6f:5c:23:81:38:cf:71:
                    fd:06:87:70:73:1c:0c:fb:e9:7a:25:89:10:39:3a:
                    c9:e1:cf:8e:45:59:24:d0:79:84:09:48:2d:e9:6b:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:5B:B2:EC:FE:92:65:8A:35:E6:5F:70:5C:17:76:79:B9:B6:23
            X509v3 Authority Key Identifier:
                keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:58:90:f9:4e:64:8a:80:a4:7b:fd:00:00:22:c4:15:91:
         e2:9a:d9:b3:1b:fc:ef:2e:6a:89:3a:5e:e8:33:37:6a:6c:34:
         bc:5f:c1:c3:f2:8b:8c:9f:23:49:d4:0e:13:f9:21:6a:b4:2b:
         bd:90:6c:28:ee:fe:8f:0a:d8:09:67:df:df:fc:91:0d:14:f9:
         af:4c:6f:ff:dc:e2:66:76:fd:46:42:0e:9b:a7:88:4d:44:19:
         0d:64:69:76:e6:19:05:12:68:8b:dd:4a:85:52:6a:e1:ab:13:
         c6:7e:c0:47:9d:b4:5c:ff:3b:1b:88:6a:21:5c:31:9e:65:a6:
         6c:ae:18:9f:98:d9:42:26:15:24:b0:2d:3c:d3:59:56:f9:c0:
         01:3a:a3:ca:87:2a:9e:fa:2e:84:10:b7:bc:69:61:f0:db:ad:
         34:ec:6a:c2:fd:36:c3:1b:65:d4:58:07:c5:28:e1:65:b3:c2:
         11:b9:3d:74:9a:04:89:11:4d:21:22:83:12:13:d2:37:34:f1:
         4f:9c:07:3d:40:7f:c8:7b:05:ca:ce:e0:62:29:2c:12:d0:ee:
         c9:f1:13:49:ba:b5:56:3c:33:c8:ef:42:ed:1d:f0:c3:f3:aa:
         87:ae:fc:ae:3a:60:4b:e3:79:6b:0a:6e:ce:6d:59:43:00:87:
         d6:83:e7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtYnhHrN8p7BhrP/cEWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGQ5YTUwMDRjNTkyZDA5M2NjODliMGQ5MDc1MmUyNzlk
NTE4NTQwHhcNMjUwNDEzMTIwMTM5WhcNMjUwNDE0MTIwMTM5WjAzMTEwLwYDVQQD
EygwY2Q4NWJiMmVjZmU5MjY1OGEzNWU2NWY3MDVjMTc3Njc5YjliNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZmaY5qQFccRq0b/XDdqz+rDrlyq
NSoflsY2jjSxqz9L7pC3cEoc9EFHRNt18Spkg8t19tuKPON8GCf+91Ajbjtj5M0S
+QDP9MkDBmr3/vTNN65tjxKwodoSUloXovC2hwzcWnuqI3A+lErEP/4E4YUTEkWp
zxkllsOjjtUclRLNJUU05IHakDCtASYZcCL8bi9NTNeaobfMy7AIH02iCKrT19NP
r+0L57cHuYTBfumZlWbbSrjqG2z1zp0d8CcQHY8A4A8hC3yw2z/ovJRyRF+C/nWv
nWvI529cI4E4z3H9BodwcxwM++l6JYkQOTrJ4c+ORVkk0HmECUgt6WtF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzYW7Ls/pJlijXmX3BcF3Z5ubYjMB8GA1UdIwQY
MBaAFGONmlAExZLQk8yJsNkHUuJ51RhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDct
Nzc2OGQ0ZmJkY2QzLzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDctNzc2OGQ0ZmJkY2Qz
LzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBJYkPlO
ZIqApHv9AAAixBWR4prZsxv87y5qiTpe6DM3amw0vF/Bw/KLjJ8jSdQOE/kharQr
vZBsKO7+jwrYCWff3/yRDRT5r0xv/9ziZnb9RkIOm6eITUQZDWRpduYZBRJoi91K
hVJq4asTxn7AR520XP87G4hqIVwxnmWmbK4Yn5jZQiYVJLAtPNNZVvnAATqjyocq
nvouhBC3vGlh8NutNOxqwv02wxtl1FgHxSjhZbPCEbk9dJoEiRFNISKDEhPSNzTx
T5wHPUB/yHsFys7gYiksEtDuyfETSbq1VjwzyO9C7R3ww/Oqh678rjpgS+N5awpu
zm1ZQwCH1oPnMg==
-----END CERTIFICATE-----