Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          WtUoRwEGT5DDJEtluDKAZEya8pelyJxvpA9R4DwRH74=
Subject key identifier:   EC:09:C2:98:5D:1E:BF:0C:03:7F:29:B5:76:77:78:D0:AB:01:E1:B4
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       01962F74CE2AE8FC6D52DC61613FF059CA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: bAmqmz8FlDw5F2UR9uMy6sNyl2cs+m9qmPIcnNUtCPI=)
                          2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ce:2a:e8:fc:6d:52:dc:61:61:3f:f0:59:ca:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=ec09c2985d1ebf0c037f29b5767778d0ab01e1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:7b:0f:bd:f3:05:8a:9e:b5:e9:18:24:0e:
                    78:86:c7:e8:57:6c:0c:53:af:1e:f3:92:2a:e6:92:
                    dc:8d:7a:4b:63:43:aa:e2:89:27:6b:77:cd:f8:a2:
                    5c:ec:98:e8:9d:5b:ed:d9:c9:09:88:de:aa:72:96:
                    02:a4:4a:f6:92:fc:da:93:17:c5:4c:38:7e:2b:eb:
                    a8:67:7b:5a:6a:20:3e:6b:f3:07:24:d8:8d:79:62:
                    97:14:6c:af:17:c7:f1:60:fa:ca:13:f3:0d:ac:af:
                    55:3d:52:ae:d8:12:36:8b:8a:87:76:83:19:fa:8a:
                    65:a8:29:c8:cb:22:ba:03:38:d7:4b:3c:56:8c:a1:
                    5a:f1:ea:17:6d:7c:86:44:c2:ac:db:dc:0b:25:8c:
                    ed:67:d7:97:7d:51:d3:87:9a:6a:29:03:8f:e1:a8:
                    79:c6:c0:44:1a:6b:fd:37:8a:38:51:90:c2:3c:fb:
                    25:3a:e9:5f:f6:b1:2d:f1:ad:21:3f:b3:cd:cd:fb:
                    65:4f:cc:78:16:b0:bf:f8:a5:e7:ec:4b:c6:40:73:
                    15:65:77:7a:a6:aa:3c:64:75:19:08:58:eb:70:f6:
                    94:df:83:0a:91:80:10:fe:08:84:4f:1f:d7:25:39:
                    78:2f:d6:f9:35:13:4b:fd:c7:34:83:cc:cd:ae:97:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:C2:98:5D:1E:BF:0C:03:7F:29:B5:76:77:78:D0:AB:01:E1:B4
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:db:d8:2f:bc:2e:a4:7c:d9:01:4e:ba:6b:1a:9b:c5:fc:e9:
         d6:6e:96:81:75:f1:be:36:a6:f2:ef:7f:66:a7:16:53:c0:64:
         f8:a5:9c:23:96:54:82:b1:c8:19:f0:d8:60:ca:5b:64:0f:f1:
         aa:51:62:f7:6b:ca:d5:16:0c:d8:7d:5e:a7:3c:4c:7a:e8:90:
         47:36:a6:6a:9c:ff:fc:85:9f:39:55:dd:a0:b8:5f:9d:03:48:
         3c:6d:e0:44:b6:d7:82:4e:05:72:fe:32:d2:09:a8:95:f9:7e:
         6d:79:a6:55:64:a1:6e:1f:1c:c1:df:7c:00:96:56:a4:f2:67:
         fa:8d:c9:90:cc:fc:33:af:92:78:9d:54:a8:8a:af:d3:d4:1b:
         0b:9d:e7:94:c0:b3:cb:19:20:bb:ef:72:cc:61:ee:4b:c6:c3:
         7b:83:e1:eb:fd:56:27:1f:a8:63:f7:6c:e8:a5:30:65:42:a6:
         45:b5:61:c0:42:14:49:2f:72:2f:64:86:0d:e7:0d:32:0c:3b:
         24:7a:29:c0:02:a4:cf:f6:37:0c:33:ba:db:07:36:7c:d5:23:
         2e:19:14:be:b7:70:cd:38:5a:d2:10:7b:99:0d:3a:8d:6e:11:
         46:2b:6a:a0:12:49:07:7d:ad:cf:f4:81:2b:a0:09:4a:4e:02:
         6e:f6:7a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdM4q6PxtUtxhYT/wWcoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1
YjBkYTgwHhcNMjUwNDEzMTQwMTQ2WhcNMjUwNDE0MTQwMTQ2WjAzMTEwLwYDVQQD
EyhlYzA5YzI5ODVkMWViZjBjMDM3ZjI5YjU3Njc3NzhkMGFiMDFlMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlF7D73zBYqetekYJA54hsfoV2wM
U68e85Iq5pLcjXpLY0Oq4okna3fN+KJc7JjonVvt2ckJiN6qcpYCpEr2kvzakxfF
TDh+K+uoZ3taaiA+a/MHJNiNeWKXFGyvF8fxYPrKE/MNrK9VPVKu2BI2i4qHdoMZ
+oplqCnIyyK6AzjXSzxWjKFa8eoXbXyGRMKs29wLJYztZ9eXfVHTh5pqKQOP4ah5
xsBEGmv9N4o4UZDCPPslOulf9rEt8a0hP7PNzftlT8x4FrC/+KXn7EvGQHMVZXd6
pqo8ZHUZCFjrcPaU34MKkYAQ/giETx/XJTl4L9b5NRNL/cc0g8zNrpdUzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwJwphdHr8MA38ptXZ3eNCrAeG0MB8GA1UdIwQY
MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut
ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5
LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNvYL7wu
pHzZAU66axqbxfzp1m6WgXXxvjam8u9/ZqcWU8Bk+KWcI5ZUgrHIGfDYYMpbZA/x
qlFi92vK1RYM2H1epzxMeuiQRzamapz//IWfOVXdoLhfnQNIPG3gRLbXgk4Fcv4y
0gmolfl+bXmmVWShbh8cwd98AJZWpPJn+o3JkMz8M6+SeJ1UqIqv09QbC53nlMCz
yxkgu+9yzGHuS8bDe4Ph6/1WJx+oY/ds6KUwZUKmRbVhwEIUSS9yL2SGDecNMgw7
JHopwAKkz/Y3DDO62wc2fNUjLhkUvrdwzTha0hB7mQ06jW4RRitqoBJJB32tz/SB
K6AJSk4CbvZ6AA==
-----END CERTIFICATE-----