Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File:                     D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier:          BvKA6DxrBE3AHbnC/2LC2yS2c5ge+4a/VutU/tgKs+o=
Subject key identifier:   B2:CA:57:69:B2:59:F1:07:0C:C2:24:1A:FB:81:71:F8:23:24:4D:F5
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer:       /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial:       01962E2B0B3BA21329B732BD062730346003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number:          10E6
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: WKwBtcBR9/T9g6Qxl9e2OMJfcj5abGeh9pWjbJHyaKc=)
                          2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0b:3b:a2:13:29:b7:32:bd:06:27:30:34:60:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=b2ca5769b259f1070cc2241afb8171f823244df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:de:49:40:f1:da:2c:fc:c3:28:85:b6:f4:
                    fa:3a:99:d1:30:10:1e:3c:da:d8:a1:e8:80:aa:1d:
                    42:32:71:e6:5c:1c:be:1d:79:a7:f3:75:66:30:23:
                    6f:68:f7:a8:5b:df:b1:bf:02:9e:5c:d9:8d:f8:dc:
                    c6:56:fa:d7:fc:cb:d3:37:3f:df:3a:7c:39:b4:d5:
                    04:3e:a4:20:92:9a:78:36:54:6c:7f:0c:e6:a8:5d:
                    a0:06:84:bd:40:51:56:29:38:43:eb:a6:36:04:26:
                    9c:a1:a5:10:a7:50:08:1a:1e:b4:77:2e:69:55:52:
                    55:05:63:bb:b3:10:f6:cd:97:fa:14:f3:32:75:5e:
                    7a:1b:da:d3:4c:84:28:4d:46:2b:2d:3a:24:eb:40:
                    8f:90:1a:f0:a5:d5:d9:67:01:97:25:85:37:0f:b0:
                    b0:5f:b0:66:e7:37:c0:bb:05:99:7a:28:16:d8:ac:
                    6e:a9:c5:bf:52:f9:4a:a6:06:ae:4e:e7:f9:f9:30:
                    ef:ca:33:20:ff:fe:6c:5a:67:ec:65:c8:37:ca:ed:
                    ba:3d:07:cb:3e:2b:66:c3:da:f0:98:15:c1:ae:7e:
                    1e:11:fb:c5:6a:b7:de:f6:cd:83:c6:cb:5b:f2:05:
                    f6:d5:04:e0:d8:72:f5:63:46:60:3d:75:fc:75:7a:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CA:57:69:B2:59:F1:07:0C:C2:24:1A:FB:81:71:F8:23:24:4D:F5
            X509v3 Authority Key Identifier:
                keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:39:93:66:7c:b1:a9:f7:1f:ef:49:21:5b:fb:23:66:45:4b:
         43:0e:cb:83:d3:0b:03:da:fa:5e:c1:7f:79:0a:7b:31:57:07:
         ca:46:8f:b6:2c:09:23:ed:5a:af:48:37:3a:3f:41:0c:a4:84:
         0a:b7:73:6e:03:10:4e:16:2c:d7:fe:30:0b:80:1d:f1:7d:19:
         a9:41:e5:e6:cc:b4:9b:c9:be:bb:be:82:3e:26:d2:a9:14:e3:
         ee:5d:84:10:74:21:42:0c:98:25:aa:e4:1a:f2:0e:1d:96:5d:
         e1:fe:01:1a:f7:f5:d8:57:b8:d6:f0:cd:a0:3f:6f:7f:a6:e9:
         cd:86:47:19:57:a1:b5:45:86:6f:14:4d:20:84:75:50:5b:74:
         d9:54:0a:ef:68:b6:b3:7e:53:ff:e2:1a:d9:66:17:ff:60:17:
         b0:1b:b6:1c:c4:83:fd:e0:a3:53:50:ef:ff:7f:5e:97:c9:51:
         8a:37:67:f7:73:af:40:98:6e:49:9a:c8:3f:05:de:9a:86:8a:
         98:0f:b0:50:2d:c5:29:57:9e:9e:e0:db:5f:bf:74:b5:c2:ee:
         c5:02:78:b2:69:f0:0e:9e:83:97:db:e4:68:5c:d1:09:eb:c6:
         fb:68:ba:9c:7f:b2:d6:ab:14:05:c2:2c:0f:59:8f:e4:cc:2f:
         ad:53:99:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKws7ohMptzK9BicwNGADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw
ZWVkMDMwHhcNMjUwNDEzMDgwMTM0WhcNMjUwNDE0MDgwMTM0WjAzMTEwLwYDVQQD
EyhiMmNhNTc2OWIyNTlmMTA3MGNjMjI0MWFmYjgxNzFmODIzMjQ0ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRveSUDx2iz8wyiFtvT6OpnRMBAe
PNrYoeiAqh1CMnHmXBy+HXmn83VmMCNvaPeoW9+xvwKeXNmN+NzGVvrX/MvTNz/f
Onw5tNUEPqQgkpp4NlRsfwzmqF2gBoS9QFFWKThD66Y2BCacoaUQp1AIGh60dy5p
VVJVBWO7sxD2zZf6FPMydV56G9rTTIQoTUYrLTok60CPkBrwpdXZZwGXJYU3D7Cw
X7Bm5zfAuwWZeigW2KxuqcW/UvlKpgauTuf5+TDvyjMg//5sWmfsZcg3yu26PQfL
Pitmw9rwmBXBrn4eEfvFarfe9s2Dxstb8gX21QTg2HL1Y0ZgPXX8dXr3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLKV2myWfEHDMIkGvuBcfgjJE31MB8GA1UdIwQY
MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt
ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx
LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzmTZnyx
qfcf70khW/sjZkVLQw7Lg9MLA9r6XsF/eQp7MVcHykaPtiwJI+1ar0g3Oj9BDKSE
CrdzbgMQThYs1/4wC4Ad8X0ZqUHl5sy0m8m+u76CPibSqRTj7l2EEHQhQgyYJark
GvIOHZZd4f4BGvf12Fe41vDNoD9vf6bpzYZHGVehtUWGbxRNIIR1UFt02VQK72i2
s35T/+Ia2WYX/2AXsBu2HMSD/eCjU1Dv/39el8lRijdn93OvQJhuSZrIPwXemoaK
mA+wUC3FKVeenuDbX790tcLuxQJ4smnwDp6Dl9vkaFzRCevG+2i6nH+y1qsUBcIs
D1mP5MwvrVOZgg==
-----END CERTIFICATE-----