Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File:                     94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier:          UO+axdI/Yd3mOXuvSN490jfCKLdncxFR2ZLhmB1qdGY=
Subject key identifier:   12:9C:72:C7:45:9A:50:DD:02:12:5A:5F:7F:CB:A6:5E:84:18:09:DF
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer:       /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial:       01962FAB3EE8130799085349EE58922803F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number:          0DD0
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: 5YFQDpnc9RQao+x51E4dH6hCHdrEwr2IJt3PnLwTHjM=)
                          2: t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa (hash: /vgplaRmHDxSp3VJb5NRArFdYkLIBE7CLS2J04R2rkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:e8:13:07:99:08:53:49:ee:58:92:28:03:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=129c72c7459a50dd02125a5f7fcba65e841809df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:d3:15:9d:b5:db:e6:67:eb:d1:81:6e:a2:
                    3d:1b:91:ce:a8:0c:6e:90:1d:25:d5:f8:5b:10:84:
                    ae:b6:d5:b1:e2:50:72:eb:b7:dd:65:39:62:60:1e:
                    a4:0e:0b:d1:d1:21:b8:7d:54:30:84:58:4c:20:45:
                    0b:70:5a:f4:92:f1:82:c1:83:1c:10:74:06:4a:b7:
                    a6:7f:40:e9:3c:43:80:7b:b9:8e:26:da:0b:9e:ca:
                    30:35:d7:73:cf:58:02:03:e9:31:73:10:56:36:7d:
                    9f:59:57:67:c4:e0:43:1d:78:38:a6:96:ad:a6:54:
                    5e:ff:37:f8:da:d8:ee:20:b2:95:0f:a9:43:db:37:
                    ad:25:67:ea:69:31:3b:16:50:14:f1:c5:c9:2a:9a:
                    f2:cc:0a:c5:4c:e8:31:8b:d9:3b:fc:25:bc:f0:18:
                    8e:52:e8:2c:c6:d4:20:7e:ba:14:ce:3b:f9:1e:17:
                    ae:a8:b5:f4:59:de:3e:46:d0:41:d1:2d:e7:3e:89:
                    a8:f6:8b:5d:79:a6:74:91:60:2c:b4:23:be:39:1b:
                    5d:71:55:39:c9:be:a6:02:f0:4c:b9:94:7c:fd:1d:
                    80:b2:f9:57:56:bc:5c:bd:e6:97:4f:06:ef:c5:53:
                    55:c7:c6:e2:92:8e:60:64:63:2c:e5:7e:e5:8f:e6:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:72:C7:45:9A:50:DD:02:12:5A:5F:7F:CB:A6:5E:84:18:09:DF
            X509v3 Authority Key Identifier:
                keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2f:34:e8:0b:3e:06:b7:5e:c1:bd:ba:8f:af:20:ae:7b:ed:
         c3:56:4f:d0:cc:a8:17:73:46:9c:63:92:e3:47:cf:be:59:b3:
         51:01:a1:d7:58:2a:0f:bf:77:b7:6f:09:b1:51:5e:25:e3:11:
         28:6f:22:20:99:43:fc:07:fc:3d:74:92:41:9f:bd:a7:04:1d:
         5b:af:68:6e:e1:2d:b3:5b:aa:61:c7:18:c3:0f:4b:38:47:aa:
         10:cf:68:30:c3:c1:17:ee:23:41:8d:af:a4:b9:a8:fb:11:5f:
         92:46:e4:ed:85:e5:af:4e:96:a7:1c:ee:49:b2:7c:d2:7b:d2:
         34:08:2d:e7:d0:79:44:99:4d:fb:a4:82:17:9e:51:b4:44:af:
         ee:b7:89:9a:30:45:49:dd:a5:b6:9d:4d:6b:4b:01:98:49:87:
         dc:ce:91:4b:1e:33:d8:ef:85:df:b4:fc:6a:9e:17:87:f0:a6:
         72:88:7a:a0:0a:c4:66:cc:f0:40:f9:e3:bb:d1:e6:f4:e1:1d:
         ad:74:5a:40:18:a2:14:b1:26:76:44:3e:94:10:db:23:bc:34:
         65:75:c0:86:01:e8:3e:7b:e8:1f:df:4f:2a:bc:c1:3a:a9:0c:
         38:66:21:82:db:77:3f:f4:87:76:ec:95:d9:84:04:df:9f:f4:
         2a:21:60:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqz7oEweZCFNJ7liSKAP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0
NmVhMDMwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
EygxMjljNzJjNzQ1OWE1MGRkMDIxMjVhNWY3ZmNiYTY1ZTg0MTgwOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/bTFZ212+Zn69GBbqI9G5HOqAxu
kB0l1fhbEISuttWx4lBy67fdZTliYB6kDgvR0SG4fVQwhFhMIEULcFr0kvGCwYMc
EHQGSremf0DpPEOAe7mOJtoLnsowNddzz1gCA+kxcxBWNn2fWVdnxOBDHXg4ppat
plRe/zf42tjuILKVD6lD2zetJWfqaTE7FlAU8cXJKpryzArFTOgxi9k7/CW88BiO
UugsxtQgfroUzjv5HheuqLX0Wd4+RtBB0S3nPomo9otdeaZ0kWAstCO+ORtdcVU5
yb6mAvBMuZR8/R2AsvlXVrxcveaXTwbvxVNVx8biko5gZGMs5X7lj+ZZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKccsdFmlDdAhJaX3/Lpl6EGAnfMB8GA1UdIwQY
MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt
ZjI3YWE5YzZlYjZiLzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi
LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny806As+
Brdewb26j68grnvtw1ZP0MyoF3NGnGOS40fPvlmzUQGh11gqD793t28JsVFeJeMR
KG8iIJlD/Af8PXSSQZ+9pwQdW69obuEts1uqYccYww9LOEeqEM9oMMPBF+4jQY2v
pLmo+xFfkkbk7YXlr06WpxzuSbJ80nvSNAgt59B5RJlN+6SCF55RtESv7reJmjBF
Sd2ltp1Na0sBmEmH3M6RSx4z2O+F37T8ap4Xh/Cmcoh6oArEZszwQPnju9Hm9OEd
rXRaQBiiFLEmdkQ+lBDbI7w0ZXXAhgHoPnvoH99PKrzBOqkMOGYhgtt3P/SHduyV
2YQE35/0KiFghQ==
-----END CERTIFICATE-----