Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File:                     1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier:          idJ3mVncaEMzRlj+LQHavGpr+E+iBjWFMdFGfB/DGa4=
Subject key identifier:   39:D4:7C:1B:18:65:1E:7B:09:C5:CB:37:E4:82:F1:4E:25:63:72:B6
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer:       /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial:       01962E98DBA93F8D3C55A537D917E209857D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: 8o8GVmrOtqhVy8x4KC8ZjgKaKSvT/MjWqFXt4JrcoTE=)
                          2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:db:a9:3f:8d:3c:55:a5:37:d9:17:e2:09:85:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=39d47c1b18651e7b09c5cb37e482f14e256372b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:3d:cc:74:e3:de:b1:cd:82:0e:6c:2f:2a:
                    65:90:95:3f:9f:f8:35:e8:46:36:52:9a:bb:26:35:
                    0e:70:60:2a:d1:66:16:42:42:0a:32:0c:f5:b5:e4:
                    0e:63:d2:09:63:00:b1:0e:8a:1d:5d:3c:59:75:9d:
                    e2:58:3f:8a:78:13:17:f4:af:7d:4d:24:63:1e:87:
                    cd:b8:2a:8b:e6:00:cf:43:cf:36:f4:b6:40:6f:8b:
                    d8:71:5f:ab:ca:0e:40:f9:87:b7:5a:84:89:94:c9:
                    1f:ef:cd:a6:2a:35:85:2f:e1:81:c6:25:80:b8:55:
                    20:e5:18:91:17:46:6d:df:64:1e:c0:73:f4:be:3a:
                    e0:81:3b:c6:b2:9b:95:41:88:5a:e5:12:88:95:eb:
                    57:ab:ed:4e:a9:fc:10:f8:05:33:a7:ff:a0:2d:b2:
                    91:86:ca:37:94:ba:17:b5:70:d9:a7:ca:bb:6c:74:
                    3d:59:ed:6a:b3:db:df:f8:a7:d1:38:60:ea:b6:e4:
                    58:11:dc:d3:11:46:ee:a5:89:01:91:83:4f:f3:81:
                    9e:b0:b7:2c:53:9b:c0:0a:93:a6:b4:95:c4:61:0d:
                    6f:8a:05:bb:64:1e:9b:5b:d3:44:dd:f2:0d:e7:0e:
                    2b:90:1a:b2:79:27:df:49:71:98:89:e0:c3:a2:76:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:7C:1B:18:65:1E:7B:09:C5:CB:37:E4:82:F1:4E:25:63:72:B6
            X509v3 Authority Key Identifier:
                keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:81:bd:77:f9:0e:94:27:bc:93:38:e8:5b:cb:46:40:81:43:
         14:64:84:ad:95:25:f1:53:3c:46:57:7e:8c:9f:25:70:23:ea:
         c8:84:9f:0d:55:d0:15:25:73:08:b3:18:8e:5d:5f:8b:9d:6f:
         ef:44:b1:c0:b8:e0:cd:28:a5:98:7f:8a:8e:66:5d:cc:fe:dd:
         af:ca:69:a8:d1:82:e3:b1:36:df:cf:01:fa:d3:f1:43:01:3c:
         3d:e4:9e:a2:e4:ee:a6:c5:b4:cc:c2:4e:0c:8b:38:23:af:9f:
         2c:e8:f1:e5:ce:2b:57:d6:25:70:04:f3:d8:bf:12:07:a0:e2:
         bc:0d:38:c8:54:68:8a:12:af:c6:e4:ab:53:0b:ad:31:b8:86:
         f8:4f:32:46:5f:2f:81:ca:d2:17:ab:b4:0d:84:1e:a5:56:6b:
         0c:d9:7d:e5:29:04:57:51:f3:73:3a:c8:6f:bf:76:be:d7:fb:
         10:4c:49:ea:ba:4f:5e:19:29:07:99:43:b5:4a:ad:61:aa:4b:
         c2:f2:f3:e7:67:b4:c7:19:25:2f:2e:cd:24:1b:71:9c:2c:08:
         f2:4a:3a:ee:cb:9e:77:96:4b:5f:cd:83:a3:de:06:56:c9:7c:
         db:95:28:e7:01:50:81:32:c1:8d:88:11:f5:ef:34:29:27:8b:
         f0:71:95:ac
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYumNupP408VaU32RfiCYV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk
MDhmNjUwHhcNMjUwNDEzMTAwMTMxWhcNMjUwNDE0MTAwMTMxWjAzMTEwLwYDVQQD
EygzOWQ0N2MxYjE4NjUxZTdiMDljNWNiMzdlNDgyZjE0ZTI1NjM3MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7k9zHTj3rHNgg5sLyplkJU/n/g1
6EY2Upq7JjUOcGAq0WYWQkIKMgz1teQOY9IJYwCxDoodXTxZdZ3iWD+KeBMX9K99
TSRjHofNuCqL5gDPQ8829LZAb4vYcV+ryg5A+Ye3WoSJlMkf782mKjWFL+GBxiWA
uFUg5RiRF0Zt32QewHP0vjrggTvGspuVQYha5RKIletXq+1OqfwQ+AUzp/+gLbKR
hso3lLoXtXDZp8q7bHQ9We1qs9vf+KfROGDqtuRYEdzTEUbupYkBkYNP84GesLcs
U5vACpOmtJXEYQ1vigW7ZB6bW9NE3fIN5w4rkBqyeSffSXGYieDDonbdoQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDnUfBsYZR57CcXLN+SC8U4lY3K2MB8GA1UdIwQY
MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx
LWJjODI3N2U3NWUwYy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzdiOTIyNC1hYmYxLTRjYTMtYjAwMS1iYzgyNzdlNzVl
MGMvMS8xLVJWWWp2Z0ZSb2tveGoyckNHTUFoZVhRajJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4G9
d/kOlCe8kzjoW8tGQIFDFGSErZUl8VM8Rld+jJ8lcCPqyISfDVXQFSVzCLMYjl1f
i51v70SxwLjgzSilmH+KjmZdzP7dr8ppqNGC47E2388B+tPxQwE8PeSeouTupsW0
zMJODIs4I6+fLOjx5c4rV9YlcATz2L8SB6DivA04yFRoihKvxuSrUwutMbiG+E8y
Rl8vgcrSF6u0DYQepVZrDNl95SkEV1HzczrIb792vtf7EExJ6rpPXhkpB5lDtUqt
YapLwvLz52e0xxklLy7NJBtxnCwI8ko67sued5ZLX82Do94GVsl825Uo5wFQgTLB
jYgR9e80KSeL8HGVrA==
-----END CERTIFICATE-----