Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File:                     CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier:          CrxnBPPvc/+xB6JaYb0mAx+2FNsxKsu3CCtsoYgEJp4=
Subject key identifier:   21:DF:64:41:B2:5F:3E:42:B6:E3:B1:74:AF:AE:FC:CB:DC:29:65:2D
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer:       /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial:       01962F0694A8500CE28C0C6CB99FA6032E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number:          04C4
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: d9peZcxXCHR4c7xtbcMkME5JhKnoTIA7yk3f5LCGOQk=)
                          2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:a8:50:0c:e2:8c:0c:6c:b9:9f:a6:03:2e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=21df6441b25f3e42b6e3b174afaefccbdc29652d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:a0:c2:a3:4e:10:a9:71:9d:66:0d:13:d6:
                    29:38:ec:97:7b:56:fd:1e:b1:ba:28:b9:a2:f5:d6:
                    21:7a:75:f6:ab:ec:d2:38:74:bc:b0:9b:e0:77:71:
                    99:8f:28:82:9c:e8:49:f1:f0:ba:ae:21:14:f5:a0:
                    1e:32:95:43:5d:9b:c7:90:bc:21:fd:23:ef:ab:17:
                    fa:4c:46:bb:ec:66:fe:bf:23:45:24:2d:69:a3:7a:
                    7d:53:39:60:23:a1:e8:62:03:48:aa:15:ed:b6:9a:
                    1d:8e:9e:46:cc:97:6d:42:fc:59:e9:ea:02:c8:5a:
                    a2:f6:b3:68:eb:bc:25:8e:dc:37:d2:ab:cd:9f:07:
                    3b:16:03:2b:3b:29:a7:d2:ef:e5:2c:3f:4c:21:de:
                    61:d6:d6:91:d8:1a:91:a0:78:23:90:90:2d:0a:b0:
                    dd:34:a7:4a:f0:42:7b:bc:9c:22:78:c4:14:46:a7:
                    cb:6e:30:76:4c:32:84:1b:8d:7f:d1:9a:89:ff:ff:
                    35:89:ae:ca:fd:63:07:cb:7d:b3:58:c9:8d:4e:2f:
                    e4:0b:a2:12:58:ad:e9:eb:e1:7c:68:5c:72:8e:fc:
                    38:9a:22:b2:49:e4:89:be:fb:a9:61:9c:e4:67:26:
                    50:23:a8:8e:cc:dc:49:8b:2e:33:be:b8:c4:aa:7e:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DF:64:41:B2:5F:3E:42:B6:E3:B1:74:AF:AE:FC:CB:DC:29:65:2D
            X509v3 Authority Key Identifier:
                keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:cc:f2:64:59:e9:6b:8c:6c:67:ec:53:d4:bd:f9:1e:35:
         55:f2:ae:6f:66:0c:4f:f0:82:9e:dd:b2:b2:fb:61:22:95:b7:
         84:05:e4:39:c0:0c:45:d7:c2:99:d6:7e:9b:00:b3:ae:93:ff:
         7c:0d:19:db:7c:c5:34:69:90:71:06:5b:8f:3d:9b:7d:da:8b:
         d4:2a:67:6b:26:d1:f5:c9:50:8d:a5:82:05:bd:50:a2:95:3f:
         9d:60:58:66:a9:4d:d3:e4:41:f1:a6:3b:51:d6:21:f8:27:d9:
         b9:fd:05:c6:e9:15:ad:1e:63:40:31:e0:c1:d2:7f:84:f7:5d:
         c1:cf:43:cb:4d:d1:1f:5f:ae:22:a0:c2:d0:ed:14:9f:6e:30:
         a0:ce:16:c0:f6:60:fb:b0:02:06:39:6f:a9:d7:10:d8:f2:49:
         8e:8e:97:aa:c3:26:22:b9:9c:21:1e:e7:da:99:eb:c7:ad:d0:
         2d:e4:32:7d:3a:c1:bd:cc:0b:e2:0b:b4:56:81:ae:0c:6b:75:
         ea:10:5f:b4:5a:4e:08:3d:d7:aa:e5:a7:09:ef:7b:3f:33:3f:
         65:01:8a:ea:2e:f0:ff:49:40:e0:0a:58:e4:cd:bb:b8:4c:cc:
         63:6f:92:96:8a:ed:8f:e2:14:f1:33:10:83:24:ff:2a:ea:08:
         4e:37:39:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpSoUAzijAxsuZ+mAy5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4
NjU3OWEwHhcNMjUwNDEzMTIwMTIyWhcNMjUwNDE0MTIwMTIyWjAzMTEwLwYDVQQD
EygyMWRmNjQ0MWIyNWYzZTQyYjZlM2IxNzRhZmFlZmNjYmRjMjk2NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5egwqNOEKlxnWYNE9YpOOyXe1b9
HrG6KLmi9dYhenX2q+zSOHS8sJvgd3GZjyiCnOhJ8fC6riEU9aAeMpVDXZvHkLwh
/SPvqxf6TEa77Gb+vyNFJC1po3p9UzlgI6HoYgNIqhXttpodjp5GzJdtQvxZ6eoC
yFqi9rNo67wljtw30qvNnwc7FgMrOymn0u/lLD9MId5h1taR2BqRoHgjkJAtCrDd
NKdK8EJ7vJwieMQURqfLbjB2TDKEG41/0ZqJ//81ia7K/WMHy32zWMmNTi/kC6IS
WK3p6+F8aFxyjvw4miKySeSJvvupYZzkZyZQI6iOzNxJiy4zvrjEqn7QSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHfZEGyXz5CtuOxdK+u/MvcKWUtMB8GA1UdIwQY
MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt
NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4
LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9fM8mRZ
6WuMbGfsU9S9+R41VfKub2YMT/CCnt2ysvthIpW3hAXkOcAMRdfCmdZ+mwCzrpP/
fA0Z23zFNGmQcQZbjz2bfdqL1CpnaybR9clQjaWCBb1QopU/nWBYZqlN0+RB8aY7
UdYh+CfZuf0FxukVrR5jQDHgwdJ/hPddwc9Dy03RH1+uIqDC0O0Un24woM4WwPZg
+7ACBjlvqdcQ2PJJjo6XqsMmIrmcIR7n2pnrx63QLeQyfTrBvcwL4gu0VoGuDGt1
6hBftFpOCD3XquWnCe97PzM/ZQGK6i7w/0lA4ApY5M27uEzMY2+Slortj+IU8TMQ
gyT/KuoITjc5dw==
-----END CERTIFICATE-----