Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File:                     IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier:          U4cMWh7SuWGcI4pFghQ+DbXoiW32zo0NhjphpYeyQLU=
Subject key identifier:   58:69:28:E1:56:3C:9B:D3:DB:4F:27:74:70:76:9F:82:7D:06:9C:75
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer:       /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial:       01962F741894A7BE0A62A778C135D0B972B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number:          06A8
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: kOpRMK1eQkImI1GNp0B1G+iMnuCC1oF4MXwjkPYxOoQ=)
                          2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:18:94:a7:be:0a:62:a7:78:c1:35:d0:b9:72:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=586928e1563c9bd3db4f277470769f827d069c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:b5:e6:42:6b:56:82:2c:f1:06:51:49:d8:
                    97:c9:50:cf:ca:1c:eb:c0:b8:52:d5:a7:0d:0a:fc:
                    04:ca:0d:25:47:1e:86:a7:8e:54:7b:f3:a6:49:6a:
                    62:58:91:8a:56:4a:e6:47:91:0e:45:0b:4c:c6:0d:
                    0c:bf:d2:61:5d:47:8d:6d:5b:66:2c:1b:58:88:43:
                    86:59:75:cb:49:c1:f7:c8:3e:ec:24:e6:a0:26:a5:
                    5f:4e:dd:4e:54:35:a7:a0:8c:ad:ea:1f:e6:63:d4:
                    a5:dc:28:73:2e:de:6b:cd:73:97:72:9e:68:30:2b:
                    66:a5:56:e0:77:64:68:be:6e:a1:a4:46:51:fc:47:
                    b1:19:e4:04:2b:3b:21:cd:e1:03:67:0f:e5:dc:fb:
                    70:46:8c:59:0c:6a:cc:77:b3:f0:1d:21:00:cd:d5:
                    18:59:a8:ce:82:53:3c:18:56:3d:f7:fa:5b:15:69:
                    ed:52:ff:b1:5f:c9:d6:46:53:0c:71:2e:c0:08:fd:
                    2f:72:e4:c4:3c:c1:ec:ec:33:c2:0f:60:66:84:c0:
                    42:b3:a0:b8:45:f2:ed:4a:0f:d3:4b:f2:d9:ff:05:
                    b1:46:8a:e1:33:96:9b:e1:7a:12:4f:f0:2b:ca:59:
                    08:7a:b5:03:ec:ef:cb:8d:00:8f:58:43:63:32:25:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:69:28:E1:56:3C:9B:D3:DB:4F:27:74:70:76:9F:82:7D:06:9C:75
            X509v3 Authority Key Identifier:
                keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:1e:34:35:65:16:f0:f9:e0:86:ac:4c:42:07:9a:16:d8:
         6b:40:bd:75:7c:b4:58:07:14:57:9c:84:fb:3d:3c:4a:07:c8:
         19:18:80:3c:bd:9e:6a:9d:8f:2b:19:69:8f:33:0f:d1:ab:dc:
         fa:c7:f6:fc:5c:ae:14:5f:04:90:e1:d8:25:e2:50:80:07:4a:
         16:14:18:09:87:7a:fc:15:b4:17:c3:1f:a2:57:6f:03:ce:37:
         14:c3:af:b3:25:0e:1e:27:8a:ec:7c:16:74:52:58:6c:16:ea:
         59:d7:c4:cf:c1:33:b8:e2:35:0b:07:22:9f:76:67:24:ce:17:
         ee:da:7f:0c:e5:1a:05:e4:ab:2d:1a:dc:6b:f0:8e:9b:19:6e:
         20:85:3a:55:1a:36:0e:5e:54:41:3e:4f:01:b4:2a:6a:b2:d2:
         b7:1b:0b:52:60:7b:32:82:39:51:c2:cf:78:42:52:94:60:22:
         27:06:21:4a:d4:17:c5:1b:b6:82:88:56:b7:57:f7:6f:62:c5:
         a6:9d:33:4c:1c:a2:61:cb:a4:95:76:3e:5b:c4:c1:d1:7e:73:
         c2:61:9d:70:4e:cc:76:c3:be:5e:f3:ea:ec:ad:a1:ce:4c:9f:
         3a:b2:7a:9a:97:be:9a:ed:88:cc:4a:78:31:53:78:b3:84:ca:
         58:c2:e5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBiUp74KYqd4wTXQuXKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFlYmJhOTQzZmFkMWM1NDg3NTQwZTAxMDVlMTljMjMy
Y2Y3OWMwHhcNMjUwNDEzMTQwMDU5WhcNMjUwNDE0MTQwMDU5WjAzMTEwLwYDVQQD
Eyg1ODY5MjhlMTU2M2M5YmQzZGI0ZjI3NzQ3MDc2OWY4MjdkMDY5Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKa15kJrVoIs8QZRSdiXyVDPyhzr
wLhS1acNCvwEyg0lRx6Gp45Ue/OmSWpiWJGKVkrmR5EORQtMxg0Mv9JhXUeNbVtm
LBtYiEOGWXXLScH3yD7sJOagJqVfTt1OVDWnoIyt6h/mY9Sl3ChzLt5rzXOXcp5o
MCtmpVbgd2Rovm6hpEZR/EexGeQEKzshzeEDZw/l3PtwRoxZDGrMd7PwHSEAzdUY
WajOglM8GFY99/pbFWntUv+xX8nWRlMMcS7ACP0vcuTEPMHs7DPCD2BmhMBCs6C4
RfLtSg/TS/LZ/wWxRorhM5ab4XoST/ArylkIerUD7O/LjQCPWENjMiU1CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhpKOFWPJvT208ndHB2n4J9Bpx1MB8GA1UdIwQY
MBaAFCAx67qUP60cVIdUDgEF4ZwjLPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYt
NjkzNDU0MjM3ZWU5LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYtNjkzNDU0MjM3ZWU5
LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvweNDVl
FvD54IasTEIHmhbYa0C9dXy0WAcUV5yE+z08SgfIGRiAPL2eap2PKxlpjzMP0avc
+sf2/FyuFF8EkOHYJeJQgAdKFhQYCYd6/BW0F8MfoldvA843FMOvsyUOHieK7HwW
dFJYbBbqWdfEz8EzuOI1Cwcin3ZnJM4X7tp/DOUaBeSrLRrca/COmxluIIU6VRo2
Dl5UQT5PAbQqarLStxsLUmB7MoI5UcLPeEJSlGAiJwYhStQXxRu2gohWt1f3b2LF
pp0zTByiYcuklXY+W8TB0X5zwmGdcE7MdsO+XvPq7K2hzkyfOrJ6mpe+mu2IzEp4
MVN4s4TKWMLlvw==
-----END CERTIFICATE-----