Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File:                     aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier:          3cuwzeZPhXlmIx6gFqsFe+AqNPdFTXAMYe/R9wxkqhg=
Subject key identifier:   F1:BD:6C:B0:8B:33:E9:F5:CE:7A:6E:93:4F:DF:E8:14:5C:12:B4:77
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer:       /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial:       01962E2AEF986221436C80BF30632EB6D282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: Ph3sC6aqh0tNsltd6hAZJC7Ft9U.roa (hash: qAtjPwqhqmQ2dOk999UdwCjCLH8v0wMpJPym5FDXFCs=)
                          2: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: 0eAYF87Mh6ELmcLaAZjbeaeeVWw37jHb6tbAHtHK97k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:98:62:21:43:6c:80:bf:30:63:2e:b6:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=f1bd6cb08b33e9f5ce7a6e934fdfe8145c12b477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:d6:2b:91:cb:15:65:40:a4:78:84:d2:aa:
                    3f:02:6b:39:b3:29:b6:d4:8d:73:9d:54:28:e5:34:
                    de:b7:59:3e:07:31:ae:01:0a:1b:b9:85:f4:5f:e3:
                    d4:52:77:db:6e:dc:25:18:c9:dd:e6:f0:13:e3:32:
                    10:36:10:c1:79:5b:dc:5b:88:1e:51:19:6f:d0:5e:
                    8e:aa:25:83:8c:d9:86:6d:a4:5e:47:5a:bd:3e:73:
                    5b:c4:c9:69:a6:63:d8:23:b0:5e:b0:ef:45:d5:24:
                    78:cd:cd:3b:17:75:09:2d:5a:19:bb:54:32:62:6c:
                    ff:c2:07:94:de:95:24:12:44:7b:51:5f:67:ed:db:
                    dc:f8:89:77:ce:56:3a:c5:33:c4:03:b3:da:29:be:
                    65:b6:b5:2c:59:f4:70:50:53:6c:10:37:cd:4d:99:
                    41:21:6e:f9:34:64:55:d7:7b:87:62:0a:b8:67:6c:
                    9f:d3:5c:b4:ee:8e:8a:82:e7:54:cc:47:86:6c:05:
                    c1:e4:81:a1:a8:24:24:ca:2b:fc:d5:43:6a:1c:12:
                    ec:2e:a2:d7:b2:61:05:25:d3:8c:a3:ef:a4:b6:87:
                    1f:34:0a:6b:c7:a4:42:3b:cd:87:f5:ed:55:1b:68:
                    dd:32:66:38:2b:98:5d:0e:77:63:c8:0a:64:69:99:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:6C:B0:8B:33:E9:F5:CE:7A:6E:93:4F:DF:E8:14:5C:12:B4:77
            X509v3 Authority Key Identifier:
                keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:e3:d4:13:2c:2f:4c:0f:41:b8:75:14:62:f1:db:fc:0e:
         43:8c:ff:1d:c2:a0:44:8d:20:ae:25:71:cc:4c:54:9b:2e:58:
         a8:40:66:2b:95:87:9b:58:f3:19:79:71:cb:07:57:9e:9f:0d:
         6e:e4:dc:ca:f5:a1:c8:19:89:3d:1b:e5:26:d5:79:cc:dd:0e:
         0e:bc:d9:2e:ac:ce:f7:a4:b2:b2:c1:a3:45:c8:00:57:74:cc:
         fa:e9:10:b4:8a:d4:45:03:34:4c:f8:bf:59:0f:94:ec:ce:b4:
         b6:c6:5e:ee:4a:7b:99:5a:23:d3:db:07:57:1b:6d:5d:51:95:
         58:25:fc:8b:e2:f1:9c:3c:b8:18:4b:be:8f:25:45:bb:5b:67:
         94:4a:c0:3c:76:c4:20:98:c8:32:ec:0a:36:04:bd:f5:5d:23:
         3a:e3:a7:c7:96:76:8f:07:33:bf:f7:fe:5e:2f:23:e7:f0:0f:
         44:62:cf:79:d3:0a:70:67:cd:8d:4e:d2:a0:4e:50:bc:67:29:
         69:8e:c6:03:f9:6a:9b:f8:96:a9:c1:3d:c9:a9:17:99:de:af:
         68:a7:7e:34:86:7c:cb:73:77:41:0e:35:1a:60:4c:e0:f1:a5:
         5b:99:1c:f7:68:77:0d:9e:cf:1e:af:a5:3b:fb:d5:0b:40:63:
         a5:82:0e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu+YYiFDbIC/MGMuttKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTg1MDA0MDJjODIxNWNmNTcxMDczYTQ5NWNkYzgwYzc0
MmYyY2MwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
EyhmMWJkNmNiMDhiMzNlOWY1Y2U3YTZlOTM0ZmRmZTgxNDVjMTJiNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx/WK5HLFWVApHiE0qo/Ams5sym2
1I1znVQo5TTet1k+BzGuAQobuYX0X+PUUnfbbtwlGMnd5vAT4zIQNhDBeVvcW4ge
URlv0F6OqiWDjNmGbaReR1q9PnNbxMlppmPYI7BesO9F1SR4zc07F3UJLVoZu1Qy
Ymz/wgeU3pUkEkR7UV9n7dvc+Il3zlY6xTPEA7PaKb5ltrUsWfRwUFNsEDfNTZlB
IW75NGRV13uHYgq4Z2yf01y07o6KgudUzEeGbAXB5IGhqCQkyiv81UNqHBLsLqLX
smEFJdOMo++ktocfNAprx6RCO82H9e1VG2jdMmY4K5hdDndjyApkaZkdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG9bLCLM+n1znpuk0/f6BRcErR3MB8GA1UdIwQY
MBaAFGmYUAQCyCFc9XEHOklc3IDHQvLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWIt
MTg5MDI4ZjMzOTZjLzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWItMTg5MDI4ZjMzOTZj
LzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxbj1BMs
L0wPQbh1FGLx2/wOQ4z/HcKgRI0griVxzExUmy5YqEBmK5WHm1jzGXlxywdXnp8N
buTcyvWhyBmJPRvlJtV5zN0ODrzZLqzO96SyssGjRcgAV3TM+ukQtIrURQM0TPi/
WQ+U7M60tsZe7kp7mVoj09sHVxttXVGVWCX8i+LxnDy4GEu+jyVFu1tnlErAPHbE
IJjIMuwKNgS99V0jOuOnx5Z2jwczv/f+Xi8j5/APRGLPedMKcGfNjU7SoE5QvGcp
aY7GA/lqm/iWqcE9yakXmd6vaKd+NIZ8y3N3QQ41GmBM4PGlW5kc92h3DZ7PHq+l
O/vVC0BjpYIOyg==
-----END CERTIFICATE-----