Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File:                     i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier:          ylk3HeuPkloEYs06trMkLDj2oMfbRKV3crgA7hDUBJY=
Subject key identifier:   1E:89:AF:B6:C8:31:85:17:22:99:4C:F4:BF:64:E6:0F:88:B3:67:2D
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer:       /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial:       01962E61D4BD013D58D4F0D51AFA820AD8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: PiXU+cfRdCUp5ldUa/hjIgatyltbgeZPTO/+taNn8LE=)
                          2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:bd:01:3d:58:d4:f0:d5:1a:fa:82:0a:d8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=1e89afb6c831851722994cf4bf64e60f88b3672d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:5b:67:1d:a7:ee:57:37:3f:cd:20:fa:11:
                    6b:f3:9b:9c:79:1a:94:63:23:06:ca:b3:8a:3e:07:
                    d6:84:54:fe:39:33:9e:fc:5d:66:6c:8d:55:94:f8:
                    3c:8f:2d:8b:c8:ca:a5:a4:a5:84:24:ea:d2:eb:97:
                    44:07:d1:4f:20:4f:58:76:72:b9:96:60:06:2b:1e:
                    7e:ad:82:4b:78:ae:5b:a6:95:a4:87:b3:d0:86:8f:
                    65:a4:92:fa:36:57:4d:2f:a9:2c:82:94:5a:26:67:
                    0d:73:12:7a:c1:36:0e:01:33:93:1f:76:7d:31:99:
                    41:f4:a7:24:f2:71:7a:69:dd:7d:59:fa:86:c6:34:
                    f9:24:25:f1:10:e0:9b:b5:7d:17:b0:7b:db:16:64:
                    a4:97:c4:3f:b7:de:a2:b4:d2:ac:17:b9:96:7c:5f:
                    f2:f9:fc:11:8b:4b:3e:e5:1a:30:46:7f:46:a5:c8:
                    e9:63:66:0e:25:46:5e:87:d7:e5:fd:53:ee:ba:86:
                    28:dc:53:5c:4f:f9:1e:e8:b9:2c:73:b3:65:c7:cf:
                    12:40:40:1b:24:67:96:73:8d:b8:b9:a2:7a:b2:ec:
                    36:f2:a4:f1:91:a6:85:3d:c8:cb:54:03:2a:81:ef:
                    1f:40:88:b5:a1:20:08:fb:77:5a:0c:64:30:e0:4e:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:89:AF:B6:C8:31:85:17:22:99:4C:F4:BF:64:E6:0F:88:B3:67:2D
            X509v3 Authority Key Identifier:
                keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3c:ca:5a:59:51:63:9a:3e:fb:46:b0:5a:37:46:7e:5a:71:
         e3:19:a1:12:db:5e:fc:e6:c1:c3:49:b9:ae:e0:44:e9:e4:9a:
         f7:57:ad:c5:12:23:0f:5a:9b:b9:33:13:24:c4:20:78:5b:2e:
         9d:c8:4a:4a:c4:0c:58:6e:a7:dd:b5:6f:93:3b:43:6a:91:01:
         4a:ca:e1:34:3b:dc:ef:78:05:82:d8:35:d5:5a:ff:20:77:18:
         90:c8:67:95:34:1c:a8:0d:80:bb:65:2b:02:b9:d6:25:a3:67:
         3f:d5:fb:9d:59:f2:c1:aa:6f:fa:18:cc:70:b8:27:38:7a:24:
         d4:d1:2b:da:85:74:29:d2:81:d6:69:de:2d:4f:b4:8a:5c:6a:
         f7:74:2d:4c:05:54:bb:db:21:48:ec:90:65:41:f3:a6:d3:a9:
         51:ad:9c:73:e3:60:61:13:0d:99:48:b8:5b:c1:9c:96:2a:fd:
         cb:11:d6:52:e7:50:dc:8c:3b:c2:a9:c8:4a:a4:ce:01:36:d7:
         f3:4c:aa:47:a4:95:11:96:8f:a8:01:89:a5:ff:be:ee:66:40:
         7f:6e:2d:85:43:14:da:5b:b5:4c:4f:0a:9a:9b:4f:61:80:52:
         fe:90:87:ed:a3:44:ed:43:5c:4c:d7:3e:17:b5:6f:b3:09:00:
         26:fb:f5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdS9AT1Y1PDVGvqCCtjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDIzZTFkNzJiMTAzMDcwYmVkNTc5YzQwNTk3ZWQyMGI4
NGMxNmUwHhcNMjUwNDEzMDkwMTI1WhcNMjUwNDE0MDkwMTI1WjAzMTEwLwYDVQQD
EygxZTg5YWZiNmM4MzE4NTE3MjI5OTRjZjRiZjY0ZTYwZjg4YjM2NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKNbZx2n7lc3P80g+hFr85uceRqU
YyMGyrOKPgfWhFT+OTOe/F1mbI1VlPg8jy2LyMqlpKWEJOrS65dEB9FPIE9YdnK5
lmAGKx5+rYJLeK5bppWkh7PQho9lpJL6NldNL6ksgpRaJmcNcxJ6wTYOATOTH3Z9
MZlB9Kck8nF6ad19WfqGxjT5JCXxEOCbtX0XsHvbFmSkl8Q/t96itNKsF7mWfF/y
+fwRi0s+5RowRn9GpcjpY2YOJUZeh9fl/VPuuoYo3FNcT/ke6Lksc7Nlx88SQEAb
JGeWc424uaJ6suw28qTxkaaFPcjLVAMqge8fQIi1oSAI+3daDGQw4E42NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6Jr7bIMYUXIplM9L9k5g+Is2ctMB8GA1UdIwQY
MBaAFItCPh1ysQMHC+1XnEBZftILhMFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5Yjgt
YjkwOWVkMjAyYjY0LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5YjgtYjkwOWVkMjAyYjY0
LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzzKWllR
Y5o++0awWjdGflpx4xmhEtte/ObBw0m5ruBE6eSa91etxRIjD1qbuTMTJMQgeFsu
nchKSsQMWG6n3bVvkztDapEBSsrhNDvc73gFgtg11Vr/IHcYkMhnlTQcqA2Au2Ur
ArnWJaNnP9X7nVnywapv+hjMcLgnOHok1NEr2oV0KdKB1mneLU+0ilxq93QtTAVU
u9shSOyQZUHzptOpUa2cc+NgYRMNmUi4W8Gclir9yxHWUudQ3Iw7wqnISqTOATbX
80yqR6SVEZaPqAGJpf++7mZAf24thUMU2lu1TE8KmptPYYBS/pCH7aNE7UNcTNc+
F7VvswkAJvv1rA==
-----END CERTIFICATE-----