Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File:                     ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier:          WM/VhdUy+LuyBCIdvAguW529cHB4eVePxJDPGm6GpDE=
Subject key identifier:   02:7D:CC:FA:A4:A7:74:CB:0D:E6:6A:E7:5D:60:C5:15:E2:2F:17:19
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer:       /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial:       01962E9912E2724092B574059056AF8B812E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number:          0E17
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: oZnmpW5YABefq1ycN6OF/AA0v/6BJFNGEKmoxfW3n9E=)
                          2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:12:e2:72:40:92:b5:74:05:90:56:af:8b:81:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=027dccfaa4a774cb0de66ae75d60c515e22f1719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:1d:be:4e:30:8e:95:2e:34:00:1f:7c:49:
                    1c:1c:8e:a5:8a:53:29:98:4b:39:8d:68:3b:1b:0b:
                    2e:dc:83:f2:62:be:d2:e2:de:ba:fb:06:23:db:e4:
                    1f:70:a3:3a:d8:10:c1:02:eb:71:8c:0a:11:f4:fc:
                    4d:e2:42:04:41:e4:b2:0a:ad:ce:7b:a0:35:30:1e:
                    b7:29:24:36:94:a3:5a:78:ff:2f:4d:c4:a3:37:b2:
                    e3:88:8f:1f:e7:ab:a8:10:98:4c:b2:cf:3e:a9:47:
                    e3:33:51:83:c2:f0:ef:01:ed:d7:17:cb:10:4b:71:
                    46:9e:47:b8:00:55:4b:3a:56:d4:e9:31:2a:01:6f:
                    f0:7a:f3:c6:6b:48:82:e8:04:12:37:d7:ac:7e:ea:
                    a2:8c:31:f4:51:e6:1a:5e:2a:d6:06:60:b2:a1:bd:
                    e9:e5:a8:4e:d9:6e:e6:49:02:b3:dd:f5:8d:f1:91:
                    c5:75:89:49:02:44:26:0d:41:1d:9f:a9:d8:9c:bb:
                    b1:c0:f3:d0:d7:b9:1d:bd:1d:00:e2:5b:46:3f:7f:
                    24:aa:0e:87:92:8c:22:a6:50:c3:d7:e0:c2:37:47:
                    2a:36:51:31:d9:6e:1c:2a:d7:2e:72:97:6e:02:76:
                    02:52:63:8d:e4:b6:b5:e3:c7:a4:76:78:63:80:c9:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:CC:FA:A4:A7:74:CB:0D:E6:6A:E7:5D:60:C5:15:E2:2F:17:19
            X509v3 Authority Key Identifier:
                keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:c4:47:87:40:55:ea:8c:47:89:7e:63:ca:ff:10:b0:a5:
         c3:65:a0:ab:71:13:b3:9d:af:df:cf:b6:d6:7c:55:21:4f:eb:
         c6:ec:57:88:55:b5:42:14:f7:f9:80:6d:67:1c:48:e3:77:67:
         0e:2c:e8:69:49:ff:c4:fc:5b:3d:91:c1:35:fd:fa:50:53:30:
         cf:58:f5:a4:3c:4b:79:1d:93:e8:2a:38:2e:5a:71:b9:dd:eb:
         01:8f:75:37:9e:a2:f4:6f:f3:97:7f:74:f8:79:25:55:71:dd:
         29:19:f1:5c:54:a7:05:7c:d9:21:7c:43:d0:c5:70:5f:7e:08:
         59:ed:1d:ad:ef:f1:f2:e7:c6:62:0b:0d:6a:32:c1:a1:f7:1c:
         e6:e4:a6:ae:72:cc:14:9e:3f:41:64:4f:9a:08:ec:b0:e9:fd:
         a0:cf:3c:18:87:a2:27:81:3b:66:c4:c5:11:e9:3e:97:e4:ab:
         17:23:a0:34:ba:f6:b5:bf:da:e9:13:ba:5e:66:cc:4c:21:ba:
         6a:3c:df:d0:65:45:42:cb:d8:6d:97:47:c0:1e:dc:aa:17:aa:
         26:14:4e:b3:20:67:dd:4f:2b:61:94:ab:57:2d:28:6b:6a:b7:
         27:d0:3c:88:63:47:cd:ac:42:c4:a5:c0:72:21:22:55:91:66:
         aa:28:fb:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRLickCStXQFkFavi4EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
EygwMjdkY2NmYWE0YTc3NGNiMGRlNjZhZTc1ZDYwYzUxNWUyMmYxNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3kdvk4wjpUuNAAffEkcHI6lilMp
mEs5jWg7Gwsu3IPyYr7S4t66+wYj2+QfcKM62BDBAutxjAoR9PxN4kIEQeSyCq3O
e6A1MB63KSQ2lKNaeP8vTcSjN7LjiI8f56uoEJhMss8+qUfjM1GDwvDvAe3XF8sQ
S3FGnke4AFVLOlbU6TEqAW/wevPGa0iC6AQSN9esfuqijDH0UeYaXirWBmCyob3p
5ahO2W7mSQKz3fWN8ZHFdYlJAkQmDUEdn6nYnLuxwPPQ17kdvR0A4ltGP38kqg6H
kowiplDD1+DCN0cqNlEx2W4cKtcucpduAnYCUmON5La148ekdnhjgMkH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ9zPqkp3TLDeZq511gxRXiLxcZMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJ/ER4dA
VeqMR4l+Y8r/ELClw2Wgq3ETs52v38+21nxVIU/rxuxXiFW1QhT3+YBtZxxI43dn
DizoaUn/xPxbPZHBNf36UFMwz1j1pDxLeR2T6Co4Llpxud3rAY91N56i9G/zl390
+HklVXHdKRnxXFSnBXzZIXxD0MVwX34IWe0dre/x8ufGYgsNajLBofcc5uSmrnLM
FJ4/QWRPmgjssOn9oM88GIeiJ4E7ZsTFEek+l+SrFyOgNLr2tb/a6RO6XmbMTCG6
ajzf0GVFQsvYbZdHwB7cqheqJhROsyBn3U8rYZSrVy0oa2q3J9A8iGNHzaxCxKXA
ciEiVZFmqij79w==
-----END CERTIFICATE-----