Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File:                     rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier:          JvT34WxxdC3Yz4YJ/V4p68PLKHF9lIyudmb8CVRy9xI=
Subject key identifier:   9B:92:10:52:56:5B:BF:84:35:1F:96:52:3D:82:90:B2:CA:FA:A1:75
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer:       /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial:       01962FAB0C4265407E5A3311E6C9946E7109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
                          2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: ykhl5Exvh7k+wKoNXu2o/3gpob8FofLjp8Gx4rPgeFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0c:42:65:40:7e:5a:33:11:e6:c9:94:6e:71:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=9b921052565bbf84351f96523d8290b2cafaa175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:25:25:48:82:d7:40:96:3b:0a:e1:7a:37:
                    97:f4:82:97:90:30:73:b0:dc:98:b7:81:da:48:35:
                    36:15:bc:6f:50:07:55:4c:3b:74:ef:d4:a2:97:58:
                    41:28:c2:02:fc:dd:97:71:d6:c8:11:2b:e7:9a:12:
                    2a:6d:0e:48:db:b3:2d:18:a4:71:b1:38:75:81:ba:
                    13:23:a6:bf:02:1e:af:eb:d3:ea:8e:45:5f:8f:f5:
                    b4:ce:3f:69:54:fb:0a:cb:e7:82:56:6e:95:69:f4:
                    37:f6:dd:1a:4d:1d:71:b7:3a:f8:02:9e:eb:ff:70:
                    0b:f5:2a:87:1f:99:c7:69:34:8a:b0:93:d9:4c:9b:
                    4b:58:4f:3b:68:15:63:65:c4:2b:97:65:6e:4f:37:
                    e5:02:6c:2b:6f:f5:f9:ad:7b:c9:2f:18:06:24:a3:
                    bc:22:76:59:e7:1c:0a:1c:0f:a2:fe:4f:b4:00:bc:
                    94:c4:4c:08:06:f0:2f:5c:bb:24:25:5c:34:37:47:
                    f7:54:41:c7:86:7f:33:c1:90:79:15:cb:d4:9c:ea:
                    18:a7:1c:fa:22:1d:6b:f9:86:cc:af:1d:af:f6:95:
                    98:c7:20:7b:dd:2d:bd:bb:af:37:2d:59:b8:c3:61:
                    e7:d2:8b:36:da:6f:6a:95:e0:7c:53:79:c9:bf:bd:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:92:10:52:56:5B:BF:84:35:1F:96:52:3D:82:90:B2:CA:FA:A1:75
            X509v3 Authority Key Identifier:
                keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:d3:4d:50:67:fb:a5:11:c3:17:5f:76:64:e1:1b:a3:07:
         9d:1a:36:9d:87:f8:d0:f2:ca:67:92:27:23:f0:93:1a:6d:53:
         c5:4f:31:89:05:5d:1f:f8:23:85:87:67:70:65:cf:ac:95:44:
         44:77:a5:ee:68:b5:7f:42:47:67:b5:8f:81:85:a9:ce:39:3e:
         6d:8f:0f:3d:6f:84:d3:d5:55:37:db:87:be:65:0c:0d:d7:e9:
         11:9d:9c:d5:73:14:5b:5d:a1:4a:64:7f:10:d7:ac:39:17:bf:
         52:b6:07:6b:e0:c0:fa:a8:65:b8:2a:3b:f3:a8:04:3e:10:ec:
         10:1e:b9:ee:c3:fc:51:75:eb:8a:9c:67:80:8f:a5:14:3d:92:
         fa:d8:e9:7c:d6:ec:d2:57:aa:f1:6a:03:e6:c5:7b:63:5f:ef:
         7d:86:83:67:5f:71:20:b8:dd:8e:80:c8:e5:ac:b6:8a:e7:f7:
         15:80:61:47:35:0b:b8:3f:e6:75:fb:da:0a:e7:39:4f:5a:ca:
         6c:ca:b1:77:01:37:7c:6c:1b:64:eb:7c:01:d2:d1:32:bd:e0:
         bb:e9:de:2b:96:f9:4c:26:48:77:e8:4f:d8:58:ab:b2:0f:9c:
         21:46:cc:fc:bc:c3:3a:de:7b:be:00:fa:ef:49:8e:15:4f:2e:
         b7:16:04:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwxCZUB+WjMR5smUbnEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjUwNDEzMTUwMTAwWhcNMjUwNDE0MTUwMTAwWjAzMTEwLwYDVQQD
Eyg5YjkyMTA1MjU2NWJiZjg0MzUxZjk2NTIzZDgyOTBiMmNhZmFhMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwAlJUiC10CWOwrhejeX9IKXkDBz
sNyYt4HaSDU2FbxvUAdVTDt079Sil1hBKMIC/N2XcdbIESvnmhIqbQ5I27MtGKRx
sTh1gboTI6a/Ah6v69PqjkVfj/W0zj9pVPsKy+eCVm6VafQ39t0aTR1xtzr4Ap7r
/3AL9SqHH5nHaTSKsJPZTJtLWE87aBVjZcQrl2VuTzflAmwrb/X5rXvJLxgGJKO8
InZZ5xwKHA+i/k+0ALyUxEwIBvAvXLskJVw0N0f3VEHHhn8zwZB5FcvUnOoYpxz6
Ih1r+YbMrx2v9pWYxyB73S29u683LVm4w2Hn0os22m9qleB8U3nJv72ikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuSEFJWW7+ENR+WUj2CkLLK+qF1MB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQTTTVBn
+6URwxdfdmThG6MHnRo2nYf40PLKZ5InI/CTGm1TxU8xiQVdH/gjhYdncGXPrJVE
RHel7mi1f0JHZ7WPgYWpzjk+bY8PPW+E09VVN9uHvmUMDdfpEZ2c1XMUW12hSmR/
ENesORe/UrYHa+DA+qhluCo786gEPhDsEB657sP8UXXripxngI+lFD2S+tjpfNbs
0leq8WoD5sV7Y1/vfYaDZ19xILjdjoDI5ay2iuf3FYBhRzULuD/mdfvaCuc5T1rK
bMqxdwE3fGwbZOt8AdLRMr3gu+neK5b5TCZId+hP2Firsg+cIUbM/LzDOt57vgD6
70mOFU8utxYEYw==
-----END CERTIFICATE-----