Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File:                     FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier:          dHCoTqehg/bgkea6Azc3KvxzjRFn+XCtsqvHdmP9qqs=
Subject key identifier:   96:4C:BC:4A:82:3F:B3:93:4F:F3:52:B9:F5:BB:B7:90:92:12:5D:6A
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer:       /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial:       01962E9946292E8C6E075092DBCEB2057D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: zWB0pXr6bfo2w1/iQ9PNXkTm5HwvUdz1dxwJJ2Lnx5c=)
                          2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:29:2e:8c:6e:07:50:92:db:ce:b2:05:7d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=964cbc4a823fb3934ff352b9f5bbb79092125d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:fd:8c:9b:0d:01:51:e0:d0:49:fe:10:56:
                    43:cb:83:c7:89:fd:63:37:b1:a8:86:69:f5:78:56:
                    5a:1b:c5:d5:2f:07:77:56:93:c3:2b:bf:10:3c:da:
                    6e:50:05:31:8d:a0:1b:7e:c6:f4:19:c0:df:d8:5a:
                    54:b4:09:7b:da:39:92:03:e9:89:0e:da:3f:05:db:
                    d4:56:0b:a3:f2:b0:41:00:93:31:cf:53:7d:f9:42:
                    4c:82:9e:2d:b6:b6:a2:d1:a0:be:87:9b:ef:60:79:
                    45:22:12:da:83:10:43:09:7e:d6:0e:0f:9e:06:9c:
                    af:94:b1:a7:de:01:4e:d1:52:a1:ca:a0:cc:1c:46:
                    a9:1e:b2:4f:0d:10:d7:64:06:46:05:9a:5a:8b:62:
                    06:5f:6a:04:86:1a:4f:ef:d7:26:a6:23:bb:f5:7a:
                    d3:d2:b6:45:af:cd:ab:78:7b:92:d9:dc:4b:1e:40:
                    bc:44:36:f3:3f:eb:4a:40:ad:ee:56:d3:1f:c8:3f:
                    95:b0:bb:94:f4:75:10:24:49:97:d9:1c:f8:da:b5:
                    76:df:f7:d1:66:6c:39:45:2e:33:0d:0c:0a:c5:fe:
                    9d:73:13:f7:55:39:9c:18:fd:6f:28:b4:9b:4e:98:
                    c4:f7:20:8b:24:b7:8f:5d:ed:41:7a:3c:20:fc:ba:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4C:BC:4A:82:3F:B3:93:4F:F3:52:B9:F5:BB:B7:90:92:12:5D:6A
            X509v3 Authority Key Identifier:
                keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:d8:53:e9:d3:55:77:12:07:5a:e4:c9:d1:c6:74:49:d9:
         87:12:77:33:09:0c:98:97:a6:1d:b1:7b:7b:f0:9a:d5:c6:b7:
         60:ee:e0:6f:31:9d:fc:ff:7f:a9:2a:1f:22:c7:93:a4:f6:d7:
         3d:5b:bf:11:c1:62:f9:09:8e:21:bf:b9:d6:71:bc:47:e7:82:
         1a:ff:a2:67:9f:d5:3b:14:c7:ba:d1:f2:e8:b7:0f:c0:96:6f:
         32:8b:23:e7:99:37:bf:a0:02:75:ec:e8:97:c8:52:ea:0b:66:
         3f:47:a4:ed:24:c0:18:df:ef:f9:24:1e:00:64:25:84:cb:af:
         a3:e8:4d:54:6f:2d:c6:b8:73:94:27:49:65:57:fc:12:c6:5e:
         58:d3:02:5e:2e:0e:6f:f4:1f:29:cf:72:76:ad:aa:2a:0b:53:
         3b:18:32:44:e4:70:bd:4a:be:74:d2:e5:57:c7:1e:ce:f7:5a:
         58:6d:f6:b8:76:ee:25:f0:cf:e3:0d:a9:98:75:e4:48:fa:81:
         cd:59:f0:8b:59:1c:07:0d:83:a9:ff:b8:85:91:9e:70:6b:ce:
         5d:ca:7f:be:c3:80:24:ee:b1:d2:2f:b1:ed:57:dc:70:b1:9c:
         83:8d:19:77:f7:06:c2:bb:69:12:4f:5e:c8:50:b8:ca:b9:be:
         c1:65:ff:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUYpLoxuB1CS286yBX2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk
NzkwYzkwHhcNMjUwNDEzMTAwMTU4WhcNMjUwNDE0MTAwMTU4WjAzMTEwLwYDVQQD
Eyg5NjRjYmM0YTgyM2ZiMzkzNGZmMzUyYjlmNWJiYjc5MDkyMTI1ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22L9jJsNAVHg0En+EFZDy4PHif1j
N7Gohmn1eFZaG8XVLwd3VpPDK78QPNpuUAUxjaAbfsb0GcDf2FpUtAl72jmSA+mJ
Dto/BdvUVguj8rBBAJMxz1N9+UJMgp4ttrai0aC+h5vvYHlFIhLagxBDCX7WDg+e
BpyvlLGn3gFO0VKhyqDMHEapHrJPDRDXZAZGBZpai2IGX2oEhhpP79cmpiO79XrT
0rZFr82reHuS2dxLHkC8RDbzP+tKQK3uVtMfyD+VsLuU9HUQJEmX2Rz42rV23/fR
Zmw5RS4zDQwKxf6dcxP3VTmcGP1vKLSbTpjE9yCLJLePXe1Bejwg/LrsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZMvEqCP7OTT/NSufW7t5CSEl1qMB8GA1UdIwQY
MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct
MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2
LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5PYU+nT
VXcSB1rkydHGdEnZhxJ3MwkMmJemHbF7e/Ca1ca3YO7gbzGd/P9/qSofIseTpPbX
PVu/EcFi+QmOIb+51nG8R+eCGv+iZ5/VOxTHutHy6LcPwJZvMosj55k3v6ACdezo
l8hS6gtmP0ek7STAGN/v+SQeAGQlhMuvo+hNVG8txrhzlCdJZVf8EsZeWNMCXi4O
b/QfKc9ydq2qKgtTOxgyRORwvUq+dNLlV8cezvdaWG32uHbuJfDP4w2pmHXkSPqB
zVnwi1kcBw2Dqf+4hZGecGvOXcp/vsOAJO6x0i+x7VfccLGcg40Zd/cGwrtpEk9e
yFC4yrm+wWX/5Q==
-----END CERTIFICATE-----