Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File:                     l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier:          q8wisyItitVQMxGVm3qB9UAS3UoDwSPJaqeu5dYw44A=
Subject key identifier:   26:07:E4:86:47:64:04:27:8C:5F:E0:97:62:17:27:AC:0E:3A:BA:00
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer:       /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial:       01962F3D51AA87A3DEF0244488653846FBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: QJQeMPlg9WGfXq72AZiCSewuDI8.roa (hash: r0Rvs4MlW/m7D+4R19PKkzv3HipqfF3UT75d6mitfBY=)
                          2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: Il1J/fRsYoblGdl21EXfzyAzKfT9OUpp+t6YpDHB4rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:51:aa:87:a3:de:f0:24:44:88:65:38:46:fb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=2607e486476404278c5fe097621727ac0e3aba00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:28:2c:31:ca:da:36:e2:72:fc:56:b2:8d:
                    3f:41:6b:d2:c5:d7:d3:76:ee:f5:de:63:fe:5e:1f:
                    e1:f9:84:88:9c:06:14:f8:fc:4b:36:66:39:c3:e8:
                    e9:b0:de:9b:3c:c0:e6:d5:46:aa:b7:e9:f3:1c:37:
                    5b:8d:32:98:1b:4f:02:86:2b:82:b9:6f:ea:16:56:
                    34:0e:8a:2c:ef:4a:a7:b6:4c:e0:81:3b:45:d2:0a:
                    b6:59:36:bf:8c:68:22:bc:45:34:1a:69:95:cd:72:
                    f6:b5:7a:62:7a:9f:39:57:b6:4a:12:1d:44:22:dd:
                    ed:77:32:22:2c:4b:37:80:73:2c:18:99:ee:6b:fb:
                    69:0c:3e:9c:ed:84:ff:45:35:eb:2d:f9:63:60:5b:
                    c5:44:25:9d:80:fe:57:be:c9:5a:0d:46:17:86:bd:
                    fd:d3:6b:71:fa:1c:89:60:c3:48:49:e7:2f:7d:5e:
                    b3:7a:83:4f:d1:b5:ed:8b:61:29:a4:cd:5a:2d:a6:
                    b3:9c:80:fa:fb:20:f5:d8:91:5c:09:b1:44:6d:bf:
                    69:fc:33:cf:67:40:b7:d6:d2:a7:45:91:9f:6a:ff:
                    54:fa:c2:49:c1:05:93:49:93:23:8b:87:6d:59:8c:
                    1d:22:b1:dd:68:80:c1:a3:41:c3:b8:69:16:31:8b:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:E4:86:47:64:04:27:8C:5F:E0:97:62:17:27:AC:0E:3A:BA:00
            X509v3 Authority Key Identifier:
                keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:bd:86:de:41:3c:f2:73:84:ee:35:c4:55:ff:6c:30:2b:
         d5:64:07:24:37:36:10:33:d2:7d:24:be:07:76:d8:6c:d0:38:
         97:56:94:0a:41:89:f4:06:e6:d2:6c:9f:a6:6b:3f:a9:fb:3c:
         54:91:dc:df:05:ab:5e:0e:bd:00:8e:58:42:8d:21:2f:bb:5b:
         9a:e9:f8:23:22:47:a2:f7:d7:34:09:a3:ff:4a:88:4c:88:14:
         38:81:d7:d8:df:89:51:78:12:44:60:bd:d5:9c:a7:21:9d:97:
         3f:37:65:7e:dc:56:03:2a:7e:24:9c:51:60:35:86:b5:da:34:
         1a:20:48:c8:8e:36:af:1b:41:a0:b7:0c:c3:bd:ac:a0:89:98:
         99:76:39:53:aa:1d:a9:ea:8e:4f:ed:63:ea:16:34:a0:80:81:
         a4:b3:71:e8:01:0c:7a:4c:f2:3f:92:d6:cc:eb:0c:0e:20:60:
         dc:d9:40:e8:6c:3e:8f:b8:a2:ac:a7:01:cf:39:7b:ef:b9:19:
         27:8b:c8:c1:f5:65:e5:4e:b2:28:1d:30:35:7c:5c:60:69:40:
         33:96:e2:cd:5e:a4:9c:a3:93:b3:16:1f:17:61:69:84:3d:01:
         af:50:36:36:ff:7f:8a:4a:8c:91:6d:35:bc:99:66:0e:37:e3:
         20:30:10:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVGqh6Pe8CREiGU4RvvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjQ2NzRlODIzNmJkZGMzZDIzMjdhMDJiMGFiZmJhNzlh
NTQ4M2MwHhcNMjUwNDEzMTMwMTA5WhcNMjUwNDE0MTMwMTA5WjAzMTEwLwYDVQQD
EygyNjA3ZTQ4NjQ3NjQwNDI3OGM1ZmUwOTc2MjE3MjdhYzBlM2FiYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqUoLDHK2jbicvxWso0/QWvSxdfT
du713mP+Xh/h+YSInAYU+PxLNmY5w+jpsN6bPMDm1Uaqt+nzHDdbjTKYG08ChiuC
uW/qFlY0Doos70qntkzggTtF0gq2WTa/jGgivEU0GmmVzXL2tXpiep85V7ZKEh1E
It3tdzIiLEs3gHMsGJnua/tpDD6c7YT/RTXrLfljYFvFRCWdgP5XvslaDUYXhr39
02tx+hyJYMNISecvfV6zeoNP0bXti2EppM1aLaaznID6+yD12JFcCbFEbb9p/DPP
Z0C31tKnRZGfav9U+sJJwQWTSZMji4dtWYwdIrHdaIDBo0HDuGkWMYtCwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYH5IZHZAQnjF/gl2IXJ6wOOroAMB8GA1UdIwQY
MBaAFJf0Z06CNr3cPSMnoCsKv7p5pUg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUt
YWYyZWM1ZDhkYzNjLzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUtYWYyZWM1ZDhkYzNj
LzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAII69ht5B
PPJzhO41xFX/bDAr1WQHJDc2EDPSfSS+B3bYbNA4l1aUCkGJ9Abm0myfpms/qfs8
VJHc3wWrXg69AI5YQo0hL7tbmun4IyJHovfXNAmj/0qITIgUOIHX2N+JUXgSRGC9
1ZynIZ2XPzdlftxWAyp+JJxRYDWGtdo0GiBIyI42rxtBoLcMw72soImYmXY5U6od
qeqOT+1j6hY0oICBpLNx6AEMekzyP5LWzOsMDiBg3NlA6Gw+j7iirKcBzzl777kZ
J4vIwfVl5U6yKB0wNXxcYGlAM5bizV6knKOTsxYfF2FphD0Br1A2Nv9/ikqMkW01
vJlmDjfjIDAQkw==
-----END CERTIFICATE-----