Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File:                     tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier:          TFyHdWIkZrko9EHcKKIcwpynKaDWrOC8upylVR5X9ys=
Subject key identifier:   15:E0:DF:13:47:00:24:2A:29:6C:9C:8C:D7:72:89:4B:77:A2:67:1D
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer:       /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial:       01962ECFB917C2574BEE8F4A4ACE4BBE1195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
                          2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: uqfdFmPci5+NFt9MugH2bJDhGkdvyr2Jc+ogSQzeWnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b9:17:c2:57:4b:ee:8f:4a:4a:ce:4b:be:11:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=15e0df134700242a296c9c8cd772894b77a2671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:bb:88:4f:55:4b:d9:3d:be:80:3d:cb:5a:
                    a4:83:6c:c5:e0:da:c6:f2:fb:f1:d1:d7:ba:6a:ee:
                    ac:ca:1e:b0:5a:d9:5b:98:6b:c3:e6:90:1b:7c:73:
                    b7:0c:4f:81:9d:67:44:91:4d:e8:1b:d6:41:77:7f:
                    68:c1:54:8f:e1:7f:57:02:aa:95:c5:7c:d4:4c:66:
                    be:3e:58:70:17:42:8a:54:6e:28:d4:40:15:d2:a9:
                    d8:e6:fc:bd:be:93:f5:3d:92:32:21:e9:4e:8e:dc:
                    8a:a6:39:7e:c6:99:25:93:d2:03:e2:b4:a6:d6:87:
                    7e:f0:a5:5a:43:3d:4a:b5:d2:3b:4b:15:64:62:ec:
                    4b:d3:52:b6:b9:70:98:ab:bc:10:b5:fd:0b:73:14:
                    da:9f:13:6e:86:a6:f2:00:1a:c9:ee:d4:f5:cb:03:
                    8c:b1:8c:51:3d:59:54:00:da:47:f2:b6:28:8e:ab:
                    83:72:d0:00:cc:30:e7:26:20:10:ae:82:d6:50:8a:
                    d9:d5:01:04:2d:5e:26:f4:55:4e:42:37:14:b6:47:
                    22:8c:42:7f:39:d8:58:31:b3:a0:1d:ce:be:8d:76:
                    1b:75:7e:34:0a:17:8c:b0:d1:65:99:51:da:bb:64:
                    75:f1:c5:dd:ac:30:50:9f:de:9c:e6:cd:4b:3b:de:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:DF:13:47:00:24:2A:29:6C:9C:8C:D7:72:89:4B:77:A2:67:1D
            X509v3 Authority Key Identifier:
                keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b6:a5:70:d2:99:e8:b2:cd:e2:df:d0:ec:f9:d6:a1:f6:f7:
         78:76:cd:dc:38:86:c9:66:33:66:20:79:7a:ef:98:65:ec:5e:
         6a:5c:59:9b:55:ec:de:2b:9b:a2:03:fb:c1:a2:71:42:7d:a2:
         0f:9f:fa:66:b5:9c:68:9b:ed:a0:f2:2f:0d:8a:b9:0f:3e:97:
         d1:bb:19:6f:44:77:bf:22:0a:22:84:e6:0c:27:94:d7:51:13:
         8b:cd:c2:b5:12:19:42:79:fb:9d:e1:11:a1:7d:57:38:dc:c6:
         a8:05:44:c7:f1:4a:97:70:34:0d:bc:62:5b:b2:f1:3f:49:85:
         42:3b:0b:b9:62:c0:d9:46:14:da:6c:3d:79:64:e6:ee:17:86:
         58:f4:d8:31:df:e4:77:a4:90:a4:a9:7e:fc:e0:62:01:c1:0d:
         f6:51:3d:0b:39:c2:54:6b:05:e6:d6:6d:b1:45:4e:d0:06:55:
         59:36:95:73:56:a5:13:5b:51:14:c0:e1:75:31:c8:82:0c:72:
         41:26:37:34:c5:69:20:3a:7d:ba:0b:24:4b:30:c6:a2:9e:0f:
         2e:69:af:8f:23:d3:e9:bd:65:38:94:d9:4e:9a:09:7d:23:82:
         5e:fd:b9:62:39:b8:04:b5:df:2f:17:21:f6:4c:46:48:07:55:
         4c:e6:a8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7kXwldL7o9KSs5LvhGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzVmNTI2ZDdkMDkwOWU3ZjRhN2RmMmM1Y2FkNzJkMmFm
NmIyYzMwHhcNMjUwNDEzMTEwMTI3WhcNMjUwNDE0MTEwMTI3WjAzMTEwLwYDVQQD
EygxNWUwZGYxMzQ3MDAyNDJhMjk2YzljOGNkNzcyODk0Yjc3YTI2NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55e7iE9VS9k9voA9y1qkg2zF4NrG
8vvx0de6au6syh6wWtlbmGvD5pAbfHO3DE+BnWdEkU3oG9ZBd39owVSP4X9XAqqV
xXzUTGa+PlhwF0KKVG4o1EAV0qnY5vy9vpP1PZIyIelOjtyKpjl+xpklk9ID4rSm
1od+8KVaQz1KtdI7SxVkYuxL01K2uXCYq7wQtf0LcxTanxNuhqbyABrJ7tT1ywOM
sYxRPVlUANpH8rYojquDctAAzDDnJiAQroLWUIrZ1QEELV4m9FVOQjcUtkcijEJ/
OdhYMbOgHc6+jXYbdX40CheMsNFlmVHau2R18cXdrDBQn96c5s1LO95DIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXg3xNHACQqKWycjNdyiUt3omcdMB8GA1UdIwQY
MBaAFLQ19SbX0JCef0p98sXK1y0q9rLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEt
MzJmNTlmYTViMzExLzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEtMzJmNTlmYTViMzEx
LzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7alcNKZ
6LLN4t/Q7PnWofb3eHbN3DiGyWYzZiB5eu+YZexealxZm1Xs3iubogP7waJxQn2i
D5/6ZrWcaJvtoPIvDYq5Dz6X0bsZb0R3vyIKIoTmDCeU11ETi83CtRIZQnn7neER
oX1XONzGqAVEx/FKl3A0DbxiW7LxP0mFQjsLuWLA2UYU2mw9eWTm7heGWPTYMd/k
d6SQpKl+/OBiAcEN9lE9CznCVGsF5tZtsUVO0AZVWTaVc1alE1tRFMDhdTHIggxy
QSY3NMVpIDp9ugskSzDGop4PLmmvjyPT6b1lOJTZTpoJfSOCXv25Yjm4BLXfLxch
9kxGSAdVTOaoww==
-----END CERTIFICATE-----