Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File:                     d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier:          FvCGOqh3jnIqqcRylGXAiURaZqEaVwkYo6K0Xl8cNQA=
Subject key identifier:   39:30:12:34:FD:44:0A:4F:55:09:AC:63:2F:83:B3:6C:24:61:6C:4F
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer:       /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial:       01962E2AE7BBF0700F3C41908D9E0BA76953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: ls4l20pjhH6ijEEmCEj1efliGQuatrwLDUGbCiUJXsw=)
                          2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e7:bb:f0:70:0f:3c:41:90:8d:9e:0b:a7:69:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=39301234fd440a4f5509ac632f83b36c24616c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:f3:8e:ba:a2:1a:11:ca:e8:1a:c9:54:01:
                    66:c8:31:65:ac:34:4f:28:07:4e:bc:74:22:d6:6d:
                    76:79:0b:7d:43:0c:15:ca:cf:97:56:08:e8:73:29:
                    5c:60:cc:eb:83:16:d9:f0:bc:5d:ae:0b:0d:44:eb:
                    38:ce:9b:16:18:94:4b:2c:20:9d:a5:cd:73:a8:c5:
                    4a:58:ce:92:2d:16:dd:93:ab:c9:13:7e:c6:9f:2c:
                    21:fc:20:46:b0:2f:c2:78:ed:d0:45:09:52:0c:eb:
                    f5:87:e1:38:45:73:bf:67:00:0b:30:18:4f:e1:83:
                    9f:63:d7:83:f0:13:33:af:21:ea:2c:d7:ef:33:7a:
                    87:71:fc:4c:ad:33:1a:cf:d3:99:da:29:95:97:f5:
                    f5:6e:84:34:bc:03:65:a2:b2:34:59:85:8f:b6:2b:
                    bf:61:81:c0:7a:93:33:2b:0c:45:91:98:fe:70:b6:
                    0d:95:68:c3:4d:98:01:dc:1e:b1:b4:dd:36:94:3c:
                    b0:11:65:ee:f5:fd:eb:68:bb:ee:df:18:b8:8b:48:
                    71:16:60:b2:c9:c5:74:3b:f1:42:bd:d8:8c:56:f2:
                    7e:e2:17:f4:af:04:8b:98:2a:87:13:70:2c:8e:1b:
                    e9:5d:d7:e1:55:b1:6b:f8:0b:76:79:13:46:d6:30:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:12:34:FD:44:0A:4F:55:09:AC:63:2F:83:B3:6C:24:61:6C:4F
            X509v3 Authority Key Identifier:
                keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:de:8f:8a:af:80:ca:bb:2c:85:65:f0:98:df:8e:0a:b5:b7:
         27:0f:3a:22:20:37:21:37:59:17:f1:1c:bc:1e:4e:ce:61:20:
         5c:e3:40:ec:78:75:4f:9e:4e:eb:55:c7:73:c5:95:ef:e8:7f:
         be:ea:25:e6:e8:8c:1d:d4:71:7d:1c:6c:8c:f8:62:e1:a2:33:
         34:27:d0:c4:09:2f:65:84:58:4b:48:00:4a:cf:2d:99:97:20:
         6a:46:c6:2b:30:b5:64:aa:b6:06:2a:f0:cd:4f:bf:2a:79:5e:
         30:52:67:bf:0c:eb:6c:5b:07:24:a7:1b:82:66:c4:6b:cd:00:
         db:e5:42:ac:f1:ba:7e:cf:3d:06:3f:92:d8:58:4e:57:23:ac:
         81:0d:8f:fc:5e:34:79:b3:71:9b:be:1a:fe:a1:53:9f:1a:36:
         de:8d:4a:16:69:76:39:7a:0e:c1:41:00:b0:62:a0:00:96:86:
         1b:05:0f:bc:71:94:9f:2a:3d:c5:12:c5:c8:86:05:f4:0a:d3:
         c5:35:d0:3c:73:a6:51:50:b7:4c:95:60:7a:af:f5:15:5d:73:
         ba:33:f5:ec:9e:a3:34:9e:1f:cd:ec:26:ba:a9:ca:fb:b0:07:
         2b:eb:b2:7d:df:8e:cf:8e:f6:37:12:89:4c:1b:d6:3f:00:5b:
         50:82:9b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKue78HAPPEGQjZ4Lp2lTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx
OGViM2YwHhcNMjUwNDEzMDgwMTI1WhcNMjUwNDE0MDgwMTI1WjAzMTEwLwYDVQQD
EygzOTMwMTIzNGZkNDQwYTRmNTUwOWFjNjMyZjgzYjM2YzI0NjE2YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4zzjrqiGhHK6BrJVAFmyDFlrDRP
KAdOvHQi1m12eQt9QwwVys+XVgjocylcYMzrgxbZ8LxdrgsNROs4zpsWGJRLLCCd
pc1zqMVKWM6SLRbdk6vJE37Gnywh/CBGsC/CeO3QRQlSDOv1h+E4RXO/ZwALMBhP
4YOfY9eD8BMzryHqLNfvM3qHcfxMrTMaz9OZ2imVl/X1boQ0vANlorI0WYWPtiu/
YYHAepMzKwxFkZj+cLYNlWjDTZgB3B6xtN02lDywEWXu9f3raLvu3xi4i0hxFmCy
ycV0O/FCvdiMVvJ+4hf0rwSLmCqHE3AsjhvpXdfhVbFr+At2eRNG1jBlAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkwEjT9RApPVQmsYy+Ds2wkYWxPMB8GA1UdIwQY
MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt
NTRiNDFlNGZjNjNiLzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi
LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd6Piq+A
yrsshWXwmN+OCrW3Jw86IiA3ITdZF/EcvB5OzmEgXONA7Hh1T55O61XHc8WV7+h/
vuol5uiMHdRxfRxsjPhi4aIzNCfQxAkvZYRYS0gASs8tmZcgakbGKzC1ZKq2Birw
zU+/KnleMFJnvwzrbFsHJKcbgmbEa80A2+VCrPG6fs89Bj+S2FhOVyOsgQ2P/F40
ebNxm74a/qFTnxo23o1KFml2OXoOwUEAsGKgAJaGGwUPvHGUnyo9xRLFyIYF9ArT
xTXQPHOmUVC3TJVgeq/1FV1zujP17J6jNJ4fzewmuqnK+7AHK+uyfd+Oz472NxKJ
TBvWPwBbUIKbOA==
-----END CERTIFICATE-----