Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          BCvSZbzhY5K5yTMBTnzwyscplu8OV4lXm3/az+hnyCs=
Subject key identifier:   07:02:5C:BF:C3:47:FB:9B:18:6B:EB:BD:0C:90:3F:43:19:18:88:A5
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       01962FAB1089DB3169AA571BB703881076F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          129E
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: MVHig3C+O+ppYxddXfRFUDzd4QrYuNZ5bb4Y4x2Dgls=)
                          2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:10:89:db:31:69:aa:57:1b:b7:03:88:10:76:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=07025cbfc347fb9b186bebbd0c903f43191888a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:48:7c:05:ff:6a:92:c8:c5:cb:eb:21:16:
                    c6:48:76:7c:64:47:f5:13:db:e5:05:76:8b:b6:11:
                    63:d2:f5:8b:a6:7d:d3:fd:27:3b:e9:c7:08:03:92:
                    c5:78:26:f7:c2:76:ef:4a:2b:61:01:bf:74:ef:7b:
                    8e:27:a7:d7:4d:d0:38:d7:a2:17:c7:da:fe:3d:66:
                    fe:44:63:5b:cc:58:d8:0f:59:53:5d:89:f6:f1:f9:
                    ca:02:64:4b:61:2b:af:7d:7f:57:2c:2a:27:2c:7b:
                    d8:fe:20:a7:93:9e:e2:c5:b4:66:03:11:7c:66:3c:
                    cc:17:cf:04:40:e1:5e:27:7f:ea:80:27:64:8a:85:
                    74:ef:39:1b:ce:86:d7:71:58:94:5b:ac:88:9f:81:
                    9e:8f:f7:92:ec:c6:04:c2:97:b3:f3:74:73:9f:45:
                    f6:4e:d9:04:b8:e5:01:e4:2e:7a:9a:3d:ce:a4:47:
                    69:af:8c:59:a2:e8:ea:25:0d:4e:e3:a1:28:2e:0c:
                    bc:38:f8:e5:34:4f:b1:a5:2d:8e:20:08:be:32:3e:
                    30:3a:19:63:10:83:81:92:cf:fb:97:43:93:d9:38:
                    db:c9:e7:c6:e6:9f:1d:6c:a3:05:e0:e3:15:1d:64:
                    99:af:67:27:c4:d7:a5:d8:bb:cb:2c:73:4a:c6:e6:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:02:5C:BF:C3:47:FB:9B:18:6B:EB:BD:0C:90:3F:43:19:18:88:A5
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:97:5f:11:50:eb:8c:ed:67:9c:3d:79:ab:02:9a:9a:44:74:
         d8:36:87:17:5b:9f:fe:d7:97:b7:85:db:f3:ce:f3:6c:8b:4d:
         3a:38:20:f2:b4:31:ce:0d:45:0e:6a:16:e4:d6:09:8f:19:76:
         6b:6b:0f:97:78:1e:99:17:1e:ad:ae:33:07:5c:a7:37:7e:87:
         d3:04:e7:83:3b:6f:87:d3:ff:b2:48:fd:4b:8a:90:d6:50:89:
         75:c2:7a:32:b0:11:97:b8:fa:c0:3b:16:e0:de:8c:89:48:29:
         1c:e1:34:e6:65:ad:71:55:f9:bb:5d:8f:7b:eb:79:49:2f:db:
         82:c3:67:4d:dc:bc:1b:b0:ec:bc:d6:11:e3:13:e7:3a:74:28:
         88:62:d8:be:ea:84:ca:46:64:7c:2d:a9:65:fd:da:e3:1e:a0:
         71:f1:c2:9d:68:82:db:c9:5a:9a:e3:65:bc:83:16:a5:ca:c8:
         d3:f5:e5:09:cc:ac:05:6c:44:a4:f6:28:a2:f2:18:ac:7a:2c:
         d7:ce:2e:28:e9:87:5c:09:10:8f:86:d5:14:53:98:c2:1a:00:
         54:5b:e1:3e:57:2b:f7:6d:66:51:4c:30:24:ed:10:ed:55:e0:
         d7:45:7c:9f:3e:df:e9:12:0a:fe:84:ab:fa:fc:89:66:d7:74:
         c1:64:9f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxCJ2zFpqlcbtwOIEHb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjZlNmI1YTM0ZmQxOGI0MzUzODVkYjg3YmIzYWU5NzQ3
ODUxMDgwHhcNMjUwNDEzMTUwMTAyWhcNMjUwNDE0MTUwMTAyWjAzMTEwLwYDVQQD
EygwNzAyNWNiZmMzNDdmYjliMTg2YmViYmQwYzkwM2Y0MzE5MTg4OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DRIfAX/apLIxcvrIRbGSHZ8ZEf1
E9vlBXaLthFj0vWLpn3T/Sc76ccIA5LFeCb3wnbvSithAb9073uOJ6fXTdA416IX
x9r+PWb+RGNbzFjYD1lTXYn28fnKAmRLYSuvfX9XLConLHvY/iCnk57ixbRmAxF8
ZjzMF88EQOFeJ3/qgCdkioV07zkbzobXcViUW6yIn4Gej/eS7MYEwpez83Rzn0X2
TtkEuOUB5C56mj3OpEdpr4xZoujqJQ1O46EoLgy8OPjlNE+xpS2OIAi+Mj4wOhlj
EIOBks/7l0OT2TjbyefG5p8dbKMF4OMVHWSZr2cnxNel2LvLLHNKxuaf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcCXL/DR/ubGGvrvQyQP0MZGIilMB8GA1UdIwQY
MBaAFNL25rWjT9GLQ1OF24e7Oul0eFEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2Ut
MTQzYzNkMzhkMTdjLzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2UtMTQzYzNkMzhkMTdj
LzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZdfEVDr
jO1nnD15qwKamkR02DaHF1uf/teXt4Xb887zbItNOjgg8rQxzg1FDmoW5NYJjxl2
a2sPl3gemRcera4zB1ynN36H0wTngztvh9P/skj9S4qQ1lCJdcJ6MrARl7j6wDsW
4N6MiUgpHOE05mWtcVX5u12Pe+t5SS/bgsNnTdy8G7DsvNYR4xPnOnQoiGLYvuqE
ykZkfC2pZf3a4x6gcfHCnWiC28lamuNlvIMWpcrI0/XlCcysBWxEpPYoovIYrHos
184uKOmHXAkQj4bVFFOYwhoAVFvhPlcr921mUUwwJO0Q7VXg10V8nz7f6RIK/oSr
+vyJZtd0wWSfxg==
-----END CERTIFICATE-----