Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
File:                     immKFPthpoevCmP3xlXAAfZwEoI.mft (raw, json)
Hash identifier:          65FR1IMwgL8UOyLZUKB0TSu1s7QGT1u+ckdwa8yIZPo=
Subject key identifier:   AE:13:C0:39:78:06:ED:98:86:2B:B0:97:D4:27:A5:E7:64:8E:69:CE
Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
Certificate issuer:       /CN=8a698a14fb61a687af0a63f7c655c001f6701282
Certificate serial:       01962FAB6B2F1D99A0681DD0784529656F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
Manifest number:          0284
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: P1m93kQnbl9hCPZ7gjvBSz2QduY.roa (hash: Vw3jwkUFPb+4FTO/pTKFTwQSjK1reP+BMicWKiuZXfs=)
                          2: immKFPthpoevCmP3xlXAAfZwEoI.crl (hash: BSAx4bu7jCai/77tdIobD+0pu5/cT0zf3Gng96JPf1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6b:2f:1d:99:a0:68:1d:d0:78:45:29:65:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=ae13c0397806ed98862bb097d427a5e7648e69ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:7b:07:11:72:9b:95:89:31:42:4b:b6:26:
                    a2:f4:f7:03:87:42:dc:22:a4:97:67:a7:7c:66:bc:
                    09:27:4f:54:3e:05:f6:1e:b4:ef:18:15:15:01:bd:
                    fa:77:db:fc:5e:37:c6:d1:b6:cb:dc:6a:37:e9:94:
                    3a:5f:45:ce:bd:d3:5c:db:d9:08:06:88:68:70:a0:
                    45:5d:21:1f:2a:6b:ef:46:7d:bd:8a:ad:7d:bd:15:
                    94:52:f3:97:40:b5:18:8c:c8:4d:a4:d1:57:ab:fa:
                    be:30:26:69:4e:fe:64:99:4a:77:6c:00:3e:ef:44:
                    a5:ed:61:48:24:58:a7:6e:28:d2:96:de:fa:e0:39:
                    4f:4c:a0:90:c1:67:0b:7d:f5:fb:2d:0c:96:52:47:
                    1d:9b:9d:d7:99:12:b5:f3:ed:f7:c1:be:bc:68:90:
                    79:c4:23:7e:05:40:b5:66:24:e5:0a:d9:54:f5:39:
                    ed:1c:f9:01:bc:a7:da:f1:43:fa:2f:29:bd:6b:40:
                    a8:34:0a:0b:82:dc:16:ec:2f:51:97:35:f0:a2:97:
                    c3:1a:ef:e4:20:29:bf:b2:d5:1e:32:ca:3d:47:fb:
                    fa:ed:66:5f:6b:1d:5a:bc:1b:38:fe:6a:32:fa:8f:
                    95:96:71:fb:f9:ff:af:c3:ef:c0:be:b1:c5:e1:52:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:13:C0:39:78:06:ED:98:86:2B:B0:97:D4:27:A5:E7:64:8E:69:CE
            X509v3 Authority Key Identifier:
                keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:a1:f8:a9:17:79:40:87:13:f2:df:01:f6:b6:37:aa:4f:
         eb:b2:a3:7b:72:41:6c:71:a8:02:b1:18:1f:bd:ba:cf:22:91:
         3e:05:9e:55:81:06:3f:f6:44:ec:32:2f:44:57:4b:f4:c0:50:
         18:5f:5a:a5:52:f9:7a:9b:e9:d0:b1:9d:9d:d4:24:97:bb:bb:
         8a:6d:6d:17:a6:f0:53:1f:c9:a6:43:95:5a:4f:f6:95:19:42:
         6a:eb:ad:96:65:dc:4a:2a:5a:55:10:37:46:b0:2c:6a:c1:ce:
         b4:6d:c8:33:2d:b3:56:95:cc:31:9c:80:61:d9:12:d2:7a:bb:
         3f:94:0d:4d:ca:49:f8:3b:56:c3:88:e2:06:36:ea:85:77:36:
         bf:f3:aa:f1:60:84:39:d0:2a:2c:90:95:c7:b8:29:e8:d9:17:
         54:d0:a3:e7:d6:1b:d3:79:ad:2d:10:74:e5:ca:c6:b8:56:20:
         7c:b5:59:10:03:7c:c3:c4:b0:99:55:7d:e7:09:ca:a5:f5:7e:
         01:2d:fb:58:b0:c2:94:22:d2:65:7a:d4:1e:f5:48:75:1e:f3:
         f5:b3:2a:c8:62:43:5c:f2:a6:6c:12:66:82:a2:a7:4d:38:01:
         c4:cd:63:40:12:f1:0b:cb:8e:66:5a:1b:b5:ec:98:d1:56:d9:
         fc:20:3f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2svHZmgaB3QeEUpZW8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjk4YTE0ZmI2MWE2ODdhZjBhNjNmN2M2NTVjMDAxZjY3
MDEyODIwHhcNMjUwNDEzMTUwMTI1WhcNMjUwNDE0MTUwMTI1WjAzMTEwLwYDVQQD
EyhhZTEzYzAzOTc4MDZlZDk4ODYyYmIwOTdkNDI3YTVlNzY0OGU2OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhd7BxFym5WJMUJLtiai9PcDh0Lc
IqSXZ6d8ZrwJJ09UPgX2HrTvGBUVAb36d9v8XjfG0bbL3Go36ZQ6X0XOvdNc29kI
BohocKBFXSEfKmvvRn29iq19vRWUUvOXQLUYjMhNpNFXq/q+MCZpTv5kmUp3bAA+
70Sl7WFIJFinbijSlt764DlPTKCQwWcLffX7LQyWUkcdm53XmRK18+33wb68aJB5
xCN+BUC1ZiTlCtlU9TntHPkBvKfa8UP6Lym9a0CoNAoLgtwW7C9RlzXwopfDGu/k
ICm/stUeMso9R/v67WZfax1avBs4/moy+o+VlnH7+f+vw+/AvrHF4VIMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4TwDl4Bu2Yhiuwl9QnpedkjmnOMB8GA1UdIwQY
MBaAFIppihT7YaaHrwpj98ZVwAH2cBKCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zM2QyMjYtN2M0My00YzgzLTk0YWQt
MjE4Mjg5ZDgxYzUzLzEvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zM2QyMjYtN2M0My00YzgzLTk0YWQtMjE4Mjg5ZDgxYzUz
LzEvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqWh+KkX
eUCHE/LfAfa2N6pP67Kje3JBbHGoArEYH726zyKRPgWeVYEGP/ZE7DIvRFdL9MBQ
GF9apVL5epvp0LGdndQkl7u7im1tF6bwUx/JpkOVWk/2lRlCauutlmXcSipaVRA3
RrAsasHOtG3IMy2zVpXMMZyAYdkS0nq7P5QNTcpJ+DtWw4jiBjbqhXc2v/Oq8WCE
OdAqLJCVx7gp6NkXVNCj59Yb03mtLRB05crGuFYgfLVZEAN8w8SwmVV95wnKpfV+
AS37WLDClCLSZXrUHvVIdR7z9bMqyGJDXPKmbBJmgqKnTTgBxM1jQBLxC8uOZlob
teyY0VbZ/CA/2g==
-----END CERTIFICATE-----