Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File:                     x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier:          SreyYLB7XP45RL6LRvvN4NeTAp9AT3MW+tQq1SpsfU4=
Subject key identifier:   2C:5A:7E:1C:AE:0F:3F:E4:9F:75:C9:B4:61:CE:81:60:9A:19:82:B4
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer:       /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial:       01962E61FBAB33E7798D923E1D720956AA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
                          2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: B1D7Vtft2/P8lZrfa1m2lk25cTcP6xdlZci73TUOzuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:ab:33:e7:79:8d:92:3e:1d:72:09:56:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=2c5a7e1cae0f3fe49f75c9b461ce81609a1982b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:63:3b:09:f9:75:cd:f1:a8:3d:0c:a5:26:
                    e9:4b:23:ae:51:77:7c:f4:3d:7f:85:d3:43:c9:14:
                    21:ae:89:e4:e1:6f:1e:59:af:34:43:cd:05:8d:ee:
                    a3:9f:9e:00:87:a6:7b:3d:5d:62:73:69:90:2b:4b:
                    8d:a2:a2:63:d7:5e:37:8d:d6:e4:2e:95:22:e7:6d:
                    79:f7:e7:34:3f:f1:6d:54:67:1c:92:a8:fc:97:62:
                    19:3c:7e:7e:c3:7d:c8:04:a0:a3:fe:ce:12:00:5d:
                    0c:23:36:32:12:e1:1a:53:84:10:7b:59:d1:79:17:
                    57:18:74:94:f5:30:a3:43:ba:16:6b:ea:78:a7:3f:
                    f4:43:24:24:a4:3e:b5:64:b6:80:d2:62:d7:02:31:
                    1a:0e:17:43:21:9c:c8:a9:a5:72:60:c7:dc:6e:01:
                    69:81:bb:f4:09:42:80:79:ce:56:d4:12:5b:c0:cb:
                    c0:f3:fb:7b:73:eb:d9:38:7e:f9:90:eb:bd:67:1d:
                    9c:8e:e1:df:2b:90:dd:e7:b8:73:9d:87:67:35:20:
                    3c:e1:d8:bd:3f:e5:32:1a:48:54:30:dc:a3:72:c0:
                    7c:8e:94:bb:22:84:1f:99:c9:61:92:c3:c9:36:54:
                    33:ae:9c:f0:a2:a9:08:1d:e4:ff:bb:5c:0b:7a:32:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5A:7E:1C:AE:0F:3F:E4:9F:75:C9:B4:61:CE:81:60:9A:19:82:B4
            X509v3 Authority Key Identifier:
                keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:33:8c:08:74:97:b0:08:73:6e:16:e2:15:af:1d:e2:e5:ce:
         44:33:9f:11:11:7d:28:eb:8a:61:a9:e1:e9:73:21:d0:b5:78:
         b6:3b:1d:0a:ac:19:22:24:20:d8:a2:1a:e9:a2:05:1f:86:36:
         09:7c:11:00:bc:18:ac:26:f2:54:3b:a6:24:a5:cd:31:99:e8:
         5a:c1:c7:51:70:da:1d:89:b0:c8:5d:06:8b:58:1d:f4:d3:20:
         11:af:3b:ce:03:30:5c:d2:2a:2c:19:4a:09:49:5a:74:67:f9:
         74:3d:35:de:12:60:f5:ac:95:3d:b7:a7:d3:5b:0a:be:75:fd:
         4d:84:c1:17:d3:ad:ec:9b:a5:34:eb:51:1c:58:76:a0:6c:6c:
         c1:a7:3f:4a:8e:92:1c:88:64:c7:ec:9d:d3:0b:fd:bc:42:c6:
         90:4f:3e:58:34:6a:97:ca:14:00:66:67:c0:c4:1c:9f:41:96:
         1d:3a:4d:06:05:bb:e4:fc:78:e0:8d:19:ca:f8:1d:e3:12:12:
         d2:f9:9d:29:03:99:9c:94:af:2d:c5:16:d2:93:a2:66:60:24:
         98:a9:1e:e5:8d:43:75:6e:fc:ea:f5:64:d2:6b:b7:de:c1:fc:
         6a:71:d2:75:dd:cd:77:0b:5b:b0:13:16:d5:e5:e6:41:52:ac:
         d8:74:0f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfurM+d5jZI+HXIJVqo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjUwNDEzMDkwMTM1WhcNMjUwNDE0MDkwMTM1WjAzMTEwLwYDVQQD
EygyYzVhN2UxY2FlMGYzZmU0OWY3NWM5YjQ2MWNlODE2MDlhMTk4MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklFjOwn5dc3xqD0MpSbpSyOuUXd8
9D1/hdNDyRQhronk4W8eWa80Q80Fje6jn54Ah6Z7PV1ic2mQK0uNoqJj1143jdbk
LpUi52159+c0P/FtVGcckqj8l2IZPH5+w33IBKCj/s4SAF0MIzYyEuEaU4QQe1nR
eRdXGHSU9TCjQ7oWa+p4pz/0QyQkpD61ZLaA0mLXAjEaDhdDIZzIqaVyYMfcbgFp
gbv0CUKAec5W1BJbwMvA8/t7c+vZOH75kOu9Zx2cjuHfK5Dd57hznYdnNSA84di9
P+UyGkhUMNyjcsB8jpS7IoQfmclhksPJNlQzrpzwoqkIHeT/u1wLejLuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxafhyuDz/kn3XJtGHOgWCaGYK0MB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojOMCHSX
sAhzbhbiFa8d4uXORDOfERF9KOuKYanh6XMh0LV4tjsdCqwZIiQg2KIa6aIFH4Y2
CXwRALwYrCbyVDumJKXNMZnoWsHHUXDaHYmwyF0Gi1gd9NMgEa87zgMwXNIqLBlK
CUladGf5dD013hJg9ayVPben01sKvnX9TYTBF9Ot7JulNOtRHFh2oGxswac/So6S
HIhkx+yd0wv9vELGkE8+WDRql8oUAGZnwMQcn0GWHTpNBgW75Px44I0Zyvgd4xIS
0vmdKQOZnJSvLcUW0pOiZmAkmKke5Y1DdW786vVk0mu33sH8anHSdd3NdwtbsBMW
1eXmQVKs2HQPmg==
-----END CERTIFICATE-----