Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File:                     iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier:          sxSXwOB1ptdkpmzRYXQCk2sKWWsUvjYO8L/can6LbiE=
Subject key identifier:   26:B3:4F:ED:F3:E9:48:63:FD:A4:45:FD:64:31:17:1B:C7:19:D7:0B
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer:       /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial:       01962F3DB712BD0298757860ABC672419B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: dGA5zHaNIMND8b3vsGlx0oOcw8OPZRppZ//ARSRqlTU=)
                          2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b7:12:bd:02:98:75:78:60:ab:c6:72:41:9b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=26b34fedf3e94863fda445fd6431171bc719d70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:87:98:84:25:9d:b4:30:bf:6b:bb:f8:6e:
                    f7:66:ec:d8:52:00:b3:f0:03:e4:40:b4:ed:ca:29:
                    eb:11:74:12:54:c0:f7:b1:0f:59:b6:d0:ce:4c:69:
                    b5:2d:f5:ef:f1:35:a9:ba:57:1d:40:61:a0:5e:41:
                    d4:7a:2a:ca:d1:23:1e:44:5d:99:cb:8c:54:c5:7a:
                    44:9d:c6:ad:fb:89:5c:b5:8c:27:f7:e0:d1:75:17:
                    08:5e:8a:9a:06:f7:6f:ca:09:7d:df:f3:af:3f:a1:
                    29:54:dc:c3:4d:34:38:36:79:9b:5a:b0:53:0f:8c:
                    17:bc:15:25:45:ff:be:8d:a0:be:bd:bd:43:4b:5e:
                    9b:57:63:ed:7e:f1:ef:d0:a8:a8:49:32:2e:97:06:
                    c0:c0:57:5b:e5:11:19:5d:4f:a9:0a:36:b4:33:a9:
                    d7:5a:ee:85:7c:b4:b6:8a:84:a2:6a:cb:d9:1a:27:
                    87:49:39:58:1b:1b:b8:b3:e6:e5:8c:2f:b3:8c:23:
                    c1:2c:92:15:1b:f5:fb:08:4a:63:c5:90:5d:9a:c3:
                    15:19:30:af:c6:b5:5a:15:f4:3d:75:fd:06:23:ea:
                    a3:c9:db:49:e5:dc:58:ac:81:14:e5:9b:84:3a:7c:
                    38:cf:ac:25:3d:70:ba:5c:d0:2f:cc:02:9c:2a:c1:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:4F:ED:F3:E9:48:63:FD:A4:45:FD:64:31:17:1B:C7:19:D7:0B
            X509v3 Authority Key Identifier:
                keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:68:c7:cd:5d:62:35:43:f5:01:f1:5b:57:06:33:e3:07:9f:
         12:8c:a3:ff:1a:96:e0:84:30:54:a0:de:d6:7f:4c:49:49:c8:
         cf:05:03:dd:8c:6f:0b:c2:e2:9d:0d:49:d1:1b:fa:6c:94:63:
         9e:34:59:b5:3c:53:7f:8c:11:1f:23:36:6e:39:3b:58:9d:a9:
         1b:09:8d:82:99:b5:0c:e1:50:6f:77:58:2d:43:81:f4:17:9f:
         c9:ef:01:08:81:d6:e4:67:2b:db:e7:7a:ee:1d:21:48:3b:ed:
         a3:dd:66:09:f3:ff:38:1e:f1:4b:a9:9f:49:8e:8b:06:5c:ff:
         9a:b2:df:c6:92:03:b3:97:d6:c1:58:09:f1:c0:f1:b8:cd:3c:
         4c:00:61:cf:e6:89:92:8d:2d:22:20:e4:7d:b3:78:6d:63:cd:
         a8:f4:d7:63:20:dd:0f:af:11:e8:7c:83:57:82:5f:23:11:1e:
         3a:3a:65:ee:7b:e5:51:6e:59:59:10:a6:7e:bf:eb:21:b3:65:
         b4:f7:a4:47:6c:6c:db:fb:14:e9:fb:75:83:1a:d4:cd:1c:14:
         8c:97:ca:14:b8:a7:0b:27:0a:9c:e8:54:f8:9d:9c:44:ea:fe:
         c6:e9:79:a8:5e:76:21:8e:67:a5:50:f1:eb:83:0d:e2:69:a0:
         9c:83:18:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbcSvQKYdXhgq8ZyQZsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjQxZmFiM2U2M2VhZjViZGYwNzE2NmRmNWFhNjgxNjJl
YWQ3YTYwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EygyNmIzNGZlZGYzZTk0ODYzZmRhNDQ1ZmQ2NDMxMTcxYmM3MTlkNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmneHmIQlnbQwv2u7+G73ZuzYUgCz
8APkQLTtyinrEXQSVMD3sQ9ZttDOTGm1LfXv8TWpulcdQGGgXkHUeirK0SMeRF2Z
y4xUxXpEncat+4lctYwn9+DRdRcIXoqaBvdvygl93/OvP6EpVNzDTTQ4NnmbWrBT
D4wXvBUlRf++jaC+vb1DS16bV2PtfvHv0KioSTIulwbAwFdb5REZXU+pCja0M6nX
Wu6FfLS2ioSiasvZGieHSTlYGxu4s+bljC+zjCPBLJIVG/X7CEpjxZBdmsMVGTCv
xrVaFfQ9df0GI+qjydtJ5dxYrIEU5ZuEOnw4z6wlPXC6XNAvzAKcKsHPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCazT+3z6Uhj/aRF/WQxFxvHGdcLMB8GA1UdIwQY
MBaAFIj0H6s+Y+r1vfBxZt9apoFi6temMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMt
ODk3Y2I2YTQzMGQ3LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMtODk3Y2I2YTQzMGQ3
LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2jHzV1i
NUP1AfFbVwYz4wefEoyj/xqW4IQwVKDe1n9MSUnIzwUD3YxvC8LinQ1J0Rv6bJRj
njRZtTxTf4wRHyM2bjk7WJ2pGwmNgpm1DOFQb3dYLUOB9Befye8BCIHW5Gcr2+d6
7h0hSDvto91mCfP/OB7xS6mfSY6LBlz/mrLfxpIDs5fWwVgJ8cDxuM08TABhz+aJ
ko0tIiDkfbN4bWPNqPTXYyDdD68R6HyDV4JfIxEeOjpl7nvlUW5ZWRCmfr/rIbNl
tPekR2xs2/sU6ft1gxrUzRwUjJfKFLinCycKnOhU+J2cROr+xul5qF52IY5npVDx
64MN4mmgnIMYKg==
-----END CERTIFICATE-----