Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File:                     ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier:          oG5eHhYwObtZOVdUxvXjsxAwU4xVVdqP59P15Tl1eJc=
Subject key identifier:   E3:98:76:77:32:03:25:E5:9D:92:2A:98:31:55:FC:4B:63:57:98:07
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer:       /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial:       01962F743B2BB77BBDF5DC745530C9C72168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number:          11EB
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: kCoXksw2solQ+CHMWbud4TcicMtd7nGRV/HHhHX8/mo=)
                          2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3b:2b:b7:7b:bd:f5:dc:74:55:30:c9:c7:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=e3987677320325e59d922a983155fc4b63579807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:91:80:a2:6f:64:17:fe:2a:12:cd:a6:2d:
                    dc:78:6a:f6:9d:66:a7:7f:ef:e7:58:9c:7e:6d:e2:
                    c3:77:90:38:c3:b1:e1:28:27:37:a5:60:33:db:44:
                    6c:e5:ab:54:98:49:d4:a5:03:ce:09:5f:9c:58:b1:
                    7f:b1:9a:24:b7:12:09:9e:ec:37:e1:4f:2c:20:a9:
                    eb:d1:a1:80:21:87:57:b1:c4:bf:f3:29:6d:8f:4d:
                    06:b5:17:32:fe:ad:42:25:84:1b:0c:f4:3e:ba:6d:
                    e3:e6:e3:e4:6f:3e:31:2a:7c:e1:e8:3e:1e:85:7e:
                    eb:07:a2:eb:02:95:f5:08:e2:f9:3c:ad:33:87:b9:
                    3a:bd:48:14:c3:18:ee:0c:08:98:9a:1b:ae:85:46:
                    79:29:16:9e:ed:54:62:0c:cd:2c:48:6a:e0:10:22:
                    57:66:b8:b3:7f:19:a9:59:0c:42:e4:9c:8e:bd:07:
                    05:86:11:79:02:96:14:dc:33:78:a0:58:30:62:cd:
                    66:ad:ed:1c:35:c8:17:dc:0e:47:5d:b1:8a:5d:36:
                    1d:a4:25:56:05:5a:fa:b1:fe:e7:8a:ae:e2:48:89:
                    d5:20:97:2b:46:f1:8b:42:34:73:41:45:97:28:ff:
                    1c:d7:3e:36:9d:90:e2:c5:8c:a5:ce:7d:42:da:51:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:76:77:32:03:25:E5:9D:92:2A:98:31:55:FC:4B:63:57:98:07
            X509v3 Authority Key Identifier:
                keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:15:45:40:81:72:22:19:db:1b:77:19:f6:40:d9:96:e6:9d:
         1c:bb:5e:13:2e:20:7f:35:43:9a:0e:32:34:7d:7e:c9:cc:20:
         50:52:22:f7:11:f4:08:40:d0:fd:5f:d0:47:8d:13:cd:46:e5:
         9e:b0:fd:32:8f:21:c5:61:9f:12:44:5f:15:45:73:29:3d:4f:
         07:c9:8a:5a:7d:e9:f8:fb:52:55:84:3e:74:bf:f4:2a:1b:e7:
         cc:45:5b:d4:bf:90:64:05:36:9d:d4:86:b1:da:a9:be:99:6d:
         37:52:e1:fc:98:ff:bc:46:15:e8:fe:f7:0f:36:cb:dd:32:93:
         63:8e:ad:8f:8c:36:16:44:c4:45:16:b1:e8:c8:7e:2b:5f:b6:
         e7:80:a8:2c:74:42:96:d2:34:f0:56:57:67:fe:99:4a:90:0c:
         2f:7e:79:e3:c5:ac:be:be:85:ac:c9:7d:21:22:4a:60:ae:eb:
         60:ec:1d:5e:8a:97:0d:e1:f3:94:bc:5d:9c:10:8a:1b:2d:fa:
         a5:a5:d7:44:5c:d4:93:ad:43:6d:a6:06:a5:6c:4a:1f:1a:c2:
         d3:68:49:8d:41:13:1c:f8:6a:b6:4a:4a:2a:32:5d:66:75:73:
         10:97:09:b5:4b:6f:49:66:38:95:dd:f5:41:25:1d:7b:1c:f9:
         83:0d:cf:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDsrt3u99dx0VTDJxyFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmE3MWU0NmM3NTkxNmI4ZTVkZTE5M2NjN2Y4MTA2OWRm
ODZmNzMwHhcNMjUwNDEzMTQwMTA4WhcNMjUwNDE0MTQwMTA4WjAzMTEwLwYDVQQD
EyhlMzk4NzY3NzMyMDMyNWU1OWQ5MjJhOTgzMTU1ZmM0YjYzNTc5ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lWRgKJvZBf+KhLNpi3ceGr2nWan
f+/nWJx+beLDd5A4w7HhKCc3pWAz20Rs5atUmEnUpQPOCV+cWLF/sZoktxIJnuw3
4U8sIKnr0aGAIYdXscS/8yltj00GtRcy/q1CJYQbDPQ+um3j5uPkbz4xKnzh6D4e
hX7rB6LrApX1COL5PK0zh7k6vUgUwxjuDAiYmhuuhUZ5KRae7VRiDM0sSGrgECJX
ZrizfxmpWQxC5JyOvQcFhhF5ApYU3DN4oFgwYs1mre0cNcgX3A5HXbGKXTYdpCVW
BVr6sf7niq7iSInVIJcrRvGLQjRzQUWXKP8c1z42nZDixYylzn1C2lGJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOYdncyAyXlnZIqmDFV/EtjV5gHMB8GA1UdIwQY
MBaAFCC6ceRsdZFrjl3hk8x/gQad+G9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEt
NDg0NTAwYmNmYjA3LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEtNDg0NTAwYmNmYjA3
LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBVFQIFy
IhnbG3cZ9kDZluadHLteEy4gfzVDmg4yNH1+ycwgUFIi9xH0CEDQ/V/QR40TzUbl
nrD9Mo8hxWGfEkRfFUVzKT1PB8mKWn3p+PtSVYQ+dL/0KhvnzEVb1L+QZAU2ndSG
sdqpvpltN1Lh/Jj/vEYV6P73DzbL3TKTY46tj4w2FkTERRax6Mh+K1+254CoLHRC
ltI08FZXZ/6ZSpAML35548Wsvr6FrMl9ISJKYK7rYOwdXoqXDeHzlLxdnBCKGy36
paXXRFzUk61DbaYGpWxKHxrC02hJjUETHPhqtkpKKjJdZnVzEJcJtUtvSWY4ld31
QSUdexz5gw3PEA==
-----END CERTIFICATE-----