Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File:                     IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier:          wekU8Rt/kDqrpc16aajZXdzDC32aBGEh04PXHsITs4U=
Subject key identifier:   E1:37:88:E1:B0:E5:C4:94:89:14:B3:A4:69:43:E7:ED:DD:6D:BB:29
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer:       /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial:       01962DF3DF33062B13F7F3B25D0AE320911E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
                          2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: 4ycm2k4e0Q4esiyWocrR6e7Pp+se/NAFYWbzgSPO7nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:df:33:06:2b:13:f7:f3:b2:5d:0a:e3:20:91:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=e13788e1b0e5c4948914b3a46943e7eddd6dbb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:ed:68:fd:bf:30:aa:ab:31:ec:50:6a:41:
                    36:cd:d5:6e:de:54:30:f2:f5:8f:3b:72:e5:93:da:
                    33:7b:65:f0:fe:63:41:26:3a:1e:83:cb:80:68:d3:
                    52:71:d7:de:46:a0:f3:8a:58:93:2e:06:5f:d4:e0:
                    0e:c8:f4:b4:a1:39:3d:67:1d:ec:30:83:11:af:13:
                    2e:31:4d:89:ac:81:b1:f6:54:c1:85:73:01:db:81:
                    27:5c:ea:b3:d1:3f:88:c6:7a:49:21:6b:66:17:ca:
                    b3:82:8d:a3:5c:00:83:71:ef:9a:3d:32:4d:ec:68:
                    8e:5e:9a:60:71:10:9f:78:a6:98:90:01:95:ad:0f:
                    9e:5b:d5:e9:70:86:33:47:5d:f1:41:83:e4:35:d1:
                    6c:f3:c4:c5:c5:f0:c7:ff:9d:e3:5e:fd:de:54:05:
                    d8:31:dc:32:53:6d:6e:63:81:aa:ed:41:42:2c:44:
                    2d:85:2b:76:be:17:c1:66:05:c1:8f:51:7a:2b:6c:
                    1b:0c:56:66:26:00:44:49:91:b4:16:4a:38:9c:ce:
                    3b:d1:fd:6e:96:6e:35:ef:1a:6a:c9:ac:9a:b4:6d:
                    01:2e:c1:ce:15:38:e7:30:01:3c:1d:04:1c:a5:6f:
                    af:52:5f:b9:b1:9d:95:93:f5:23:2b:14:41:e3:7e:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:88:E1:B0:E5:C4:94:89:14:B3:A4:69:43:E7:ED:DD:6D:BB:29
            X509v3 Authority Key Identifier:
                keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:8f:00:6d:4f:72:04:94:e2:a6:03:91:ac:5b:3d:24:78:
         c9:41:0f:6d:53:20:82:14:a7:89:39:34:0c:57:41:87:56:6a:
         3f:1e:99:69:8e:b6:8d:a6:f0:72:be:a3:01:07:10:33:62:35:
         60:bc:97:f3:b0:cd:8e:4c:48:cc:67:31:45:9a:27:2a:25:61:
         eb:22:2f:ce:b5:cb:9d:1d:c6:11:e4:ac:36:65:d6:fe:de:42:
         72:9f:84:dc:0e:bf:0a:ca:c7:d5:fa:ff:c9:b9:ff:84:59:cb:
         a6:77:61:e8:fb:21:bf:28:ef:29:dc:80:17:60:85:60:2e:a2:
         81:a7:4e:eb:e5:8f:4b:16:a7:c4:3a:40:5a:2a:5d:26:45:a9:
         d8:1b:76:dc:76:3b:a4:1b:5d:4a:41:29:43:af:c8:5f:20:a4:
         94:31:6c:d1:5e:d3:24:57:8d:7e:2a:72:15:fe:d5:3f:ab:f1:
         c4:81:16:74:6a:29:fe:96:49:94:fe:f6:7e:71:82:c8:ac:77:
         c0:a3:68:4c:31:0e:b7:79:67:62:ac:f5:46:8a:13:ea:d6:89:
         af:69:77:09:d1:d0:05:af:bf:0f:de:4b:4f:9c:dc:2e:43:2e:
         e1:3f:19:9e:bf:00:3e:49:d1:86:cf:73:b8:8e:c7:e9:b7:d0:
         91:25:15:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt898zBisT9/OyXQrjIJEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjVmZjA3NjcwNDUyM2ZmNmJlODgyYjg3ZWVmYTgwN2Ix
ODhhYTkwHhcNMjUwNDEzMDcwMTE5WhcNMjUwNDE0MDcwMTE5WjAzMTEwLwYDVQQD
EyhlMTM3ODhlMWIwZTVjNDk0ODkxNGIzYTQ2OTQzZTdlZGRkNmRiYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUjtaP2/MKqrMexQakE2zdVu3lQw
8vWPO3Llk9oze2Xw/mNBJjoeg8uAaNNScdfeRqDziliTLgZf1OAOyPS0oTk9Zx3s
MIMRrxMuMU2JrIGx9lTBhXMB24EnXOqz0T+IxnpJIWtmF8qzgo2jXACDce+aPTJN
7GiOXppgcRCfeKaYkAGVrQ+eW9XpcIYzR13xQYPkNdFs88TFxfDH/53jXv3eVAXY
MdwyU21uY4Gq7UFCLEQthSt2vhfBZgXBj1F6K2wbDFZmJgBESZG0Fko4nM470f1u
lm417xpqyayatG0BLsHOFTjnMAE8HQQcpW+vUl+5sZ2Vk/UjKxRB435aqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE3iOGw5cSUiRSzpGlD5+3dbbspMB8GA1UdIwQY
MBaAFCD1/wdnBFI/9r6IK4fu+oB7GIqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDct
ZjZhN2I0OWY5ODFhLzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDctZjZhN2I0OWY5ODFh
LzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSyPAG1P
cgSU4qYDkaxbPSR4yUEPbVMgghSniTk0DFdBh1ZqPx6ZaY62jabwcr6jAQcQM2I1
YLyX87DNjkxIzGcxRZonKiVh6yIvzrXLnR3GEeSsNmXW/t5Ccp+E3A6/CsrH1fr/
ybn/hFnLpndh6PshvyjvKdyAF2CFYC6igadO6+WPSxanxDpAWipdJkWp2Bt23HY7
pBtdSkEpQ6/IXyCklDFs0V7TJFeNfipyFf7VP6vxxIEWdGop/pZJlP72fnGCyKx3
wKNoTDEOt3lnYqz1RooT6taJr2l3CdHQBa+/D95LT5zcLkMu4T8Znr8APknRhs9z
uI7H6bfQkSUV5A==
-----END CERTIFICATE-----