Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File:                     IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier:          f/K0aD8rHHlOJAVz4NsOTOyvTS23z5W7RbHTB0pwSIc=
Subject key identifier:   E6:B4:70:4D:A7:66:2D:45:99:C6:4F:B6:3C:81:AA:32:ED:E1:16:29
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer:       /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial:       01962F066D4774C58E07314D84490710FEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number:          12F5
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: xBwPAZv7V/WyV4sWVmYtuOfN9gzqDPnHb+21LUdT1DU=)
                          2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:47:74:c5:8e:07:31:4d:84:49:07:10:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=e6b4704da7662d4599c64fb63c81aa32ede11629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:f2:86:88:07:76:9b:0a:7a:7e:46:5d:09:
                    21:db:f3:cf:51:15:a2:f3:85:15:5e:31:77:e8:ce:
                    28:4d:36:77:7b:a4:22:15:09:7a:bc:75:36:c0:f5:
                    f5:fc:37:48:f6:99:f2:c6:53:3b:8f:e2:d6:25:9f:
                    97:3b:20:8b:dc:04:7f:84:8d:24:08:b1:3e:1b:0e:
                    dd:d2:19:a0:bf:aa:3c:5b:1b:b2:f7:dc:97:76:94:
                    fa:d7:28:b7:d7:9d:f8:88:b9:04:ac:62:08:86:da:
                    8e:e2:bd:dd:b5:b3:82:03:dd:7c:e9:7f:3a:50:6b:
                    d2:e6:6d:6b:75:18:e3:04:35:ad:3d:40:5b:87:8a:
                    0b:2b:0b:2d:f5:9c:47:5c:69:da:fb:b5:ec:3d:7d:
                    bc:f4:55:b2:dd:3d:b0:c6:3d:d6:f8:67:ac:3e:cf:
                    a1:9a:af:a6:69:53:10:78:57:ae:63:ef:b8:c9:8d:
                    7d:60:09:d0:4c:0d:60:a2:87:ba:79:50:f6:99:93:
                    50:2a:e0:c9:0a:15:bd:13:4a:d1:06:96:33:bc:6c:
                    36:dd:5a:bd:96:9c:20:6e:85:78:bf:72:a6:24:84:
                    a2:43:f3:37:52:a2:ff:35:5a:9b:43:37:2e:2d:00:
                    da:9a:e1:20:93:ff:28:66:8e:59:0f:04:aa:9f:fc:
                    cf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B4:70:4D:A7:66:2D:45:99:C6:4F:B6:3C:81:AA:32:ED:E1:16:29
            X509v3 Authority Key Identifier:
                keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:61:16:27:18:f2:6c:7b:3a:e2:44:13:f9:36:65:b5:00:
         74:bc:b5:a9:31:0f:7e:bc:5e:c7:09:4c:85:c4:f2:37:29:62:
         42:b5:40:91:1b:4c:4a:18:67:03:be:14:7f:ec:ed:37:04:c6:
         ef:72:e8:0f:db:70:18:cb:ac:49:e2:33:8b:5b:0c:36:ca:ba:
         cc:fa:d1:6c:6c:3d:bc:e2:33:44:63:31:8f:c1:c9:41:09:12:
         04:1f:ca:a5:31:51:44:17:4c:21:7e:cb:a1:75:11:02:d3:78:
         b0:69:8f:c3:91:0a:10:91:f8:ce:d7:f2:8d:ba:26:4f:1c:e3:
         cf:60:c0:66:33:e8:02:12:e0:7e:0d:f2:e1:6c:13:6a:5e:ac:
         10:13:6b:45:86:48:78:aa:29:fc:77:a4:06:95:95:41:a9:0d:
         72:4b:d9:c3:5f:c8:b8:4a:f5:17:32:0e:37:92:10:47:e3:32:
         b2:22:6b:d1:6e:f8:15:4b:0e:79:14:d7:22:71:13:59:ee:7e:
         d0:89:9d:a4:ef:ed:96:00:f0:1c:59:ca:fe:44:33:5d:b7:f1:
         e3:12:0e:9f:48:2b:e5:0d:72:5f:8c:28:a4:9e:04:57:37:14:
         d5:8e:7c:95:02:f7:5f:75:20:cc:75:f2:1c:a9:ee:72:40:e9:
         2b:9d:3c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBm1HdMWOBzFNhEkHEP7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZWVlMDVkYTE4M2RlZTJiODExODE0MTk1NjQ2MmM5MjQw
ZDc4NzYwHhcNMjUwNDEzMTIwMTEyWhcNMjUwNDE0MTIwMTEyWjAzMTEwLwYDVQQD
EyhlNmI0NzA0ZGE3NjYyZDQ1OTljNjRmYjYzYzgxYWEzMmVkZTExNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk7yhogHdpsKen5GXQkh2/PPURWi
84UVXjF36M4oTTZ3e6QiFQl6vHU2wPX1/DdI9pnyxlM7j+LWJZ+XOyCL3AR/hI0k
CLE+Gw7d0hmgv6o8Wxuy99yXdpT61yi31534iLkErGIIhtqO4r3dtbOCA9186X86
UGvS5m1rdRjjBDWtPUBbh4oLKwst9ZxHXGna+7XsPX289FWy3T2wxj3W+GesPs+h
mq+maVMQeFeuY++4yY19YAnQTA1gooe6eVD2mZNQKuDJChW9E0rRBpYzvGw23Vq9
lpwgboV4v3KmJISiQ/M3UqL/NVqbQzcuLQDamuEgk/8oZo5ZDwSqn/zPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa0cE2nZi1FmcZPtjyBqjLt4RYpMB8GA1UdIwQY
MBaAFCDu4F2hg97iuBGBQZVkYskkDXh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQt
Mzk4NTI5OWZhZDZkLzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQtMzk4NTI5OWZhZDZk
LzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2dhFicY
8mx7OuJEE/k2ZbUAdLy1qTEPfrxexwlMhcTyNyliQrVAkRtMShhnA74Uf+ztNwTG
73LoD9twGMusSeIzi1sMNsq6zPrRbGw9vOIzRGMxj8HJQQkSBB/KpTFRRBdMIX7L
oXURAtN4sGmPw5EKEJH4ztfyjbomTxzjz2DAZjPoAhLgfg3y4WwTal6sEBNrRYZI
eKop/HekBpWVQakNckvZw1/IuEr1FzION5IQR+MysiJr0W74FUsOeRTXInETWe5+
0ImdpO/tlgDwHFnK/kQzXbfx4xIOn0gr5Q1yX4wopJ4EVzcU1Y58lQL3X3UgzHXy
HKnuckDpK508wg==
-----END CERTIFICATE-----