Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File:                     goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier:          lYQ1nsOGNBenAxy/3caHwB3l3n0Pp6c9hwXBSCsTLug=
Subject key identifier:   4A:10:20:F3:42:1C:B3:EA:25:54:A0:88:02:77:B2:62:9F:DF:06:E4
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer:       /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial:       01962FAB1D03612BF15F69D80BC666EB27CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=)
                          2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: fRyIy+HMORgxrLwbDDLEqe3CEBdH2zE/wpbbgm9v2AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1d:03:61:2b:f1:5f:69:d8:0b:c6:66:eb:27:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=4a1020f3421cb3ea2554a0880277b2629fdf06e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:3b:6e:e2:bc:05:f7:61:29:36:27:94:9a:
                    b7:c0:5a:69:21:b8:05:dd:2e:79:82:2e:b7:be:da:
                    05:2a:59:3a:05:4a:92:e4:1d:10:c8:ee:4b:5b:80:
                    58:b4:b4:9e:4b:66:40:ec:c2:61:96:99:75:cd:09:
                    df:59:3f:94:a9:8d:69:71:2a:c1:10:d7:14:c7:be:
                    b8:23:78:9a:7d:b2:1d:a4:a3:d8:9e:df:11:c8:b7:
                    2d:a6:7d:3e:68:da:da:58:c0:b9:d4:42:0a:6e:d7:
                    66:3c:d6:85:d1:62:5b:f6:ca:c6:ec:bd:99:7c:2b:
                    a1:ec:d2:6d:e9:cd:f3:49:b9:e4:21:05:97:5e:c9:
                    94:59:ef:d4:04:e0:b2:13:35:e0:48:af:3d:b3:52:
                    78:93:6b:be:96:89:f7:04:0f:92:29:11:b5:70:64:
                    af:70:00:ac:e8:5f:df:cb:e9:76:1b:b7:2f:6c:67:
                    2f:8c:1c:a4:2d:26:b7:8d:34:b6:b9:8d:32:e2:ec:
                    34:b8:c1:e4:4e:a0:c9:a8:01:b4:02:b0:a7:2f:0f:
                    c1:aa:95:53:4b:49:b0:42:94:45:d4:bd:e3:46:44:
                    f5:be:bb:6f:aa:39:3a:ca:da:00:36:1d:32:04:f7:
                    18:0b:ed:5e:83:8b:47:23:7e:bf:86:cc:13:e4:58:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:10:20:F3:42:1C:B3:EA:25:54:A0:88:02:77:B2:62:9F:DF:06:E4
            X509v3 Authority Key Identifier:
                keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:d2:43:90:07:5b:4f:1f:c4:d5:5b:98:27:c1:17:6a:1f:
         a4:42:0c:e6:9b:56:43:03:d5:01:cc:17:b3:67:04:41:da:c4:
         96:0e:f7:09:7f:e1:2f:44:09:86:de:9c:a8:eb:fa:2b:bc:c6:
         f6:70:1c:46:d9:39:fa:93:6c:57:ab:20:b6:8e:1e:5c:7a:90:
         16:ff:9b:0b:26:12:0a:1d:7b:c3:6d:d7:1d:a2:c3:9d:1a:93:
         cb:0e:3f:08:17:03:c9:38:73:0d:70:0a:a7:0a:81:ae:fc:2f:
         90:5b:d0:8b:a3:c6:b2:e5:12:ef:02:6d:42:33:da:23:3c:44:
         f0:ee:2f:f9:14:cc:b2:e7:80:fa:38:39:92:ad:06:f7:56:fd:
         3d:f8:cb:2a:a0:21:e0:13:c6:82:dc:59:60:9f:d2:5a:d4:28:
         2a:67:20:b0:c0:f4:b3:05:0a:5b:a4:dc:02:41:3d:1e:5a:c4:
         0c:66:01:ff:22:bf:b9:91:38:8e:12:4e:36:3f:2a:38:b2:b7:
         82:9f:b6:6b:09:38:3e:62:d9:0a:d8:f0:3c:15:c5:5c:d0:4a:
         37:39:6b:1d:bb:c4:67:34:19:37:69:2f:d2:14:52:45:8f:63:
         2d:d4:10:f1:2a:cc:b5:be:ed:16:06:db:2a:c0:82:90:1f:a5:
         2b:ad:7f:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqx0DYSvxX2nYC8Zm6yfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyODY3MmNkNzM2YjU3ZTFlM2RmYzdkZDczNmYzYmQ4YTYx
NmJhODEwHhcNMjUwNDEzMTUwMTA1WhcNMjUwNDE0MTUwMTA1WjAzMTEwLwYDVQQD
Eyg0YTEwMjBmMzQyMWNiM2VhMjU1NGEwODgwMjc3YjI2MjlmZGYwNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IQ7buK8BfdhKTYnlJq3wFppIbgF
3S55gi63vtoFKlk6BUqS5B0QyO5LW4BYtLSeS2ZA7MJhlpl1zQnfWT+UqY1pcSrB
ENcUx764I3iafbIdpKPYnt8RyLctpn0+aNraWMC51EIKbtdmPNaF0WJb9srG7L2Z
fCuh7NJt6c3zSbnkIQWXXsmUWe/UBOCyEzXgSK89s1J4k2u+lon3BA+SKRG1cGSv
cACs6F/fy+l2G7cvbGcvjBykLSa3jTS2uY0y4uw0uMHkTqDJqAG0ArCnLw/BqpVT
S0mwQpRF1L3jRkT1vrtvqjk6ytoANh0yBPcYC+1eg4tHI36/hswT5FhcEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoQIPNCHLPqJVSgiAJ3smKf3wbkMB8GA1UdIwQY
MBaAFIKGcs1za1fh49/H3XNvO9imFrqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NGJiNTAtMDFiZS00ZWM2LTk0MTgt
ZWVlN2ZhZTVjMDM3LzEvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81NGJiNTAtMDFiZS00ZWM2LTk0MTgtZWVlN2ZhZTVjMDM3
LzEvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJp7SQ5AH
W08fxNVbmCfBF2ofpEIM5ptWQwPVAcwXs2cEQdrElg73CX/hL0QJht6cqOv6K7zG
9nAcRtk5+pNsV6sgto4eXHqQFv+bCyYSCh17w23XHaLDnRqTyw4/CBcDyThzDXAK
pwqBrvwvkFvQi6PGsuUS7wJtQjPaIzxE8O4v+RTMsueA+jg5kq0G91b9PfjLKqAh
4BPGgtxZYJ/SWtQoKmcgsMD0swUKW6TcAkE9HlrEDGYB/yK/uZE4jhJONj8qOLK3
gp+2awk4PmLZCtjwPBXFXNBKNzlrHbvEZzQZN2kv0hRSRY9jLdQQ8SrMtb7tFgbb
KsCCkB+lK61/rw==
-----END CERTIFICATE-----