Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
File:                     IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json)
Hash identifier:          uF1pmmj1v09TO60iX5jM5FN4MaZpqjYmzvB2R+c+y1s=
Subject key identifier:   7A:EE:91:20:21:AB:1C:57:DA:07:EA:90:33:FF:94:18:C1:51:66:74
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Certificate issuer:       /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial:       01962E6189550DB2058885870FDCF9897E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: lgEEOyPNOFu7eaRo6R72pyRRL/qDxwLrV1PAQ1XBHeY=)
                          2: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=)
                          3: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=)
                          4: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=)
                          5: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=)
                          6: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=)
                          7: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:55:0d:b2:05:88:85:87:0f:dc:f9:89:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=7aee912021ab1c57da07ea9033ff9418c1516674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:c5:a5:93:70:40:09:7d:26:46:64:06:c5:
                    30:33:b6:0b:e2:20:d5:2b:1c:74:62:53:dc:9b:8c:
                    c7:fd:4a:6d:7a:a8:f4:55:aa:31:6d:16:cc:47:19:
                    a9:2d:55:e2:73:c1:32:be:96:98:41:08:60:1c:ba:
                    70:44:de:42:e0:06:1c:e5:14:47:34:1f:6a:fe:a8:
                    49:12:ef:f8:9c:a3:62:d7:2c:27:ba:d6:9c:6e:5a:
                    ed:2b:d2:c6:a3:24:cd:47:d6:f7:02:0e:26:42:6c:
                    5b:e5:5e:81:1d:4f:5c:fe:c5:73:3e:34:30:da:40:
                    60:95:49:5f:11:d0:11:6b:e1:a5:b9:f7:9e:c5:b4:
                    66:10:cf:97:7e:7d:a5:56:29:71:c6:b2:fa:2c:39:
                    2e:2e:87:b0:35:75:2c:5a:d9:fb:74:3d:c7:b7:6e:
                    45:90:78:2b:a5:35:c0:f8:24:a6:de:88:53:3b:f7:
                    95:61:f2:f7:e9:43:34:2d:24:f2:d3:d6:e3:9f:9a:
                    c7:d4:31:66:6c:7c:91:cd:25:01:8c:3f:31:39:dc:
                    cc:b8:32:da:9b:b1:cd:c1:f9:a3:c6:20:4a:f0:ab:
                    7f:ad:6b:c7:4e:fa:18:22:26:94:3e:a9:03:e9:16:
                    a7:36:d0:28:83:96:99:5f:69:40:c3:bd:41:f7:04:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:91:20:21:AB:1C:57:DA:07:EA:90:33:FF:94:18:C1:51:66:74
            X509v3 Authority Key Identifier:
                keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:5e:80:92:61:6c:1e:98:ba:dd:07:bf:95:c2:aa:ba:34:
         e0:db:0b:ae:29:c9:2e:00:f5:97:aa:36:d3:21:0c:4a:7c:ad:
         c5:15:46:55:9e:24:97:e9:9c:e5:66:b4:af:4a:9b:30:e0:e8:
         98:ee:16:df:9e:36:f8:97:95:25:da:ba:8c:5c:e5:8b:08:03:
         f9:35:68:29:72:ef:53:93:3c:c1:05:24:78:b7:61:a3:b5:3c:
         f3:20:2b:59:a5:48:67:1c:fc:0f:c8:c5:5f:1c:09:68:d7:61:
         db:6d:be:df:d3:08:6f:69:d6:ac:40:77:31:6a:2d:17:08:73:
         90:36:7a:37:67:f0:56:92:e2:2f:ce:69:03:5f:c6:c6:ea:4a:
         97:d9:62:cf:c5:48:4b:6d:39:38:6a:11:17:b6:8c:f9:7a:b5:
         54:24:8d:09:5a:82:43:88:37:dd:4c:4a:5b:06:eb:01:e0:e6:
         13:04:93:71:71:e5:09:a5:12:86:07:3e:30:f5:44:c4:ba:39:
         e2:f0:44:c1:d2:80:58:db:2c:15:c9:92:3b:f4:0d:30:9e:5b:
         f2:67:a5:88:3d:70:64:28:c6:6e:e1:42:44:f6:98:7a:5f:ce:
         e3:99:5f:0a:54:a6:ec:c3:ea:cc:43:68:04:ce:39:2e:31:e2:
         3a:e2:e5:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYlVDbIFiIWHD9z5iX5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj
ZmQwNjIwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
Eyg3YWVlOTEyMDIxYWIxYzU3ZGEwN2VhOTAzM2ZmOTQxOGMxNTE2Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jPFpZNwQAl9JkZkBsUwM7YL4iDV
Kxx0YlPcm4zH/Upteqj0VaoxbRbMRxmpLVXic8EyvpaYQQhgHLpwRN5C4AYc5RRH
NB9q/qhJEu/4nKNi1ywnutacblrtK9LGoyTNR9b3Ag4mQmxb5V6BHU9c/sVzPjQw
2kBglUlfEdARa+GlufeexbRmEM+Xfn2lVilxxrL6LDkuLoewNXUsWtn7dD3Ht25F
kHgrpTXA+CSm3ohTO/eVYfL36UM0LSTy09bjn5rH1DFmbHyRzSUBjD8xOdzMuDLa
m7HNwfmjxiBK8Kt/rWvHTvoYIiaUPqkD6RanNtAog5aZX2lAw71B9wRJkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrukSAhqxxX2gfqkDP/lBjBUWZ0MB8GA1UdIwQY
MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt
NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0
LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg29egJJh
bB6Yut0Hv5XCqro04NsLrinJLgD1l6o20yEMSnytxRVGVZ4kl+mc5Wa0r0qbMODo
mO4W3542+JeVJdq6jFzliwgD+TVoKXLvU5M8wQUkeLdho7U88yArWaVIZxz8D8jF
XxwJaNdh222+39MIb2nWrEB3MWotFwhzkDZ6N2fwVpLiL85pA1/GxupKl9liz8VI
S205OGoRF7aM+Xq1VCSNCVqCQ4g33UxKWwbrAeDmEwSTcXHlCaUShgc+MPVExLo5
4vBEwdKAWNssFcmSO/QNMJ5b8meliD1wZCjGbuFCRPaYel/O45lfClSm7MPqzENo
BM45LjHiOuLllA==
-----END CERTIFICATE-----