Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File:                     9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier:          pAdtzd0KK64QF69jCYbeIUieXvb0QoUHld1Iyb9N+i0=
Subject key identifier:   56:35:D2:6B:EF:61:9C:68:FC:D7:95:C3:A9:B0:46:DC:8E:49:2F:1D
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer:       /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial:       01962F7425F30A5BA65892DBE7AAB1F56E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: xQxD5cdeUYTHyLVn+zA79o1+OQsdSwiDdvHQbzmFo+U=)
                          2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:f3:0a:5b:a6:58:92:db:e7:aa:b1:f5:6e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=5635d26bef619c68fcd795c3a9b046dc8e492f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4d:20:ab:69:1a:e5:45:7b:b3:73:c1:6f:f7:
                    db:14:3d:98:74:85:08:27:6b:f0:00:f3:c6:24:13:
                    03:34:85:64:46:75:d8:76:c0:23:6b:e8:96:3e:ee:
                    8c:1d:20:06:49:fb:dd:e6:76:19:41:83:9e:f0:ca:
                    88:9b:f3:09:cc:0e:ee:12:bf:e9:2c:67:9c:24:5f:
                    9b:18:d5:d2:0a:3d:5f:b0:2c:2d:fa:f7:ae:16:e1:
                    c6:87:a7:ee:51:d7:92:68:bf:4b:0d:23:de:9d:c6:
                    ef:47:1a:38:65:4a:70:f6:8c:53:76:b3:43:0a:c2:
                    99:ca:c2:b1:60:cf:b7:73:0c:11:b3:ce:cf:4e:88:
                    a6:ba:37:f8:99:9f:ed:ce:31:9c:7e:cb:8f:1f:42:
                    36:e1:c1:8c:49:33:28:2b:2c:b6:93:f4:5a:6b:00:
                    43:03:b4:e5:fb:6d:63:d8:56:8c:90:6d:90:74:37:
                    2f:a1:6a:50:36:f4:15:e9:75:da:1c:f3:83:1e:73:
                    fe:4e:ea:e2:9d:89:b8:2a:d6:d2:90:99:1d:0f:9c:
                    e5:3a:34:6e:6b:90:37:43:89:26:92:94:84:d6:04:
                    56:6e:2d:ee:80:e6:2d:2c:8b:04:dd:f6:c9:ba:f5:
                    e0:69:66:50:54:23:9e:7d:62:3c:df:9f:dc:d6:01:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:35:D2:6B:EF:61:9C:68:FC:D7:95:C3:A9:B0:46:DC:8E:49:2F:1D
            X509v3 Authority Key Identifier:
                keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:19:ab:8e:72:b6:a4:99:1d:31:06:2f:ee:0c:14:42:2f:
         a2:52:da:d5:d7:fa:ef:22:be:a0:77:76:a7:f7:4c:4d:e8:82:
         4e:59:13:3f:e0:b6:62:08:54:43:e8:cd:fc:5a:d3:91:2a:60:
         af:01:b5:16:ff:60:77:e5:7e:23:b1:6f:d3:b9:b9:b5:25:03:
         80:84:4b:21:3a:0b:e4:db:fc:7e:67:6c:88:d9:12:f8:28:1f:
         96:55:e4:4c:5b:16:60:eb:cb:86:ab:db:d2:db:3f:e4:1c:c9:
         59:e0:31:8d:1c:dc:c3:64:13:44:79:64:88:d4:4d:3a:e8:ae:
         3b:f2:09:43:09:7c:a6:17:1e:f5:9d:77:6e:3a:83:85:5a:0b:
         83:aa:35:4d:64:50:35:d8:5d:c1:81:bb:08:6d:f7:cc:72:27:
         31:94:dd:65:6b:a3:30:02:bc:a9:90:69:55:0e:61:d5:61:8e:
         e5:cf:a2:af:9c:b4:52:77:b4:eb:82:15:78:df:47:d4:69:41:
         bc:43:85:9a:4a:be:35:e3:10:17:2c:a3:19:cd:b3:d6:71:e6:
         90:6e:51:46:c0:45:c1:9c:c5:08:e2:48:ae:c0:e8:38:5f:62:
         0d:19:61:3e:fb:38:c2:58:98:9e:91:b3:7a:67:80:e1:90:5f:
         2b:0b:0d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCXzClumWJLb56qx9W6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh
NzI4MjgwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
Eyg1NjM1ZDI2YmVmNjE5YzY4ZmNkNzk1YzNhOWIwNDZkYzhlNDkyZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA500gq2ka5UV7s3PBb/fbFD2YdIUI
J2vwAPPGJBMDNIVkRnXYdsAja+iWPu6MHSAGSfvd5nYZQYOe8MqIm/MJzA7uEr/p
LGecJF+bGNXSCj1fsCwt+veuFuHGh6fuUdeSaL9LDSPencbvRxo4ZUpw9oxTdrND
CsKZysKxYM+3cwwRs87PToimujf4mZ/tzjGcfsuPH0I24cGMSTMoKyy2k/RaawBD
A7Tl+21j2FaMkG2QdDcvoWpQNvQV6XXaHPODHnP+TurinYm4KtbSkJkdD5zlOjRu
a5A3Q4kmkpSE1gRWbi3ugOYtLIsE3fbJuvXgaWZQVCOefWI835/c1gFJ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY10mvvYZxo/NeVw6mwRtyOSS8dMB8GA1UdIwQY
MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt
ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy
LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcs8Zq45y
tqSZHTEGL+4MFEIvolLa1df67yK+oHd2p/dMTeiCTlkTP+C2YghUQ+jN/FrTkSpg
rwG1Fv9gd+V+I7Fv07m5tSUDgIRLIToL5Nv8fmdsiNkS+CgfllXkTFsWYOvLhqvb
0ts/5BzJWeAxjRzcw2QTRHlkiNRNOuiuO/IJQwl8phce9Z13bjqDhVoLg6o1TWRQ
NdhdwYG7CG33zHInMZTdZWujMAK8qZBpVQ5h1WGO5c+ir5y0Une064IVeN9H1GlB
vEOFmkq+NeMQFyyjGc2z1nHmkG5RRsBFwZzFCOJIrsDoOF9iDRlhPvs4wliYnpGz
emeA4ZBfKwsNIQ==
-----END CERTIFICATE-----