Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          VdwdeL/y0AczOaHj8OQ2OeNTP4w0ROXYoMliALGXz/U=
Subject key identifier:   5B:90:79:DA:55:5B:6B:EA:7E:B2:3E:72:53:6A:35:59:8C:06:60:D9
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       01962E2AEF41A57DDA4F2E706170922FA7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
                          2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
                          3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
                          4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
                          5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: lSmQTIqDXxs4p75lsj6B1t5e3ZZpZOmBKTLsmkhqFtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:41:a5:7d:da:4f:2e:70:61:70:92:2f:a7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=5b9079da555b6bea7eb23e72536a35598c0660d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:a1:6d:38:3b:48:62:9e:56:8b:45:00:23:
                    ad:9e:a6:32:09:bb:7a:2c:8e:bd:d5:56:5f:5c:c0:
                    0e:09:4d:c2:eb:e0:64:d3:55:85:7b:1c:ee:30:68:
                    5a:d3:7e:71:1b:9a:1a:24:40:a1:b4:e1:bc:fd:87:
                    20:53:0e:5b:ba:65:7d:17:21:bb:30:68:79:dc:57:
                    de:bb:2f:76:35:fc:71:b0:47:85:10:3c:36:72:56:
                    8f:9e:77:3e:28:fb:0a:20:87:59:95:5e:a1:ac:22:
                    83:7a:58:ad:da:73:01:7c:6a:2a:e8:25:76:28:cc:
                    58:49:01:0c:11:de:d3:10:9d:05:13:01:5c:9a:70:
                    84:42:dd:7f:77:c0:38:a9:68:08:5f:6f:a5:2f:82:
                    45:35:71:d3:0d:a6:29:df:fc:20:8c:0c:e9:be:f2:
                    4d:a7:80:89:06:b9:df:ad:a3:f0:aa:a2:58:47:8c:
                    39:24:3a:b8:51:07:b9:1b:4c:2c:49:a1:a6:14:43:
                    f0:0d:92:9a:04:1c:79:6e:ac:14:9c:ec:03:e3:a7:
                    ca:fe:a3:ec:7b:b4:04:31:a2:e6:81:00:cc:f5:ba:
                    dc:88:24:45:5f:52:aa:d8:16:b2:55:d0:dd:ef:12:
                    39:c1:a7:6a:c0:d0:78:29:c9:84:f3:39:e5:eb:71:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:90:79:DA:55:5B:6B:EA:7E:B2:3E:72:53:6A:35:59:8C:06:60:D9
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:92:7c:58:f2:de:53:b8:84:1e:18:45:9f:2a:71:d3:6a:7c:
         b4:a4:f8:a8:00:62:45:01:d4:74:74:76:b4:dd:7a:f3:64:a8:
         86:58:98:a5:7a:14:57:87:88:dc:1d:32:d1:eb:ba:06:11:90:
         c3:fe:be:68:6b:b3:a5:51:5d:41:92:bf:2c:74:07:e9:b6:42:
         27:8d:22:81:bb:6e:c3:42:b4:93:78:77:51:69:40:c1:fe:26:
         53:a0:76:93:0c:ea:04:2c:55:02:01:96:65:ff:3e:b3:1b:1b:
         35:e1:c9:80:07:63:1d:b6:4c:14:18:3b:ad:0b:4e:9f:fa:5d:
         c7:a5:94:2b:72:75:f0:7b:44:27:16:1c:68:64:64:a2:d7:41:
         c9:c8:f1:85:f4:5e:c5:98:7d:81:fa:ec:3c:f9:bc:2c:1f:24:
         32:4f:d2:3e:f3:60:59:78:b4:af:71:0d:65:59:0d:26:6d:f5:
         f6:a1:4e:c6:d1:14:4d:66:8b:c8:aa:19:55:bf:9b:fc:3b:a0:
         44:60:d4:52:dd:ea:52:24:88:03:a7:ec:8b:4e:b2:39:86:52:
         8e:02:75:e4:50:66:31:29:23:20:52:e2:8e:02:93:1d:da:bb:
         fc:80:93:3d:31:8e:54:d1:4e:48:c8:33:ec:e2:22:ec:ba:b8:
         5d:45:5c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu9BpX3aTy5wYXCSL6fuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
Eyg1YjkwNzlkYTU1NWI2YmVhN2ViMjNlNzI1MzZhMzU1OThjMDY2MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoWhbTg7SGKeVotFACOtnqYyCbt6
LI691VZfXMAOCU3C6+Bk01WFexzuMGha035xG5oaJEChtOG8/YcgUw5bumV9FyG7
MGh53Ffeuy92NfxxsEeFEDw2claPnnc+KPsKIIdZlV6hrCKDelit2nMBfGoq6CV2
KMxYSQEMEd7TEJ0FEwFcmnCEQt1/d8A4qWgIX2+lL4JFNXHTDaYp3/wgjAzpvvJN
p4CJBrnfraPwqqJYR4w5JDq4UQe5G0wsSaGmFEPwDZKaBBx5bqwUnOwD46fK/qPs
e7QEMaLmgQDM9brciCRFX1Kq2BayVdDd7xI5wadqwNB4KcmE8znl63H7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuQedpVW2vqfrI+clNqNVmMBmDZMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5J8WPLe
U7iEHhhFnypx02p8tKT4qABiRQHUdHR2tN1682SohliYpXoUV4eI3B0y0eu6BhGQ
w/6+aGuzpVFdQZK/LHQH6bZCJ40igbtuw0K0k3h3UWlAwf4mU6B2kwzqBCxVAgGW
Zf8+sxsbNeHJgAdjHbZMFBg7rQtOn/pdx6WUK3J18HtEJxYcaGRkotdBycjxhfRe
xZh9gfrsPPm8LB8kMk/SPvNgWXi0r3ENZVkNJm319qFOxtEUTWaLyKoZVb+b/Dug
RGDUUt3qUiSIA6fsi06yOYZSjgJ15FBmMSkjIFLijgKTHdq7/ICTPTGOVNFOSMgz
7OIi7Lq4XUVcaw==
-----END CERTIFICATE-----