Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File:                     aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier:          SuY+akc8qs7sB/Zq5keONftkTYAXRrSzBDNNGfXv658=
Subject key identifier:   60:21:9B:0E:1A:8A:B4:41:EE:42:8A:93:79:51:48:F3:34:A9:18:A2
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer:       /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial:       01962E61AF5A8EFD79B51C2DD10B7E6BF289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: UITBZGotoEJu7VXUeHnQEpzUh80.roa (hash: +4A8vS2ImMKHLoBNzMFALbXMy6VYqIeTofj/Zphvx9I=)
                          2: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: MOtzewu1qbVFgJBFzSn4Em8IxoYLO1WhAATgtJhgNTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:5a:8e:fd:79:b5:1c:2d:d1:0b:7e:6b:f2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=60219b0e1a8ab441ee428a93795148f334a918a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:c2:38:5e:59:ad:51:91:95:b8:16:6d:4b:
                    6f:55:53:18:de:73:3e:e5:6c:cc:57:e2:78:5c:80:
                    f4:a4:91:dd:b2:89:e8:78:47:33:d0:9e:e3:89:15:
                    46:d7:e1:8e:4c:73:c4:06:61:d7:13:50:5b:0e:2f:
                    85:b7:5b:e6:4f:d7:97:13:f9:8e:ef:99:a9:6b:c0:
                    b1:07:1e:04:9c:30:96:8a:06:a1:38:09:f3:57:13:
                    4c:37:60:fa:a7:ec:90:75:35:71:96:8e:1a:d5:7f:
                    1f:ec:2d:93:60:90:23:23:a3:03:05:b2:10:d4:d7:
                    a2:34:ec:31:2e:62:4c:e1:a6:0b:56:f8:85:d9:ad:
                    6f:ca:fb:6b:58:6d:5f:4b:cb:44:ce:9d:90:49:37:
                    84:75:f2:dd:ca:4d:08:e4:a5:5a:54:6a:94:ac:7c:
                    cf:96:79:c5:01:4a:13:d0:9f:27:48:0f:6d:ce:f9:
                    c0:ee:57:cc:8f:b4:2a:d1:38:73:0c:0d:ca:b2:ac:
                    49:2a:cf:fb:05:bf:74:41:85:40:d8:c7:5d:ee:0f:
                    97:c2:77:96:f6:3a:7a:b5:38:3d:54:38:0e:c9:ba:
                    9a:18:e4:4f:ea:ac:be:5d:35:ac:67:a8:c0:7d:f1:
                    51:dd:5a:d3:21:02:ef:02:f6:26:5e:df:0f:36:4e:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:21:9B:0E:1A:8A:B4:41:EE:42:8A:93:79:51:48:F3:34:A9:18:A2
            X509v3 Authority Key Identifier:
                keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:67:ad:b8:6e:8e:ae:df:d1:84:fe:b5:be:88:49:f6:37:31:
         1c:80:1c:f1:87:cf:1f:4e:7f:bb:ba:c8:d9:b2:02:0a:c6:9f:
         ae:d3:35:da:3a:8a:6e:44:05:09:ce:99:87:76:30:d6:d8:61:
         72:8f:dd:10:77:f0:01:b6:78:c3:93:42:9b:79:0f:20:c3:1e:
         01:99:c5:56:76:a2:c4:56:62:81:3a:be:50:30:fd:fd:40:78:
         93:22:b2:5c:07:70:2b:df:13:74:7c:19:33:77:75:65:ee:14:
         06:f6:19:bd:b5:f8:6a:f3:b7:e1:fc:e1:32:8c:c2:21:15:75:
         5b:ad:cd:38:d0:45:5b:66:9d:d7:2c:95:96:ad:89:53:48:bc:
         ba:b6:03:1d:28:d6:48:dc:e6:ac:09:d7:5f:e0:46:6c:18:c2:
         6f:47:0e:63:b0:de:77:0a:a7:3a:fc:db:16:7d:0b:ba:40:2d:
         ac:7a:f9:96:23:f1:ef:73:42:fa:f8:22:77:0e:a2:51:9e:0b:
         e4:98:92:f4:f1:8f:20:f6:23:62:46:6c:2d:89:50:11:0a:ef:
         47:61:18:c5:91:11:ab:1e:fa:c3:5b:61:08:55:9c:68:41:fe:
         95:88:61:58:d2:e0:e5:da:bb:5f:94:91:30:fb:f5:c2:6e:f4:
         0c:72:3c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYa9ajv15tRwt0Qt+a/KJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmQzOWQ3OTMxMjVjNjg0ZGZmMjcyZjg4NjIyYmFjNDMy
MTgwZjAwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
Eyg2MDIxOWIwZTFhOGFiNDQxZWU0MjhhOTM3OTUxNDhmMzM0YTkxOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbDCOF5ZrVGRlbgWbUtvVVMY3nM+
5WzMV+J4XID0pJHdsonoeEcz0J7jiRVG1+GOTHPEBmHXE1BbDi+Ft1vmT9eXE/mO
75mpa8CxBx4EnDCWigahOAnzVxNMN2D6p+yQdTVxlo4a1X8f7C2TYJAjI6MDBbIQ
1NeiNOwxLmJM4aYLVviF2a1vyvtrWG1fS8tEzp2QSTeEdfLdyk0I5KVaVGqUrHzP
lnnFAUoT0J8nSA9tzvnA7lfMj7Qq0ThzDA3KsqxJKs/7Bb90QYVA2Mdd7g+XwneW
9jp6tTg9VDgOybqaGORP6qy+XTWsZ6jAffFR3VrTIQLvAvYmXt8PNk5aUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAhmw4airRB7kKKk3lRSPM0qRiiMB8GA1UdIwQY
MBaAFGi9OdeTElxoTf8nL4hiK6xDIYDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUt
MDg5MDUyMGI4ODQ2LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUtMDg5MDUyMGI4ODQ2
LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2etuG6O
rt/RhP61vohJ9jcxHIAc8YfPH05/u7rI2bICCsafrtM12jqKbkQFCc6Zh3Yw1thh
co/dEHfwAbZ4w5NCm3kPIMMeAZnFVnaixFZigTq+UDD9/UB4kyKyXAdwK98TdHwZ
M3d1Ze4UBvYZvbX4avO34fzhMozCIRV1W63NONBFW2ad1yyVlq2JU0i8urYDHSjW
SNzmrAnXX+BGbBjCb0cOY7DedwqnOvzbFn0LukAtrHr5liPx73NC+vgidw6iUZ4L
5JiS9PGPIPYjYkZsLYlQEQrvR2EYxZERqx76w1thCFWcaEH+lYhhWNLg5dq7X5SR
MPv1wm70DHI8DQ==
-----END CERTIFICATE-----