Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          I8hHvnQuq7GT3dbQ1UaTs+HgaI36lwQGxjLMK8B4n4I=
Subject key identifier:   6B:93:1F:8D:E8:C9:20:E9:86:F8:D9:4E:BD:68:95:C5:57:F5:9F:D6
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       01962E61729DE3C058A50475FA576542B630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: UHQYSibO2pp49Tn8+DBziAY/JACCtIJGTml/G+fLcY8=)
                          2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:72:9d:e3:c0:58:a5:04:75:fa:57:65:42:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=6b931f8de8c920e986f8d94ebd6895c557f59fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:86:e0:a1:2f:46:2e:b3:78:d7:0a:dd:24:
                    78:3c:20:3b:23:f2:6b:20:2d:20:c2:ec:72:7e:b6:
                    3a:d7:1b:c7:28:8d:b5:a5:5c:d0:2e:0f:a6:f3:74:
                    e3:5a:4d:c1:50:f7:d4:97:ab:27:3f:ba:89:a6:f7:
                    85:35:48:73:a9:09:bb:a3:9b:2f:0e:0c:36:70:8f:
                    62:31:ef:c5:e2:f8:94:ca:03:af:bb:e5:26:3a:a8:
                    24:77:85:88:15:09:4c:12:47:1d:b1:90:8f:4a:2c:
                    fe:f7:f2:0f:1f:e6:72:a6:6e:b1:8a:49:53:0c:df:
                    29:cd:06:d3:e3:60:68:1e:7f:9c:0f:72:2c:6b:49:
                    fe:c2:1a:ff:cf:b8:f0:a2:8a:c8:25:9c:d7:d0:81:
                    f1:2e:b8:24:25:e1:3b:e2:ad:a1:77:20:4a:70:1a:
                    63:43:3e:a8:ed:b4:a4:53:62:15:2d:1e:e4:66:bc:
                    51:53:82:3c:95:57:49:bd:54:eb:4b:77:b6:63:b6:
                    dc:35:e8:44:1c:0e:fe:59:eb:68:ca:a0:d2:85:09:
                    b7:03:57:2a:82:2f:4d:03:e3:b1:d6:3a:0c:17:1e:
                    e4:40:52:f7:67:14:57:10:57:6a:c2:7b:8e:ac:7e:
                    02:3e:6b:53:8d:80:f9:6a:0c:fa:52:0d:3c:fc:7a:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:1F:8D:E8:C9:20:E9:86:F8:D9:4E:BD:68:95:C5:57:F5:9F:D6
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:79:b7:ef:f4:bb:f1:29:24:2b:8e:2d:91:5d:0c:7d:15:0a:
         c9:74:e2:2e:04:bc:f7:2e:46:a0:00:66:f3:b8:9c:88:58:e1:
         f0:13:d1:b9:46:78:cd:98:2c:2e:15:71:30:ac:b5:d6:ab:03:
         6a:50:17:4b:05:5f:a8:98:5d:82:76:d1:b2:df:62:7b:8a:8f:
         b1:9f:e8:47:d3:e8:bc:bb:69:1a:f3:da:c3:3b:29:e9:6a:ed:
         5f:61:31:28:fe:51:a8:15:3b:1d:17:20:f1:6c:31:93:56:60:
         d0:30:8b:d8:a4:24:31:7e:78:6f:19:e4:51:86:35:5a:01:9a:
         53:fb:0b:f9:82:00:25:ac:ba:08:d9:5a:85:27:a9:0d:94:f3:
         d8:87:4b:2d:de:87:0e:bc:5c:f7:51:ce:2f:34:36:64:60:bb:
         aa:26:56:1c:6d:41:bf:d4:5c:ad:97:8a:a7:90:3c:bd:37:56:
         20:6a:d7:a9:6c:24:00:67:18:bb:2c:a5:64:a0:85:9d:03:f1:
         a3:f6:38:ec:14:2b:7e:e8:f5:df:fd:b5:cb:7d:5f:06:1f:20:
         4d:9b:26:8d:55:dc:e5:bb:7f:4b:9b:83:83:20:a9:20:89:e7:
         b8:91:a4:e4:49:e7:21:18:ab:80:64:fb:49:8c:de:a7:66:c5:
         d8:bd:ac:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuYXKd48BYpQR1+ldlQrYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZGY4MGY3YzY5MmU4NmQzY2Q2Yjc1NWQwNmNmN2NlOWMx
MzdmZjIwHhcNMjUwNDEzMDkwMTAwWhcNMjUwNDE0MDkwMTAwWjAzMTEwLwYDVQQD
Eyg2YjkzMWY4ZGU4YzkyMGU5ODZmOGQ5NGViZDY4OTVjNTU3ZjU5ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJWG4KEvRi6zeNcK3SR4PCA7I/Jr
IC0gwuxyfrY61xvHKI21pVzQLg+m83TjWk3BUPfUl6snP7qJpveFNUhzqQm7o5sv
Dgw2cI9iMe/F4viUygOvu+UmOqgkd4WIFQlMEkcdsZCPSiz+9/IPH+Zypm6xiklT
DN8pzQbT42BoHn+cD3Isa0n+whr/z7jwoorIJZzX0IHxLrgkJeE74q2hdyBKcBpj
Qz6o7bSkU2IVLR7kZrxRU4I8lVdJvVTrS3e2Y7bcNehEHA7+WetoyqDShQm3A1cq
gi9NA+Ox1joMFx7kQFL3ZxRXEFdqwnuOrH4CPmtTjYD5agz6Ug08/HqjmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGuTH43oySDphvjZTr1olcVX9Z/WMB8GA1UdIwQY
MBaAFPnfgPfGkuhtPNa3VdBs986cE3/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kLUE5OGFTNkcwODFyZFYwR3ozenB3VGZfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVm
LTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRWMEd6M3pwd1RmX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU3LzY3MWVlNC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVh
ZWIvMS8xLWQtQTk4YVM2RzA4MXJkVjBHejN6cHdUZl9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnm3
7/S78SkkK44tkV0MfRUKyXTiLgS89y5GoABm87iciFjh8BPRuUZ4zZgsLhVxMKy1
1qsDalAXSwVfqJhdgnbRst9ie4qPsZ/oR9PovLtpGvPawzsp6WrtX2ExKP5RqBU7
HRcg8Wwxk1Zg0DCL2KQkMX54bxnkUYY1WgGaU/sL+YIAJay6CNlahSepDZTz2IdL
Ld6HDrxc91HOLzQ2ZGC7qiZWHG1Bv9RcrZeKp5A8vTdWIGrXqWwkAGcYuyylZKCF
nQPxo/Y47BQrfuj13/21y31fBh8gTZsmjVXc5bt/S5uDgyCpIInnuJGk5EnnIRir
gGT7SYzep2bF2L2s8A==
-----END CERTIFICATE-----