Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File:                     lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier:          O4sMiF8CsJQYJbD/pU8IObUYDQnZ1cnJJhsGr6H28P0=
Subject key identifier:   E3:33:05:B7:27:DE:29:CF:C1:5D:70:A3:29:6C:08:6E:51:B6:7B:10
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer:       /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial:       01962F06EA404427BDFEE46ED80D68AE4F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number:          148B
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: iGAhtQ+1d8M5ReaAYAw6/8dR8ln8WzzFj1GIaO3iCrs=)
                          2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ea:40:44:27:bd:fe:e4:6e:d8:0d:68:ae:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=e33305b727de29cfc15d70a3296c086e51b67b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:d8:66:fa:cb:b5:90:3c:2c:b0:7f:68:76:
                    d3:0d:76:c5:fe:06:08:7c:83:bd:4e:11:90:e4:f0:
                    30:df:a9:8e:07:66:7d:ea:e3:57:39:7d:e4:83:5b:
                    74:73:96:cc:d6:90:c0:fc:dc:8b:66:c9:26:ee:77:
                    39:f4:c5:ac:1e:b7:13:c9:3d:72:b4:9b:dd:ff:cb:
                    d5:06:cc:30:db:75:cb:7d:06:e8:81:f2:8d:26:98:
                    7e:15:36:cf:32:7e:d4:1c:c9:4f:50:f1:c5:4d:a7:
                    8b:e8:f0:57:63:ed:a6:1b:ee:7b:8b:d1:32:0b:76:
                    cb:15:28:8d:dc:09:55:6e:f5:4b:20:77:a7:cf:cd:
                    d2:74:5d:2a:90:00:82:5c:2e:88:0c:f7:77:da:a9:
                    e4:f5:7d:87:aa:21:3e:8c:1c:34:dc:0b:80:55:51:
                    31:40:26:60:c7:fc:12:96:74:ec:40:b5:a6:28:74:
                    6c:95:38:9f:9b:1d:9c:8d:44:cb:1e:8d:fc:22:27:
                    04:44:11:fb:e9:7d:b8:86:ac:86:27:c3:a0:39:92:
                    7a:b5:d1:ce:47:c9:f9:8b:6b:dc:91:d7:b7:40:c7:
                    23:4f:12:81:77:75:19:14:9c:98:94:32:18:8e:80:
                    a1:76:aa:dd:79:c3:70:e9:6d:2b:81:1c:54:ca:b5:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:33:05:B7:27:DE:29:CF:C1:5D:70:A3:29:6C:08:6E:51:B6:7B:10
            X509v3 Authority Key Identifier:
                keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:b0:6b:a9:7b:e5:ae:76:7c:b4:88:db:23:d5:aa:a8:99:
         df:63:a4:eb:bb:19:32:49:e9:f6:a6:3f:81:0d:05:f6:b4:06:
         72:2a:f5:82:9b:33:ec:08:fc:ec:bf:1d:92:a0:06:bc:d9:75:
         72:b5:64:c3:21:d3:9d:29:42:55:0d:95:a7:b2:23:f6:c4:49:
         5c:3a:46:ee:d4:db:55:e9:0d:66:a3:da:57:ec:71:2c:6f:01:
         37:23:f2:1b:0a:f8:6d:a3:fe:7c:70:1a:6b:72:9c:8b:ae:16:
         46:e1:9d:6d:3c:0e:7d:cd:74:98:73:9d:9e:b3:d2:2e:8a:d5:
         60:58:29:a1:1e:18:b7:bc:53:e2:7b:f7:be:fa:39:be:69:32:
         00:cd:24:62:67:bf:c7:ff:e2:8e:62:4d:08:23:97:0e:d0:03:
         3b:a3:dd:e9:6f:d9:4d:58:b9:ac:0a:68:00:d4:2c:c8:e8:fc:
         19:9c:48:09:06:fd:2f:34:2c:54:3b:7a:71:e4:65:c3:82:92:
         33:11:35:e5:16:95:93:e2:cc:ec:48:6a:94:6f:06:e1:a0:e2:
         0a:b7:1b:16:d1:c2:a0:aa:3a:8b:69:02:69:ae:89:b1:52:1f:
         36:f3:2e:06:78:83:b1:fd:54:0b:ed:ce:fd:21:37:0b:bb:52:
         85:89:dc:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBupARCe9/uRu2A1ork9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy
Nzg1MjEwHhcNMjUwNDEzMTIwMTQ0WhcNMjUwNDE0MTIwMTQ0WjAzMTEwLwYDVQQD
EyhlMzMzMDViNzI3ZGUyOWNmYzE1ZDcwYTMyOTZjMDg2ZTUxYjY3YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFfYZvrLtZA8LLB/aHbTDXbF/gYI
fIO9ThGQ5PAw36mOB2Z96uNXOX3kg1t0c5bM1pDA/NyLZskm7nc59MWsHrcTyT1y
tJvd/8vVBsww23XLfQbogfKNJph+FTbPMn7UHMlPUPHFTaeL6PBXY+2mG+57i9Ey
C3bLFSiN3AlVbvVLIHenz83SdF0qkACCXC6IDPd32qnk9X2HqiE+jBw03AuAVVEx
QCZgx/wSlnTsQLWmKHRslTifmx2cjUTLHo38IicERBH76X24hqyGJ8OgOZJ6tdHO
R8n5i2vckde3QMcjTxKBd3UZFJyYlDIYjoChdqrdecNw6W0rgRxUyrV2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMzBbcn3inPwV1woylsCG5RtnsQMB8GA1UdIwQY
MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt
ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3
LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnqwa6l7
5a52fLSI2yPVqqiZ32Ok67sZMknp9qY/gQ0F9rQGcir1gpsz7Aj87L8dkqAGvNl1
crVkwyHTnSlCVQ2Vp7Ij9sRJXDpG7tTbVekNZqPaV+xxLG8BNyPyGwr4baP+fHAa
a3Kci64WRuGdbTwOfc10mHOdnrPSLorVYFgpoR4Yt7xT4nv3vvo5vmkyAM0kYme/
x//ijmJNCCOXDtADO6Pd6W/ZTVi5rApoANQsyOj8GZxICQb9LzQsVDt6ceRlw4KS
MxE15RaVk+LM7EhqlG8G4aDiCrcbFtHCoKo6i2kCaa6JsVIfNvMuBniDsf1UC+3O
/SE3C7tShYncdg==
-----END CERTIFICATE-----