Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File:                     _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier:          bWp5Zo2hRYkScuGlkxhoWTiNaRoGfdW85z/N6vjmhdM=
Subject key identifier:   F8:1A:7D:C1:E8:58:A8:4A:68:FB:37:13:2E:34:F1:BE:0B:2D:CD:C7
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer:       /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial:       01962F3D5A76670718A31FECB3601BD4CAC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number:          0208
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
                          2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: hxUrrjCcR0p3521I5n8hyY6ux7J4WIexvWOS8dWPA1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5a:76:67:07:18:a3:1f:ec:b3:60:1b:d4:ca:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=f81a7dc1e858a84a68fb37132e34f1be0b2dcdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:82:dd:c3:82:54:9c:5b:7d:7e:06:e5:39:
                    2b:30:0a:c4:dc:f8:3b:95:71:20:95:32:01:cd:dc:
                    b8:71:ac:d2:0e:36:f0:11:22:55:50:69:00:bb:b6:
                    a3:7d:fd:0a:1a:d8:c8:04:90:89:c7:bd:59:18:ba:
                    25:ae:aa:64:8c:b2:d5:39:f8:26:52:14:45:87:83:
                    fd:08:b7:8e:19:69:2b:16:9f:64:9d:0d:f9:db:74:
                    2e:9f:99:90:32:95:75:48:48:02:30:81:8d:64:ab:
                    92:e7:13:70:91:f0:3c:68:e1:9d:54:fe:99:d6:60:
                    fa:3b:bc:79:33:ae:47:61:71:ea:7f:e9:b5:38:97:
                    71:7b:ec:41:35:7b:3b:1a:36:89:1b:7a:8b:79:3d:
                    47:4c:32:15:e2:57:db:cc:eb:da:e9:66:9b:43:af:
                    7a:f3:90:fd:06:5f:8a:d4:78:c7:77:ac:4a:2c:23:
                    05:27:bf:0f:a9:e4:42:34:b1:9d:c9:44:da:18:88:
                    5f:7d:6b:aa:0b:3d:e1:4a:b3:9e:0c:4d:dd:e3:bf:
                    fb:ee:9a:e7:5f:5a:6b:60:8b:64:72:76:fe:3d:04:
                    1a:05:c7:68:77:d3:82:0c:b8:80:af:79:95:91:92:
                    bb:a9:b3:ee:fc:85:be:34:0a:a5:1f:08:c1:c1:be:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:7D:C1:E8:58:A8:4A:68:FB:37:13:2E:34:F1:BE:0B:2D:CD:C7
            X509v3 Authority Key Identifier:
                keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:b5:b0:b2:fd:17:0f:13:dd:4a:c2:e8:73:bb:5e:32:75:
         15:a0:44:2d:32:e4:76:c4:25:d4:27:92:bc:e5:5a:8d:4b:4f:
         1f:11:ce:32:fe:fa:18:ee:21:7e:6d:30:4f:7c:8a:e5:d9:2d:
         73:16:5a:f9:de:02:45:99:c5:47:a7:d9:7d:f6:e6:de:a9:8e:
         38:20:a0:52:9e:62:c8:a9:79:16:4c:43:47:05:03:ef:31:9e:
         4e:08:87:58:49:05:a4:21:c0:54:39:0d:4f:c1:8c:03:02:c7:
         6b:d0:a0:ab:89:44:8e:5f:63:9e:ba:49:aa:97:64:22:54:26:
         da:54:09:73:ff:02:f9:fd:2f:bc:f0:d3:5a:09:ea:a8:6f:0b:
         13:77:09:93:ab:c6:b4:5d:7c:af:4e:4d:c6:0a:e5:ef:1d:8b:
         f6:6e:6a:52:27:32:a5:27:f6:92:44:d4:6f:c8:52:30:b7:51:
         92:7a:a5:91:4e:41:da:e6:80:d7:30:06:b4:4c:39:55:10:2c:
         21:ce:c8:a3:7b:46:70:5c:3a:1d:76:0b:03:b2:eb:28:27:6e:
         09:82:c9:7c:fe:95:2d:f5:56:c1:fd:99:d6:60:25:b6:cd:09:
         81:fe:20:2a:19:f8:35:b2:a4:53:da:0e:a8:6b:cd:72:2e:fa:
         94:af:de:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVp2ZwcYox/ss2Ab1MrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EyhmODFhN2RjMWU4NThhODRhNjhmYjM3MTMyZTM0ZjFiZTBiMmRjZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4KC3cOCVJxbfX4G5TkrMArE3Pg7
lXEglTIBzdy4cazSDjbwESJVUGkAu7ajff0KGtjIBJCJx71ZGLolrqpkjLLVOfgm
UhRFh4P9CLeOGWkrFp9knQ3523Qun5mQMpV1SEgCMIGNZKuS5xNwkfA8aOGdVP6Z
1mD6O7x5M65HYXHqf+m1OJdxe+xBNXs7GjaJG3qLeT1HTDIV4lfbzOva6WabQ696
85D9Bl+K1HjHd6xKLCMFJ78PqeRCNLGdyUTaGIhffWuqCz3hSrOeDE3d47/77prn
X1prYItkcnb+PQQaBcdod9OCDLiAr3mVkZK7qbPu/IW+NAqlHwjBwb5q0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgafcHoWKhKaPs3Ey408b4LLc3HMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ+1sLL9
Fw8T3UrC6HO7XjJ1FaBELTLkdsQl1CeSvOVajUtPHxHOMv76GO4hfm0wT3yK5dkt
cxZa+d4CRZnFR6fZffbm3qmOOCCgUp5iyKl5FkxDRwUD7zGeTgiHWEkFpCHAVDkN
T8GMAwLHa9Cgq4lEjl9jnrpJqpdkIlQm2lQJc/8C+f0vvPDTWgnqqG8LE3cJk6vG
tF18r05Nxgrl7x2L9m5qUicypSf2kkTUb8hSMLdRknqlkU5B2uaA1zAGtEw5VRAs
Ic7Io3tGcFw6HXYLA7LrKCduCYLJfP6VLfVWwf2Z1mAlts0Jgf4gKhn4NbKkU9oO
qGvNci76lK/euw==
-----END CERTIFICATE-----