Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File:                     FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier:          iuiWr+O3src7htEXh1mqhO01UsDbp4E9vLfFfCs+BAg=
Subject key identifier:   53:3C:9F:13:47:B4:00:87:4C:F3:F9:64:8B:7C:0E:20:8E:FB:B9:91
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer:       /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial:       01962DF43F0359AA69625E32C4570F953C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: MDFJXmq9dHnApVXtlrCVFj5wjXcJJtMmnnD/qqmXXcw=)
                          2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:03:59:aa:69:62:5e:32:c4:57:0f:95:3c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=533c9f1347b400874cf3f9648b7c0e208efbb991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:7b:e3:aa:4f:08:3d:41:e5:62:65:2e:b5:
                    60:f9:cd:6c:b8:1c:e6:58:a6:dc:de:44:a4:09:d2:
                    6d:dc:2d:64:39:0d:12:cc:60:4b:23:5f:ac:5e:dc:
                    ae:6f:79:5b:7d:33:04:f3:a5:62:72:27:64:a1:fa:
                    4f:fc:e0:36:69:39:b3:38:26:95:92:58:cd:10:1f:
                    b3:43:17:b9:c3:00:68:72:c4:e9:fa:08:06:0c:88:
                    52:e5:d2:db:dd:50:b7:f6:be:24:6f:b0:c8:62:15:
                    60:26:9e:b2:46:2b:6c:6b:e5:b0:80:18:95:cb:29:
                    48:6b:0e:49:df:14:96:9b:aa:05:ee:db:73:00:e7:
                    60:1b:eb:cf:20:c3:83:40:68:6d:b6:2c:a0:b4:4c:
                    51:d9:d3:89:cd:a6:d2:38:ae:cd:a6:94:b3:1b:8a:
                    5f:06:b0:8f:c2:15:88:2a:a1:9f:a7:b5:24:1c:f3:
                    5b:fc:db:7e:ff:5b:3b:09:4d:74:51:6a:03:df:14:
                    ae:28:1d:30:7f:2f:13:dc:ea:67:5f:78:20:be:76:
                    3b:3c:dc:bd:27:81:0a:c2:2d:97:af:d7:af:7f:eb:
                    61:31:fc:a5:05:0c:3d:9a:88:ca:73:70:0f:74:d2:
                    b6:20:1d:67:6f:d9:22:9a:3c:dd:55:d9:df:85:0f:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:9F:13:47:B4:00:87:4C:F3:F9:64:8B:7C:0E:20:8E:FB:B9:91
            X509v3 Authority Key Identifier:
                keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:d0:55:1e:46:fe:35:63:7c:ab:bb:0d:d0:e0:bb:5c:57:
         c6:a0:a1:2a:a2:d5:9b:85:34:e0:2e:a8:0d:4c:94:6b:03:35:
         fa:eb:db:b8:47:cb:62:1a:17:08:82:88:38:b2:3c:0e:c5:75:
         8d:bc:b4:dd:49:8f:40:ce:f4:3b:07:28:d4:ff:30:34:bf:83:
         6a:bc:4f:f1:a8:b7:38:dd:22:8f:3b:48:c0:b9:6a:70:8e:3c:
         a7:d6:87:43:79:2f:97:ad:7a:6d:16:20:ee:1b:a4:ca:b5:57:
         58:e8:3a:bf:16:b6:a2:bb:e8:5d:6b:bd:26:d6:7a:e5:5f:1b:
         39:7b:76:9a:b5:6a:6e:8d:3e:2e:64:37:3f:a8:b0:e1:8c:33:
         33:ea:66:12:fc:8b:88:c6:14:f2:b0:33:2d:f9:71:98:db:f5:
         5a:38:04:c1:b8:f1:2a:ca:92:47:7b:b7:26:c9:83:42:c1:40:
         80:c5:c7:d3:7b:01:6c:d3:80:4e:f9:e8:f9:23:e2:18:1d:be:
         7d:6e:4c:91:c4:6f:74:c4:6e:1a:92:26:73:5f:ae:21:78:45:
         7b:52:56:5b:56:6b:d7:ed:fb:7f:73:fa:23:37:2f:df:40:09:
         32:3e:81:b3:9f:64:96:80:64:80:42:b7:b6:19:fc:d6:42:a0:
         0b:64:45:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D8DWappYl4yxFcPlTxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw
NmM2NzkwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg1MzNjOWYxMzQ3YjQwMDg3NGNmM2Y5NjQ4YjdjMGUyMDhlZmJiOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4N746pPCD1B5WJlLrVg+c1suBzm
WKbc3kSkCdJt3C1kOQ0SzGBLI1+sXtyub3lbfTME86VicidkofpP/OA2aTmzOCaV
kljNEB+zQxe5wwBocsTp+ggGDIhS5dLb3VC39r4kb7DIYhVgJp6yRitsa+WwgBiV
yylIaw5J3xSWm6oF7ttzAOdgG+vPIMODQGhttiygtExR2dOJzabSOK7NppSzG4pf
BrCPwhWIKqGfp7UkHPNb/Nt+/1s7CU10UWoD3xSuKB0wfy8T3OpnX3ggvnY7PNy9
J4EKwi2Xr9evf+thMfylBQw9mojKc3APdNK2IB1nb9kimjzdVdnfhQ8WAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM8nxNHtACHTPP5ZIt8DiCO+7mRMB8GA1UdIwQY
MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt
ZmRlYmYxMjViNDhlLzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl
LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpbQVR5G
/jVjfKu7DdDgu1xXxqChKqLVm4U04C6oDUyUawM1+uvbuEfLYhoXCIKIOLI8DsV1
jby03UmPQM70Owco1P8wNL+DarxP8ai3ON0ijztIwLlqcI48p9aHQ3kvl616bRYg
7hukyrVXWOg6vxa2orvoXWu9JtZ65V8bOXt2mrVqbo0+LmQ3P6iw4YwzM+pmEvyL
iMYU8rAzLflxmNv1WjgEwbjxKsqSR3u3JsmDQsFAgMXH03sBbNOATvno+SPiGB2+
fW5MkcRvdMRuGpImc1+uIXhFe1JWW1Zr1+37f3P6Izcv30AJMj6Bs59kloBkgEK3
thn81kKgC2RFkQ==
-----END CERTIFICATE-----