Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File:                     S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier:          7FMvUqt36LwYijNfgqkEzoJX8bESAm4nvXbMJ/wph98=
Subject key identifier:   26:DB:74:54:59:7D:44:27:65:A0:55:CB:85:8D:89:0F:19:12:49:3D
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer:       /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial:       01962DF41BAECA683BC34C5DF2FA01E4641C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=)
                          2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: oJv/CzTF8fDQ1HlbMhXPFrrqnXiOuE+RDo75eWrbevc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:ae:ca:68:3b:c3:4c:5d:f2:fa:01:e4:64:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=26db7454597d442765a055cb858d890f1912493d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:43:ad:20:7d:23:b8:45:0c:1a:26:44:7e:
                    c3:ff:bc:12:b9:18:71:25:10:a2:72:9c:ed:0c:a1:
                    c7:2e:8c:b1:a3:dc:cf:48:ab:b4:72:52:73:7d:e3:
                    d3:8c:47:96:08:c2:26:51:5b:c6:1a:19:df:64:78:
                    74:34:8a:aa:36:28:69:e9:40:97:5c:94:6b:de:12:
                    e4:ab:6b:c7:93:b2:ff:1a:7f:ca:42:3d:a4:f5:0d:
                    4a:20:e3:17:67:29:57:a1:0c:1d:2a:a7:af:90:b4:
                    6a:fa:98:92:c3:53:79:71:66:3b:4c:60:69:b8:91:
                    80:2d:12:eb:94:69:c7:e6:3a:44:58:0b:d0:24:3b:
                    a1:37:9b:fe:dd:8b:88:ac:78:c9:4b:e7:59:88:2f:
                    1f:60:31:6f:7e:47:94:8d:c1:2b:8a:14:84:04:d8:
                    96:69:10:43:c9:53:eb:df:3a:96:ff:86:f6:b0:99:
                    66:61:3e:7a:0d:48:03:16:9c:0d:4b:52:9c:46:e2:
                    6c:e8:3d:17:5e:83:34:fa:20:87:68:07:9b:ad:39:
                    80:cf:a1:c1:1c:c6:dd:ee:70:50:f8:e9:7a:0b:44:
                    d9:3b:59:40:3a:98:b9:6a:31:2b:04:00:ab:7a:ed:
                    06:6b:7d:ad:0c:3c:1c:00:69:da:23:c0:db:a1:2a:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DB:74:54:59:7D:44:27:65:A0:55:CB:85:8D:89:0F:19:12:49:3D
            X509v3 Authority Key Identifier:
                keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:60:2f:a6:d6:13:cf:b7:11:c3:8b:8e:a2:96:c3:b9:31:
         9a:af:e9:3c:a3:90:c8:5d:99:70:48:38:75:49:d2:82:d8:c1:
         b1:db:d4:c9:0d:59:22:5a:d6:0a:2f:ee:48:3b:0a:a6:a2:c0:
         4c:c9:f6:22:26:dd:78:f4:b8:54:c3:55:0d:67:47:a6:63:f9:
         98:d3:b4:43:41:99:58:e2:18:15:75:0f:33:21:a1:91:3f:bd:
         c5:35:75:e0:2d:94:7e:52:3e:52:e2:47:39:57:b5:6d:37:1e:
         d7:e9:be:b3:ad:78:d8:0b:24:81:88:65:c8:8f:0f:e5:32:72:
         b1:87:45:09:cd:7d:3c:3a:45:83:99:88:ee:8a:7c:5a:6f:82:
         98:11:15:3c:05:4b:bd:20:49:1f:3f:21:2a:70:7a:35:c3:bb:
         e5:25:5f:b2:10:91:6e:8d:cf:57:e4:c6:61:49:be:97:62:1c:
         04:73:03:d2:13:80:b2:09:0e:cd:64:7f:ff:f1:f6:fd:cd:45:
         95:78:12:d1:19:28:0f:a1:50:7d:be:78:a6:f4:17:bb:90:b2:
         cd:e4:05:8c:fc:71:0f:99:70:c9:05:2b:ba:04:81:f2:76:8b:
         ea:d4:27:1e:be:cc:40:a1:12:0c:3b:17:c8:dc:40:fc:dd:8c:
         6e:ec:28:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Buuymg7w0xd8voB5GQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjMyYTc1OGI1OTMwOWU4NjEwODlkNjU1M2FlZTA2N2E2
YjM1M2YwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
EygyNmRiNzQ1NDU5N2Q0NDI3NjVhMDU1Y2I4NThkODkwZjE5MTI0OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK5DrSB9I7hFDBomRH7D/7wSuRhx
JRCicpztDKHHLoyxo9zPSKu0clJzfePTjEeWCMImUVvGGhnfZHh0NIqqNihp6UCX
XJRr3hLkq2vHk7L/Gn/KQj2k9Q1KIOMXZylXoQwdKqevkLRq+piSw1N5cWY7TGBp
uJGALRLrlGnH5jpEWAvQJDuhN5v+3YuIrHjJS+dZiC8fYDFvfkeUjcErihSEBNiW
aRBDyVPr3zqW/4b2sJlmYT56DUgDFpwNS1KcRuJs6D0XXoM0+iCHaAebrTmAz6HB
HMbd7nBQ+Ol6C0TZO1lAOpi5ajErBACreu0Ga32tDDwcAGnaI8DboSqYywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbbdFRZfUQnZaBVy4WNiQ8ZEkk9MB8GA1UdIwQY
MBaAFEtjKnWLWTCehhCJ1lU67gZ6azU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMt
OTRjMGIwYjc2MDI5LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMtOTRjMGIwYjc2MDI5
LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHFgL6bW
E8+3EcOLjqKWw7kxmq/pPKOQyF2ZcEg4dUnSgtjBsdvUyQ1ZIlrWCi/uSDsKpqLA
TMn2IibdePS4VMNVDWdHpmP5mNO0Q0GZWOIYFXUPMyGhkT+9xTV14C2UflI+UuJH
OVe1bTce1+m+s6142AskgYhlyI8P5TJysYdFCc19PDpFg5mI7op8Wm+CmBEVPAVL
vSBJHz8hKnB6NcO75SVfshCRbo3PV+TGYUm+l2IcBHMD0hOAsgkOzWR///H2/c1F
lXgS0RkoD6FQfb54pvQXu5CyzeQFjPxxD5lwyQUrugSB8naL6tQnHr7MQKESDDsX
yNxA/N2Mbuwo9w==
-----END CERTIFICATE-----