Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          c+EwDEmG4rhdxZDO1BkgHeVHHpfW9MGh1FngnRnUUiU=
Subject key identifier:   99:CD:B4:12:6A:CB:C2:E3:EA:EF:D3:3B:43:55:12:3B:CD:6A:56:24
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       01962ECF94702D39215D26243A0D8FB06111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          0265
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: cAZDqRdkO+2ybY/baNTRyNwaM7IbGMiUVQvnFfykQuQ=)
                          2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:70:2d:39:21:5d:26:24:3a:0d:8f:b0:61:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=99cdb4126acbc2e3eaefd33b4355123bcd6a5624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:62:7d:10:d4:ab:19:e3:05:db:8d:dd:a0:
                    47:ea:e0:66:12:97:a1:a5:d7:14:90:1d:13:81:fa:
                    cf:1c:98:ac:d9:4f:ea:40:83:6d:30:97:2e:d0:01:
                    c1:f3:46:34:7a:4e:95:f6:cd:47:ca:6e:c9:1d:3a:
                    a7:45:18:fa:05:1b:da:e8:54:0b:e0:4f:b6:9c:b4:
                    ab:80:ef:e2:3a:90:b4:68:1b:e2:6d:71:5b:9b:70:
                    95:5b:12:a0:9c:4f:2e:b7:bc:34:48:5c:a0:37:d2:
                    f5:32:23:02:7b:6d:27:7b:f4:6f:cc:1b:a4:f9:8a:
                    ba:64:b1:61:c1:31:4e:73:80:a2:86:70:3f:ac:70:
                    48:6f:24:8e:11:e7:9a:85:ac:da:76:04:44:21:f0:
                    29:af:a0:a2:a5:02:2c:06:df:51:ac:63:fe:27:5c:
                    c6:f8:c2:54:d6:a4:08:0b:4b:94:5d:3f:88:8e:62:
                    db:48:77:00:44:d0:78:44:5c:0e:c7:67:94:0b:e4:
                    96:04:27:a8:5a:6c:45:b2:b3:ed:03:40:73:a8:8a:
                    e4:41:cd:6d:0c:b3:22:55:71:ed:f6:83:c8:de:97:
                    8a:e2:4d:6f:e3:43:f6:23:81:27:fa:fd:e7:01:cb:
                    c2:66:30:7c:3a:3c:df:77:73:07:32:28:a7:66:6d:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:B4:12:6A:CB:C2:E3:EA:EF:D3:3B:43:55:12:3B:CD:6A:56:24
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:c6:44:58:45:85:59:c8:42:ab:ce:fa:e0:dc:66:2d:7c:
         34:c5:52:8a:f8:ea:fb:1c:af:55:b9:cd:89:5d:df:29:4a:fc:
         08:05:a5:0e:e8:1d:ca:70:a8:c7:d4:5b:08:03:41:5e:a8:8a:
         13:f9:78:32:be:65:e9:90:8d:33:d7:3d:cf:4c:ad:c1:d3:85:
         83:09:93:29:ec:c9:16:48:a3:61:d4:af:05:8f:dc:4a:7d:e7:
         f3:d7:19:e3:e1:3a:11:7c:73:a4:83:3b:eb:3e:7e:1d:c8:38:
         85:43:77:1e:bd:ca:7d:86:8b:1b:4d:a0:62:fb:22:f0:ca:9c:
         fc:a2:36:42:cc:fd:7c:9a:4f:f4:fa:6f:0f:bc:4e:42:47:20:
         a8:78:95:b2:b0:cf:fe:d0:55:d7:fa:76:65:c3:3e:90:a8:81:
         35:19:be:fc:2f:2c:4f:48:35:50:9b:66:d1:10:7e:35:4a:f0:
         d3:fc:33:b9:0b:f5:52:77:5f:3a:cc:07:e4:eb:1d:c9:9a:0a:
         52:d2:e3:e5:e4:58:70:24:6d:73:4c:03:ed:9c:54:09:dc:35:
         d1:dc:34:1a:7e:3d:2f:39:59:9e:d7:50:d0:6c:c7:c5:79:ca:
         81:c8:b1:79:44:7d:c5:4b:56:ef:ea:b3:52:b4:06:67:38:13:
         a8:0c:1b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5RwLTkhXSYkOg2PsGERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2
MTkyYTMwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
Eyg5OWNkYjQxMjZhY2JjMmUzZWFlZmQzM2I0MzU1MTIzYmNkNmE1NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kRifRDUqxnjBduN3aBH6uBmEpeh
pdcUkB0TgfrPHJis2U/qQINtMJcu0AHB80Y0ek6V9s1Hym7JHTqnRRj6BRva6FQL
4E+2nLSrgO/iOpC0aBvibXFbm3CVWxKgnE8ut7w0SFygN9L1MiMCe20ne/RvzBuk
+Yq6ZLFhwTFOc4CihnA/rHBIbySOEeeahazadgREIfApr6CipQIsBt9RrGP+J1zG
+MJU1qQIC0uUXT+IjmLbSHcARNB4RFwOx2eUC+SWBCeoWmxFsrPtA0BzqIrkQc1t
DLMiVXHt9oPI3peK4k1v40P2I4En+v3nAcvCZjB8Ojzfd3MHMiinZm1sBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnNtBJqy8Lj6u/TO0NVEjvNalYkMB8GA1UdIwQY
MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt
NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk
LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb7GRFhF
hVnIQqvO+uDcZi18NMVSivjq+xyvVbnNiV3fKUr8CAWlDugdynCox9RbCANBXqiK
E/l4Mr5l6ZCNM9c9z0ytwdOFgwmTKezJFkijYdSvBY/cSn3n89cZ4+E6EXxzpIM7
6z5+Hcg4hUN3Hr3KfYaLG02gYvsi8Mqc/KI2Qsz9fJpP9PpvD7xOQkcgqHiVsrDP
/tBV1/p2ZcM+kKiBNRm+/C8sT0g1UJtm0RB+NUrw0/wzuQv1UndfOswH5OsdyZoK
UtLj5eRYcCRtc0wD7ZxUCdw10dw0Gn49LzlZntdQ0GzHxXnKgcixeUR9xUtW7+qz
UrQGZzgTqAwbRw==
-----END CERTIFICATE-----