Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File:                     25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier:          kJJLx14ct0C72fn+16YxkWR6UQGQtmsoTDcxTlpbS7Y=
Subject key identifier:   EF:0E:B7:63:2C:13:99:AE:1B:E4:66:67:0F:77:27:20:2C:4C:BD:38
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer:       /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial:       01962E61F5040357AABC30A0311BD7B44C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: rfqrmZ1s2HQ0OkRPXTcWyfHdcW6JJgMuHH/8Le357E0=)
                          2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
                          3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f5:04:03:57:aa:bc:30:a0:31:1b:d7:b4:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=ef0eb7632c1399ae1be466670f7727202c4cbd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:6e:c2:be:e1:fb:32:aa:33:06:b2:17:d9:
                    21:9c:a5:49:47:b5:14:8b:08:46:8a:ce:15:f3:f3:
                    ca:35:40:50:08:6e:b1:b7:39:ef:81:dc:fe:64:78:
                    20:06:44:cf:2c:64:39:f9:f7:2f:f3:70:07:88:84:
                    72:6b:33:5a:22:ec:38:bb:2c:7a:52:21:17:fe:23:
                    e7:9b:0d:50:33:5b:a0:74:82:84:b9:5b:38:eb:af:
                    95:21:36:57:47:f7:f3:df:c9:e4:5c:0d:53:b8:24:
                    0d:c3:92:7a:d4:63:8a:a9:6e:64:9f:79:cd:11:96:
                    c0:86:d7:d9:23:8f:db:ed:b6:c1:d0:ed:c3:b8:ba:
                    a7:a4:78:8b:97:b9:11:e8:fe:b6:ae:7e:97:e1:2b:
                    ec:bb:63:a9:3e:68:c4:e4:2c:a1:eb:f1:b4:65:96:
                    5f:7c:ab:9b:63:29:d0:46:03:65:9b:01:05:0a:50:
                    bc:ff:ab:1e:97:e6:53:c7:2b:10:fb:82:e8:b4:bc:
                    f6:7b:46:31:78:f9:37:24:8c:3b:80:72:b6:72:8f:
                    b4:de:91:ca:7f:33:e4:78:ac:f2:45:bb:3c:bd:94:
                    96:d1:1d:20:e4:55:fe:d5:ed:b1:dd:0f:cd:4f:5b:
                    b4:02:3d:92:06:83:77:c2:70:90:31:90:55:1c:ef:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0E:B7:63:2C:13:99:AE:1B:E4:66:67:0F:77:27:20:2C:4C:BD:38
            X509v3 Authority Key Identifier:
                keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:7f:3e:ea:10:b2:ea:aa:f9:d3:21:5c:84:fc:da:16:da:
         65:f2:de:58:03:cb:55:d3:af:2a:fd:3b:51:9f:02:fa:0f:60:
         13:a3:cd:c8:b1:0b:1b:f7:73:69:4f:e3:4d:08:4d:73:5d:e3:
         ac:f1:d6:aa:f2:71:17:1d:d4:a8:46:35:6a:9e:7e:f9:84:07:
         d2:c7:88:ed:d7:b4:1d:df:80:0f:1a:24:af:50:88:46:4f:e4:
         fe:6f:41:ee:79:08:23:28:dd:31:ed:b1:0e:53:f0:fa:69:24:
         43:be:7d:bc:d4:86:e0:54:54:29:02:d4:6a:78:d8:9a:27:b0:
         f1:78:e0:a9:97:ec:a9:2e:7c:0d:e7:b5:9d:72:6f:da:af:49:
         a3:b3:37:87:ef:61:bd:a1:bc:df:02:f2:f0:50:6f:93:d5:1c:
         24:f4:fe:2a:17:52:67:4f:c8:e8:6c:e4:ba:41:56:a8:c3:2c:
         72:f7:d9:c9:66:09:b4:a6:6c:7d:4b:9b:40:c4:8b:e0:09:47:
         55:36:97:8c:3f:37:59:d3:5b:80:6e:48:d0:e0:d5:4b:cb:32:
         dd:70:82:b0:d1:db:70:d9:ef:46:ce:52:72:7d:f1:27:6f:d0:
         1d:ad:77:37:03:94:b5:b0:5b:c4:d2:24:89:55:11:5f:43:31:
         0e:65:3e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfUEA1eqvDCgMRvXtEwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3
YTBlY2UwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
EyhlZjBlYjc2MzJjMTM5OWFlMWJlNDY2NjcwZjc3MjcyMDJjNGNiZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH5uwr7h+zKqMwayF9khnKVJR7UU
iwhGis4V8/PKNUBQCG6xtznvgdz+ZHggBkTPLGQ5+fcv83AHiIRyazNaIuw4uyx6
UiEX/iPnmw1QM1ugdIKEuVs466+VITZXR/fz38nkXA1TuCQNw5J61GOKqW5kn3nN
EZbAhtfZI4/b7bbB0O3DuLqnpHiLl7kR6P62rn6X4Svsu2OpPmjE5Cyh6/G0ZZZf
fKubYynQRgNlmwEFClC8/6sel+ZTxysQ+4LotLz2e0YxePk3JIw7gHK2co+03pHK
fzPkeKzyRbs8vZSW0R0g5FX+1e2x3Q/NT1u0Aj2SBoN3wnCQMZBVHO8IOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8Ot2MsE5muG+RmZw93JyAsTL04MB8GA1UdIwQY
MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt
YTY5YzViYzdlZDU3LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3
LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMU5/PuoQ
suqq+dMhXIT82hbaZfLeWAPLVdOvKv07UZ8C+g9gE6PNyLELG/dzaU/jTQhNc13j
rPHWqvJxFx3UqEY1ap5++YQH0seI7de0Hd+ADxokr1CIRk/k/m9B7nkIIyjdMe2x
DlPw+mkkQ759vNSG4FRUKQLUanjYmiew8XjgqZfsqS58Dee1nXJv2q9Jo7M3h+9h
vaG83wLy8FBvk9UcJPT+KhdSZ0/I6GzkukFWqMMscvfZyWYJtKZsfUubQMSL4AlH
VTaXjD83WdNbgG5I0ODVS8sy3XCCsNHbcNnvRs5Scn3xJ2/QHa13NwOUtbBbxNIk
iVURX0MxDmU+Pw==
-----END CERTIFICATE-----