Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          nm2FCrgCV1l+AaDfXy3gDklxA6rQ2bTY7LbD7fHRmvw=
Subject key identifier:   AD:CD:ED:9D:AD:DB:A3:7A:5D:25:F5:F9:48:2A:ED:8E:4F:22:B3:C4
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       01962F3D653181C7A01B7AC016EFC3908D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0439
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=)
                          2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: se6erppN8pkz/IVDD/Pck5zcRXT9o7rF8BzD/MoGSjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:31:81:c7:a0:1b:7a:c0:16:ef:c3:90:8d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=adcded9daddba37a5d25f5f9482aed8e4f22b3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:46:1e:f5:74:bd:64:63:18:e5:3a:ae:3f:
                    a1:ef:17:79:69:71:60:e6:f5:9b:4a:5e:17:7c:36:
                    d7:f4:42:52:b9:c4:10:93:93:1e:c5:8e:8d:d8:06:
                    4d:f2:b3:36:d8:db:54:ea:2c:60:df:f8:45:3b:85:
                    d5:35:dc:69:86:72:9c:f0:ad:10:a8:e7:cd:ff:0d:
                    d1:c2:a1:11:a7:34:f0:f6:62:c4:22:e3:ad:cd:f1:
                    40:d6:0e:fa:20:ff:d1:3e:0a:15:61:9a:f9:8a:ac:
                    72:1a:96:96:45:74:20:d4:3f:14:60:20:a1:af:4a:
                    ab:47:70:90:81:1a:98:b6:da:4e:62:89:ee:2a:ea:
                    54:f2:68:df:54:91:18:5f:92:73:ea:90:78:ac:04:
                    c6:a0:d2:3a:0a:82:04:98:e8:2e:b4:1b:e8:25:89:
                    4a:25:7e:5a:4b:3a:f8:29:e8:19:8a:2c:45:51:b3:
                    07:50:fc:68:04:0d:f0:9e:49:13:af:b5:c8:75:b0:
                    82:9b:33:01:06:e2:ed:61:27:30:83:1a:28:40:3d:
                    96:c1:1e:4e:ff:85:e0:10:73:34:a9:56:31:3f:3e:
                    c3:71:56:87:84:4d:11:3b:c0:5a:59:d0:46:ee:0f:
                    1f:1e:46:42:0d:f5:ec:f6:f5:22:f6:26:5c:b1:6d:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CD:ED:9D:AD:DB:A3:7A:5D:25:F5:F9:48:2A:ED:8E:4F:22:B3:C4
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:31:6e:72:9c:f0:89:3b:e6:d4:8d:da:e5:d8:5c:9c:3f:
         4f:cd:3a:93:e0:eb:42:d4:6b:df:14:fc:1b:a6:56:d8:58:4a:
         6f:09:29:da:e6:11:69:e7:05:67:b3:b5:d8:6b:a3:06:69:aa:
         a7:a4:84:00:17:4c:bf:34:8b:cb:60:46:02:0e:a6:97:5e:31:
         3c:19:61:c2:3d:bb:62:62:18:22:10:77:b7:ab:eb:d2:89:0e:
         f5:50:ee:fd:60:37:fc:d1:7d:3f:89:e0:ac:98:29:75:d3:db:
         ec:78:ff:84:38:31:75:c9:31:cd:73:10:54:d3:2f:66:da:1e:
         bf:cc:17:43:af:33:42:cb:92:5b:a9:14:54:63:e6:2c:0e:8b:
         20:31:47:bb:58:fa:48:5f:d7:1e:19:ad:a1:7a:68:d5:1b:03:
         98:ec:a2:71:e6:99:bf:ef:c0:57:51:95:44:37:5d:f6:e1:b8:
         cd:98:67:1c:40:8f:d2:44:0f:65:94:43:3e:d7:56:0a:fb:b0:
         87:5e:27:8d:11:2a:2d:37:a1:df:2d:f5:4d:ea:bf:d2:a7:84:
         d8:70:bf:82:f8:c9:0d:40:fd:60:1a:16:1c:99:0b:86:0c:c9:
         ed:18:51:ed:3b:78:d3:08:35:1b:37:d2:f8:d5:2d:1f:3d:39:
         b6:88:cc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWUxgcegG3rAFu/DkI1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWVkZjUyNmIxY2E1ZmYwZTY4MmZmNDhhZWNlMTIxZDI3
YmMwYzMwHhcNMjUwNDEzMTMwMTE0WhcNMjUwNDE0MTMwMTE0WjAzMTEwLwYDVQQD
EyhhZGNkZWQ5ZGFkZGJhMzdhNWQyNWY1Zjk0ODJhZWQ4ZTRmMjJiM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNpGHvV0vWRjGOU6rj+h7xd5aXFg
5vWbSl4XfDbX9EJSucQQk5MexY6N2AZN8rM22NtU6ixg3/hFO4XVNdxphnKc8K0Q
qOfN/w3RwqERpzTw9mLEIuOtzfFA1g76IP/RPgoVYZr5iqxyGpaWRXQg1D8UYCCh
r0qrR3CQgRqYttpOYonuKupU8mjfVJEYX5Jz6pB4rATGoNI6CoIEmOgutBvoJYlK
JX5aSzr4KegZiixFUbMHUPxoBA3wnkkTr7XIdbCCmzMBBuLtYScwgxooQD2WwR5O
/4XgEHM0qVYxPz7DcVaHhE0RO8BaWdBG7g8fHkZCDfXs9vUi9iZcsW0H1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3N7Z2t26N6XSX1+Ugq7Y5PIrPEMB8GA1UdIwQY
MBaAFIse31JrHKX/Dmgv9Irs4SHSe8DDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYt
MjUxMTY4ZWRkM2U0LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYtMjUxMTY4ZWRkM2U0
LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvExbnKc
8Ik75tSN2uXYXJw/T806k+DrQtRr3xT8G6ZW2FhKbwkp2uYRaecFZ7O12GujBmmq
p6SEABdMvzSLy2BGAg6ml14xPBlhwj27YmIYIhB3t6vr0okO9VDu/WA3/NF9P4ng
rJgpddPb7Hj/hDgxdckxzXMQVNMvZtoev8wXQ68zQsuSW6kUVGPmLA6LIDFHu1j6
SF/XHhmtoXpo1RsDmOyiceaZv+/AV1GVRDdd9uG4zZhnHECP0kQPZZRDPtdWCvuw
h14njREqLTeh3y31Teq/0qeE2HC/gvjJDUD9YBoWHJkLhgzJ7RhR7Tt40wg1GzfS
+NUtHz05tojMog==
-----END CERTIFICATE-----