Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
File:                     1ehYR8xEuGECJwu9do5MPOuhyYg.mft (raw, json)
Hash identifier:          vgODp3ZYVYnaG8Jtx89ionIzDYrSuFbkeLbA30HBrmo=
Subject key identifier:   79:64:38:61:BD:26:C0:02:5C:40:13:B1:6C:AD:A5:74:14:92:C1:F5
Authority key identifier: D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
Certificate issuer:       /CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Certificate serial:       01962E6189E79E2BA2B6FB6EDE86FD41393D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
Manifest number:          037B
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 1ehYR8xEuGECJwu9do5MPOuhyYg.crl (hash: kgGng7ySyoUbabiFocmE2O8AM/Lq5E7eG2EpbigXni8=)
                          2: HP2XU4ErP340JMFJBkwhXt7RSkM.roa (hash: jqU/k+IA4J2nUGc2ePon/4S6+Kq7gFeDjcwyWdzFAK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:e7:9e:2b:a2:b6:fb:6e:de:86:fd:41:39:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=79643861bd26c0025c4013b16cada5741492c1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:94:f3:06:96:81:79:14:c8:f1:42:42:ea:
                    62:16:1a:51:28:0e:2e:d0:69:de:1a:d1:de:5f:49:
                    5b:aa:f1:a5:a6:e4:32:ae:77:cd:60:e0:7b:da:0a:
                    90:90:ad:c3:c6:0d:be:fe:12:46:d3:e2:90:63:ae:
                    36:20:a2:8d:8d:e2:ab:25:34:3c:cb:4c:9e:5e:b6:
                    01:bb:45:14:cf:35:b5:e5:82:2d:9c:35:f9:30:0c:
                    f2:07:97:2f:37:50:8d:5a:85:7c:ce:aa:9d:e5:17:
                    3a:d0:88:04:11:ef:23:4e:40:a3:b9:94:b1:c4:0c:
                    73:3f:3c:22:48:47:75:c5:03:33:3d:f8:44:7c:23:
                    68:c2:d3:3c:88:29:90:6b:e2:f2:0b:91:d7:77:11:
                    1e:86:e2:f7:86:7d:18:eb:c5:3e:a1:f2:24:dc:09:
                    bd:05:49:41:5b:1f:38:75:84:61:a1:e7:fd:6e:31:
                    be:14:b3:58:bc:61:bf:d5:ae:94:03:4f:f0:fa:aa:
                    b4:47:99:38:2c:6b:56:d3:d4:84:be:4e:47:15:57:
                    26:38:84:22:6b:42:00:06:d1:e8:c2:43:ba:c2:2b:
                    32:9a:91:d5:03:7a:8e:7a:23:29:c2:f1:87:59:5b:
                    3c:c2:32:23:ed:27:c8:c1:8e:8c:de:f7:83:c4:49:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:38:61:BD:26:C0:02:5C:40:13:B1:6C:AD:A5:74:14:92:C1:F5
            X509v3 Authority Key Identifier:
                keyid:D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:19:59:76:5e:6c:8c:47:61:41:97:ec:82:78:42:f6:73:
         e9:44:91:d5:3e:8b:b0:6d:0d:6e:6b:d5:dc:1f:11:88:ea:48:
         25:33:c2:4f:09:cd:7c:1f:40:20:6a:36:53:ec:29:a4:0c:d2:
         2b:cf:50:4d:2b:56:99:d1:ac:0d:58:3c:45:80:6a:76:ed:1e:
         87:65:17:86:d4:d5:67:ab:b5:2d:27:5c:29:db:30:b9:85:de:
         db:4d:68:87:dd:c5:0a:c8:ee:52:46:ba:55:a2:05:29:73:d2:
         1f:dd:d3:1c:b9:9f:a5:9e:87:b8:74:78:62:40:de:a9:99:ae:
         10:08:86:95:75:52:68:90:ab:95:ca:dd:4f:e4:1a:e3:ce:35:
         77:d4:95:ed:46:d7:4f:41:eb:14:c4:ed:e4:c7:b5:12:3e:b7:
         34:35:50:94:ac:fc:8d:c5:ad:36:71:6d:47:ab:b9:a0:ac:cf:
         83:eb:95:c1:e5:6e:24:af:7c:09:94:a3:6d:9e:68:95:09:41:
         e0:0b:a6:ca:3d:05:0e:ef:66:3e:bf:5a:81:c3:94:65:a6:a3:
         3d:1c:bd:b4:8f:0c:b5:73:f4:90:b9:ad:e5:3d:33:6d:54:f9:
         d4:d5:50:fc:22:ae:43:42:df:0b:c8:a5:92:a2:25:b0:c4:63:
         2c:22:84:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYnnniuitvtu3ob9QTk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTg1ODQ3Y2M0NGI4NjEwMjI3MGJiZDc2OGU0YzNjZWJh
MWM5ODgwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
Eyg3OTY0Mzg2MWJkMjZjMDAyNWM0MDEzYjE2Y2FkYTU3NDE0OTJjMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQWU8waWgXkUyPFCQupiFhpRKA4u
0GneGtHeX0lbqvGlpuQyrnfNYOB72gqQkK3Dxg2+/hJG0+KQY642IKKNjeKrJTQ8
y0yeXrYBu0UUzzW15YItnDX5MAzyB5cvN1CNWoV8zqqd5Rc60IgEEe8jTkCjuZSx
xAxzPzwiSEd1xQMzPfhEfCNowtM8iCmQa+LyC5HXdxEehuL3hn0Y68U+ofIk3Am9
BUlBWx84dYRhoef9bjG+FLNYvGG/1a6UA0/w+qq0R5k4LGtW09SEvk5HFVcmOIQi
a0IABtHowkO6wisympHVA3qOeiMpwvGHWVs8wjIj7SfIwY6M3veDxEndjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlkOGG9JsACXEATsWytpXQUksH1MB8GA1UdIwQY
MBaAFNXoWEfMRLhhAicLvXaOTDzrocmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVoWVI4eEV1R0VDSnd1OWRvNU1QT3VoeVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84M2Y5NTYtZTE4ZC00NzM4LWJkNmEt
NzI5YzBmNDM0MTRkLzEvMWVoWVI4eEV1R0VDSnd1OWRvNU1QT3VoeVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84M2Y5NTYtZTE4ZC00NzM4LWJkNmEtNzI5YzBmNDM0MTRk
LzEvMWVoWVI4eEV1R0VDSnd1OWRvNU1QT3VoeVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApooZWXZe
bIxHYUGX7IJ4QvZz6USR1T6LsG0NbmvV3B8RiOpIJTPCTwnNfB9AIGo2U+wppAzS
K89QTStWmdGsDVg8RYBqdu0eh2UXhtTVZ6u1LSdcKdswuYXe201oh93FCsjuUka6
VaIFKXPSH93THLmfpZ6HuHR4YkDeqZmuEAiGlXVSaJCrlcrdT+Qa4841d9SV7UbX
T0HrFMTt5Me1Ej63NDVQlKz8jcWtNnFtR6u5oKzPg+uVweVuJK98CZSjbZ5olQlB
4Aumyj0FDu9mPr9agcOUZaajPRy9tI8MtXP0kLmt5T0zbVT51NVQ/CKuQ0LfC8il
kqIlsMRjLCKEgg==
-----END CERTIFICATE-----