Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File:                     d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier:          qQq+6yvOQs4CluuSrPwmEtJcbLevLWFnb1VQnqC+6Nk=
Subject key identifier:   DA:5B:36:B5:6E:C2:D8:74:CD:57:1C:92:E6:FA:12:DB:4F:DA:FF:06
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer:       /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial:       01962E993A5B0655391771EC3AC60408D100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number:          039C
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
                          2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: kKDeo4F33yo4vEw8WPiZ/bW5th4bIvXZQ3Oy6KH+R9s=)
                          3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3a:5b:06:55:39:17:71:ec:3a:c6:04:08:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=da5b36b56ec2d874cd571c92e6fa12db4fdaff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:b8:ef:24:8d:36:5a:c9:45:98:d4:42:31:
                    83:29:f2:95:9e:74:5d:60:d3:e4:37:9d:cd:1d:1f:
                    97:38:a5:0b:d1:35:f8:89:5c:43:0e:9e:7c:d8:59:
                    4f:c9:61:11:0b:f4:b9:83:ca:1a:c2:cb:72:26:2b:
                    d8:fa:01:48:50:7f:bb:85:76:69:f4:45:1d:7c:d3:
                    54:e2:f2:a4:56:d6:e4:06:47:b6:34:b7:0a:f7:e1:
                    34:c1:ac:07:e3:aa:fc:c5:2d:c8:ec:c8:39:10:0e:
                    73:68:5a:92:27:03:bf:a6:e5:d5:0e:e4:f0:62:10:
                    90:b2:61:81:22:59:a2:fc:63:21:59:8a:fa:e3:63:
                    7d:55:3d:32:47:ac:36:62:40:31:4c:ae:0c:3d:01:
                    b1:ff:60:e2:eb:e8:1f:df:73:bc:d1:0d:2e:53:a4:
                    bb:57:58:35:e7:a6:fa:f5:cd:90:b9:b4:28:68:15:
                    aa:13:02:49:c3:99:9d:08:1f:2d:db:9c:cf:9c:33:
                    6c:8d:8e:29:4a:dd:43:50:1c:24:e8:36:e3:3e:b1:
                    f2:bf:97:3e:19:60:7f:81:2b:23:7c:28:bb:fb:ec:
                    d3:7c:95:23:66:a5:b1:1f:be:c5:39:0a:be:4a:32:
                    2b:79:af:b2:ed:a5:32:a8:49:36:6b:9f:01:f6:5d:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5B:36:B5:6E:C2:D8:74:CD:57:1C:92:E6:FA:12:DB:4F:DA:FF:06
            X509v3 Authority Key Identifier:
                keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:9e:66:4c:77:fa:6d:4a:04:6a:5e:21:aa:61:05:a0:fd:
         7c:7a:e5:a2:50:41:48:3e:9d:8f:9f:d9:50:32:7e:22:ae:c7:
         d0:0e:9d:de:6a:d1:61:1a:fe:0b:35:17:ee:78:30:3d:bd:67:
         0d:a9:0f:b8:e9:06:f1:ab:78:61:3f:dd:f8:f9:35:08:52:99:
         6e:1f:22:38:4c:e1:96:d6:15:5d:1c:ab:ed:9b:a9:0b:53:9d:
         dc:a0:26:46:93:9c:4a:79:a3:03:28:05:14:eb:60:86:9e:b6:
         fd:ba:0a:eb:4a:e8:f4:4a:2a:2a:1f:66:32:8c:56:fa:1b:3f:
         e0:7b:40:80:74:06:a8:c9:ab:08:ef:91:a3:e9:68:cd:69:17:
         94:b4:b5:43:d0:85:ae:e3:f3:87:3b:49:c1:c2:58:05:83:ce:
         07:9b:55:e5:96:45:8c:fd:31:9b:d0:db:22:56:92:bf:1d:14:
         f8:d9:84:78:69:4b:0d:d8:05:b3:f3:29:16:bd:94:b4:33:f3:
         e7:58:2b:07:1c:2c:d8:e1:12:a7:de:cf:2c:09:9f:1e:96:e3:
         1a:06:91:f8:a2:fa:fa:b7:f1:6f:1e:fb:f1:9a:3f:88:e1:2b:
         e6:73:ad:6e:f1:85:08:f2:b2:4f:77:50:91:42:4f:9b:64:4d:
         1e:6e:57:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTpbBlU5F3HsOsYECNEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWZiYWFhYzY1NDFhYjMxODUyOWViMDI1NjEzYzY1MjBl
NDc2NDYwHhcNMjUwNDEzMTAwMTU1WhcNMjUwNDE0MTAwMTU1WjAzMTEwLwYDVQQD
EyhkYTViMzZiNTZlYzJkODc0Y2Q1NzFjOTJlNmZhMTJkYjRmZGFmZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknm47ySNNlrJRZjUQjGDKfKVnnRd
YNPkN53NHR+XOKUL0TX4iVxDDp582FlPyWERC/S5g8oawstyJivY+gFIUH+7hXZp
9EUdfNNU4vKkVtbkBke2NLcK9+E0wawH46r8xS3I7Mg5EA5zaFqSJwO/puXVDuTw
YhCQsmGBIlmi/GMhWYr642N9VT0yR6w2YkAxTK4MPQGx/2Di6+gf33O80Q0uU6S7
V1g156b69c2QubQoaBWqEwJJw5mdCB8t25zPnDNsjY4pSt1DUBwk6DbjPrHyv5c+
GWB/gSsjfCi7++zTfJUjZqWxH77FOQq+SjIrea+y7aUyqEk2a58B9l1yzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpbNrVuwth0zVcckub6EttP2v8GMB8GA1UdIwQY
MBaAFHefuqrGVBqzGFKesCVhPGUg5HZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjkt
MjAwMjQ5MThlZTY2LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjktMjAwMjQ5MThlZTY2
LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhieZkx3
+m1KBGpeIaphBaD9fHrlolBBSD6dj5/ZUDJ+Iq7H0A6d3mrRYRr+CzUX7ngwPb1n
DakPuOkG8at4YT/d+Pk1CFKZbh8iOEzhltYVXRyr7ZupC1Od3KAmRpOcSnmjAygF
FOtghp62/boK60ro9EoqKh9mMoxW+hs/4HtAgHQGqMmrCO+Ro+lozWkXlLS1Q9CF
ruPzhztJwcJYBYPOB5tV5ZZFjP0xm9DbIlaSvx0U+NmEeGlLDdgFs/MpFr2UtDPz
51grBxws2OESp97PLAmfHpbjGgaR+KL6+rfxbx778Zo/iOEr5nOtbvGFCPKyT3dQ
kUJPm2RNHm5X7w==
-----END CERTIFICATE-----