Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File:                     dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier:          Ap6+t6fVDQo8T2kEaxGmMuaRI2/uYvTPfV44v9sUs6E=
Subject key identifier:   2A:9C:AE:AA:3F:D9:8C:05:C5:60:5E:CF:38:B3:6A:B2:74:F8:6C:BE
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer:       /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial:       01962FAB2882945E57BD9C010AA6822D5158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: Mkveat0ilBCMiyxI7t6L3+CbQ9XEpleeE7h2kX8F7Aw=)
                          2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:82:94:5e:57:bd:9c:01:0a:a6:82:2d:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=2a9caeaa3fd98c05c5605ecf38b36ab274f86cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:16:03:4b:58:5c:e9:36:8f:4c:bc:c6:42:
                    54:ed:70:4d:52:96:c8:9f:8e:b8:b7:81:00:de:26:
                    fb:e0:68:f6:24:69:30:c1:8a:b8:84:e5:fb:8f:dc:
                    85:9d:40:e6:c8:ce:03:5a:ab:7f:a7:8c:01:69:01:
                    de:1a:6f:15:64:fb:c7:ff:92:a8:6b:bf:c6:77:a9:
                    94:33:c9:40:a4:b4:3d:07:ee:f3:c9:c3:76:ff:13:
                    d7:8a:eb:9c:9a:95:b8:e6:3d:52:a4:3f:9f:d9:c3:
                    b2:9e:bc:b1:14:d0:40:e2:f7:ce:17:f5:27:1e:0a:
                    8b:a2:a2:92:63:a9:1c:56:ad:31:bd:af:9d:42:f2:
                    a3:42:60:f1:fe:ff:2b:7e:6b:ff:ad:44:61:d2:ce:
                    75:05:c8:55:57:35:d9:10:0d:d4:9b:05:17:96:1a:
                    5a:4b:e2:50:17:2d:ec:fc:67:39:97:a5:e7:a5:a7:
                    29:ee:64:9e:ac:d8:a9:61:68:69:4e:59:8d:99:d3:
                    4e:0a:b8:76:77:50:51:e3:e1:37:63:8e:da:3f:4f:
                    f8:d5:db:57:a8:fb:d6:59:ce:9a:85:c0:93:4d:bf:
                    b6:57:ab:f1:c9:3d:54:28:00:d2:23:5e:e8:35:b2:
                    a5:e7:d2:84:e7:f5:e9:93:fa:4b:93:86:e8:89:59:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:AE:AA:3F:D9:8C:05:C5:60:5E:CF:38:B3:6A:B2:74:F8:6C:BE
            X509v3 Authority Key Identifier:
                keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:09:af:9d:76:7a:02:81:40:0a:28:39:db:96:99:6a:d8:6c:
         10:e7:c3:a2:b2:a5:37:cf:56:8e:38:4f:f2:cf:2b:18:35:10:
         ab:57:cc:57:90:27:a6:10:10:f7:5d:f3:e7:30:8f:85:82:2c:
         a6:6e:74:ae:ae:e8:b4:17:d5:5d:bd:06:0d:79:ea:e9:0f:19:
         59:85:55:39:70:8d:79:0a:7a:5b:ef:9c:52:c3:cb:f7:d8:6e:
         61:2a:5b:1c:7e:65:6e:59:15:79:d3:de:e1:66:d7:5d:26:6c:
         d8:91:66:33:17:3a:40:63:e7:49:ae:9f:d8:38:5f:c8:8e:b8:
         fa:0c:55:75:07:6a:cf:f2:e7:5b:0b:4c:ad:91:93:0d:de:6a:
         52:fd:67:98:b8:8f:54:2a:2c:f7:53:7e:5c:1c:16:51:f3:57:
         a7:dd:f5:46:84:72:b1:f0:b9:73:88:4a:b1:71:54:a2:67:3a:
         0d:80:ba:d9:aa:b7:49:67:56:72:89:b7:5d:90:cc:37:2c:b2:
         24:d6:ed:07:37:4e:52:2d:a2:7b:8b:b0:3b:6c:b1:e4:28:36:
         a9:53:ed:d2:b6:37:0a:ea:55:57:bb:fc:63:79:8f:84:26:c4:
         5b:ef:46:c6:cc:35:e7:f9:40:09:fc:a9:68:d1:2b:e1:06:27:
         90:0f:1a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyiClF5XvZwBCqaCLVFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTQ4MzY1NWIzNWEyYjg0NzE4NWY2ODljOGZkMTYwMWRj
YzcxODcwHhcNMjUwNDEzMTUwMTA4WhcNMjUwNDE0MTUwMTA4WjAzMTEwLwYDVQQD
EygyYTljYWVhYTNmZDk4YzA1YzU2MDVlY2YzOGIzNmFiMjc0Zjg2Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT0WA0tYXOk2j0y8xkJU7XBNUpbI
n464t4EA3ib74Gj2JGkwwYq4hOX7j9yFnUDmyM4DWqt/p4wBaQHeGm8VZPvH/5Ko
a7/Gd6mUM8lApLQ9B+7zycN2/xPXiuucmpW45j1SpD+f2cOynryxFNBA4vfOF/Un
HgqLoqKSY6kcVq0xva+dQvKjQmDx/v8rfmv/rURh0s51BchVVzXZEA3UmwUXlhpa
S+JQFy3s/Gc5l6Xnpacp7mSerNipYWhpTlmNmdNOCrh2d1BR4+E3Y47aP0/41dtX
qPvWWc6ahcCTTb+2V6vxyT1UKADSI17oNbKl59KE5/Xpk/pLk4boiVlrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqcrqo/2YwFxWBezzizarJ0+Gy+MB8GA1UdIwQY
MBaAFHUUg2VbNaK4RxhfaJyP0WAdzHGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQt
YTdmYjM2Y2MyZmUzLzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQtYTdmYjM2Y2MyZmUz
LzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAmvnXZ6
AoFACig525aZathsEOfDorKlN89WjjhP8s8rGDUQq1fMV5AnphAQ913z5zCPhYIs
pm50rq7otBfVXb0GDXnq6Q8ZWYVVOXCNeQp6W++cUsPL99huYSpbHH5lblkVedPe
4WbXXSZs2JFmMxc6QGPnSa6f2DhfyI64+gxVdQdqz/LnWwtMrZGTDd5qUv1nmLiP
VCos91N+XBwWUfNXp931RoRysfC5c4hKsXFUomc6DYC62aq3SWdWcom3XZDMNyyy
JNbtBzdOUi2ie4uwO2yx5Cg2qVPt0rY3CupVV7v8Y3mPhCbEW+9Gxsw15/lACfyp
aNEr4QYnkA8asA==
-----END CERTIFICATE-----