Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File:                     T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier:          51BspVIgO+FkGc11NGtHwt7VQl//WwgszLLbMvNisD8=
Subject key identifier:   35:4E:F1:3A:0F:4D:A1:41:1B:62:5E:85:34:23:BE:A6:92:E1:3F:4C
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer:       /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial:       01962ECF93479AD4BF4D233E76FC35863DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: hnELVtCYy1qLJjS/XbP6VP26UekzvqfFrLiTwFFGycs=)
                          2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:93:47:9a:d4:bf:4d:23:3e:76:fc:35:86:3d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=354ef13a0f4da1411b625e853423bea692e13f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:2a:70:51:e0:08:c8:65:b3:d7:58:e5:3c:
                    2f:95:da:86:90:c1:6a:23:f8:37:78:84:8e:05:76:
                    78:f6:95:64:35:81:ab:b1:04:16:f8:61:82:7e:be:
                    8b:5f:9b:1a:0b:88:f4:80:d6:2a:25:12:f1:ed:79:
                    06:df:0e:bf:82:f4:af:88:1b:24:91:79:d2:0c:3e:
                    b8:84:00:9e:73:5b:c4:40:f4:69:02:69:b3:3c:5a:
                    ef:bb:b8:74:c7:70:28:b3:fc:d0:1d:65:03:38:95:
                    29:b4:15:47:99:9f:02:78:58:04:3a:46:4f:39:a3:
                    53:cc:55:61:1d:4d:eb:7b:68:e1:19:0d:f6:b8:24:
                    94:6b:24:d8:74:8a:11:0c:e7:e2:67:ff:0c:60:58:
                    37:97:82:2e:29:78:c9:72:fa:32:cc:a4:85:fd:e5:
                    7f:74:d8:cb:48:3e:0b:72:7b:91:3d:95:8a:83:a3:
                    51:4a:74:ff:0d:c8:f5:49:c1:40:a3:20:68:80:7d:
                    b5:61:56:d9:56:16:18:e2:0e:4d:cc:bd:d5:9e:20:
                    9e:68:1a:6a:26:9e:3e:54:0c:e8:1e:e7:00:7d:84:
                    de:48:9f:36:2d:50:d6:28:dc:a9:fc:60:00:a9:bb:
                    80:41:4a:1c:c5:3c:c6:82:34:48:6e:2a:31:ae:47:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:F1:3A:0F:4D:A1:41:1B:62:5E:85:34:23:BE:A6:92:E1:3F:4C
            X509v3 Authority Key Identifier:
                keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:9e:95:38:ca:53:c9:29:d4:42:99:02:4f:12:5e:ae:78:
         80:ef:d9:1f:13:58:b3:54:b8:e9:58:98:d4:56:9a:88:28:a3:
         d5:3d:be:15:36:6b:2a:2b:6e:23:4a:13:73:20:54:21:94:b6:
         50:a2:39:91:3d:93:e9:d9:34:f0:81:cc:08:44:e4:1c:a1:eb:
         22:fc:b9:b0:37:ce:05:e3:34:07:3c:d5:38:0c:bd:fc:a4:9d:
         e5:7c:e2:0f:d1:c4:72:b2:cb:ba:97:9a:11:82:89:89:30:76:
         20:d2:40:17:d5:9a:f2:3a:73:6e:80:03:4c:f7:a7:90:22:d8:
         88:95:06:d7:0e:d5:20:ae:6e:b5:f0:b4:00:a0:c3:62:90:26:
         38:d2:08:4b:6e:40:cf:b9:b3:b0:a3:de:fe:50:d1:29:1d:82:
         44:97:6e:f6:3b:e3:bf:0d:53:9b:2d:91:b8:7e:cc:42:49:58:
         d0:c8:78:eb:4c:1e:36:ae:4b:1f:d6:b2:5b:c0:38:47:c0:ee:
         bd:34:f1:1f:8e:d2:d1:f7:0a:84:85:4c:d1:db:e9:d4:92:52:
         ae:37:c3:22:79:7b:74:99:36:73:af:3d:9d:bf:7b:9a:b0:fd:
         b0:68:6d:b3:10:d1:a5:9b:2f:08:fc:ca:87:34:f1:c6:2e:e0:
         f4:26:c8:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5NHmtS/TSM+dvw1hj3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWQ1ZmJhYWY3NmE4MGE2NWUwZTkyYzAyMDYxZTg5NWIy
YjgxMTcwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
EygzNTRlZjEzYTBmNGRhMTQxMWI2MjVlODUzNDIzYmVhNjkyZTEzZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6wqcFHgCMhls9dY5TwvldqGkMFq
I/g3eISOBXZ49pVkNYGrsQQW+GGCfr6LX5saC4j0gNYqJRLx7XkG3w6/gvSviBsk
kXnSDD64hACec1vEQPRpAmmzPFrvu7h0x3Aos/zQHWUDOJUptBVHmZ8CeFgEOkZP
OaNTzFVhHU3re2jhGQ32uCSUayTYdIoRDOfiZ/8MYFg3l4IuKXjJcvoyzKSF/eV/
dNjLSD4LcnuRPZWKg6NRSnT/Dcj1ScFAoyBogH21YVbZVhYY4g5NzL3VniCeaBpq
Jp4+VAzoHucAfYTeSJ82LVDWKNyp/GAAqbuAQUocxTzGgjRIbioxrkdmEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVO8ToPTaFBG2JehTQjvqaS4T9MMB8GA1UdIwQY
MBaAFE+dX7qvdqgKZeDpLAIGHolbK4EXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTct
NjBmNmZhOTExMGUyLzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTctNjBmNmZhOTExMGUy
LzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqielTjK
U8kp1EKZAk8SXq54gO/ZHxNYs1S46ViY1FaaiCij1T2+FTZrKituI0oTcyBUIZS2
UKI5kT2T6dk08IHMCETkHKHrIvy5sDfOBeM0BzzVOAy9/KSd5XziD9HEcrLLupea
EYKJiTB2INJAF9Wa8jpzboADTPenkCLYiJUG1w7VIK5utfC0AKDDYpAmONIIS25A
z7mzsKPe/lDRKR2CRJdu9jvjvw1Tmy2RuH7MQklY0Mh460weNq5LH9ayW8A4R8Du
vTTxH47S0fcKhIVM0dvp1JJSrjfDInl7dJk2c689nb97mrD9sGhtsxDRpZsvCPzK
hzTxxi7g9CbIPg==
-----END CERTIFICATE-----