Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File:                     bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier:          MjD24OGInr1PziYcm9I4F9zyPAt0CPPhRAoGfZEOnKo=
Subject key identifier:   CA:1B:84:B2:5E:A7:F9:E3:98:D9:E6:93:C6:CB:64:A5:39:CA:CD:EF
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer:       /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial:       01962F073E8CFC15070963810752E7CAF504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number:          096A
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
                          2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: uI5GU4Nigv9QpyDznEcwq8ilYx2dvzYNrDiPwRPVt9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3e:8c:fc:15:07:09:63:81:07:52:e7:ca:f5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=ca1b84b25ea7f9e398d9e693c6cb64a539cacdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:7e:2a:9d:38:3c:37:92:0d:b1:c0:ba:01:
                    cc:9a:92:6f:14:f3:4d:96:cd:1b:8a:f7:53:69:fd:
                    70:cc:84:21:62:79:d3:66:d2:95:58:2f:cd:47:9c:
                    66:d3:64:1a:72:06:99:18:23:e8:20:6b:66:f2:a1:
                    cf:20:cc:bd:cf:85:60:90:ce:06:ef:cd:37:fb:f1:
                    85:f1:13:95:5f:0d:d3:f8:ac:23:3e:87:9a:9b:de:
                    d3:6b:df:01:32:5b:bd:f1:2a:01:c6:39:8c:ce:a7:
                    84:98:62:6a:2d:8e:19:d8:5d:e2:35:1c:d2:fc:77:
                    b9:b4:31:78:67:52:48:2e:c7:e2:56:f3:b2:f7:c9:
                    81:fb:cf:ab:19:2c:4f:79:a9:86:3c:3d:e6:97:df:
                    ca:c5:26:62:6d:25:b0:bc:63:6f:8e:8a:4a:ef:b9:
                    d9:f0:c0:53:8a:0a:10:ea:ae:4c:aa:81:76:6a:42:
                    e8:d9:55:58:c2:6f:38:5a:d8:20:c6:af:ad:ec:16:
                    40:16:ce:45:12:e8:62:77:04:91:db:6c:a8:dd:9c:
                    5a:ba:ad:4d:c4:af:32:c3:cf:38:e5:a4:8b:ae:b9:
                    12:c4:e4:10:74:d4:df:32:30:b5:e3:0d:cd:16:63:
                    f3:9e:d0:65:e3:e0:84:8f:c1:ec:e8:b6:75:53:1d:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1B:84:B2:5E:A7:F9:E3:98:D9:E6:93:C6:CB:64:A5:39:CA:CD:EF
            X509v3 Authority Key Identifier:
                keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:e8:f2:fb:3d:48:49:ae:fc:d4:3c:6e:b6:7c:63:21:44:
         b0:3c:12:96:c4:0e:31:aa:ef:a7:c6:73:13:f9:5d:f3:9e:54:
         73:96:e6:ae:82:6c:92:ff:27:7d:2a:08:6a:90:9e:9b:c0:a0:
         7b:f6:8e:90:06:c2:cf:a7:f8:40:55:9b:07:83:bb:32:6c:86:
         f6:f4:51:c9:9d:70:a0:b5:c9:9f:3e:0a:f8:d1:ab:77:83:67:
         12:c3:3b:0f:f3:72:c0:18:55:34:9d:b9:a0:92:02:ff:f8:07:
         b2:e8:e0:05:7b:d3:f1:29:0c:ea:7d:15:11:57:05:3e:a3:9d:
         15:d3:5c:a2:02:4b:be:07:7d:b3:03:a2:d0:da:24:61:6b:98:
         c6:a0:9c:6a:1c:8d:53:3f:97:7f:f4:cd:f6:fa:6f:dd:54:42:
         aa:bd:a5:7b:2f:81:71:db:89:8c:e1:5b:d0:fa:ab:7c:16:ba:
         21:37:0b:81:ac:20:3c:36:fa:fe:d4:74:5b:6d:19:e2:14:4b:
         d6:b4:8f:dd:d0:b8:ac:5e:d9:be:ad:b1:03:06:3e:42:8e:9f:
         a1:ed:ab:e1:7a:b5:20:40:21:53:ec:4d:7f:bd:83:46:3c:1b:
         6c:0d:a6:56:a9:cf:cf:e6:3f:e3:cc:00:7a:d1:5a:43:c0:b6:
         71:03:67:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBz6M/BUHCWOBB1LnyvUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1
MzBiMzAwHhcNMjUwNDEzMTIwMjA1WhcNMjUwNDE0MTIwMjA1WjAzMTEwLwYDVQQD
EyhjYTFiODRiMjVlYTdmOWUzOThkOWU2OTNjNmNiNjRhNTM5Y2FjZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGJ+Kp04PDeSDbHAugHMmpJvFPNN
ls0bivdTaf1wzIQhYnnTZtKVWC/NR5xm02QacgaZGCPoIGtm8qHPIMy9z4VgkM4G
7803+/GF8ROVXw3T+KwjPoeam97Ta98BMlu98SoBxjmMzqeEmGJqLY4Z2F3iNRzS
/He5tDF4Z1JILsfiVvOy98mB+8+rGSxPeamGPD3ml9/KxSZibSWwvGNvjopK77nZ
8MBTigoQ6q5MqoF2akLo2VVYwm84Wtggxq+t7BZAFs5FEuhidwSR22yo3Zxauq1N
xK8yw8845aSLrrkSxOQQdNTfMjC14w3NFmPzntBl4+CEj8Hs6LZ1Ux36cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMobhLJep/njmNnmk8bLZKU5ys3vMB8GA1UdIwQY
MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt
ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz
LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlzo8vs9
SEmu/NQ8brZ8YyFEsDwSlsQOMarvp8ZzE/ld855Uc5bmroJskv8nfSoIapCem8Cg
e/aOkAbCz6f4QFWbB4O7MmyG9vRRyZ1woLXJnz4K+NGrd4NnEsM7D/NywBhVNJ25
oJIC//gHsujgBXvT8SkM6n0VEVcFPqOdFdNcogJLvgd9swOi0NokYWuYxqCcahyN
Uz+Xf/TN9vpv3VRCqr2ley+BcduJjOFb0PqrfBa6ITcLgawgPDb6/tR0W20Z4hRL
1rSP3dC4rF7Zvq2xAwY+Qo6foe2r4Xq1IEAhU+xNf72DRjwbbA2mVqnPz+Y/48wA
etFaQ8C2cQNniw==
-----END CERTIFICATE-----