Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File:                     Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier:          ZaGmjl2XhHP6ydGrTjQ/hxLtoebgsdUPG0c7fTIgfE0=
Subject key identifier:   44:17:D9:3F:86:72:84:E9:A8:8B:F9:86:2A:A4:E5:D9:5E:07:60:B7
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer:       /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial:       01962F7475022C2B3A9C5120117933B51C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: 8RblwUYsRY2xScMpJywMZqvr2SP5eQbYdK3nPmc7dso=)
                          2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:02:2c:2b:3a:9c:51:20:11:79:33:b5:1c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=4417d93f867284e9a88bf9862aa4e5d95e0760b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:90:05:90:8a:30:f7:0f:c0:42:a4:d1:e7:
                    e9:bc:8f:f1:29:64:cf:a8:95:5c:ff:d9:12:b7:ec:
                    fb:4a:e0:c6:a7:9b:e4:77:f3:c5:25:d5:8a:98:79:
                    ff:80:fe:a1:b6:4c:0c:6f:4b:d2:d8:04:b8:ba:61:
                    16:ab:f4:7c:b4:22:28:a4:a7:cb:70:fa:ee:60:85:
                    fd:fc:23:59:0b:2c:cd:43:da:65:ae:c9:5f:27:2c:
                    14:d6:d4:27:ba:43:40:63:4e:ef:eb:d8:a8:8c:e4:
                    2b:e1:59:a9:aa:e1:81:18:af:27:be:66:cb:30:aa:
                    01:ca:05:43:a5:93:cc:a6:78:5d:dc:5d:c3:a3:ca:
                    07:5e:ce:e6:2c:08:84:7d:aa:2f:d1:55:09:bb:df:
                    f7:6c:93:bd:11:26:49:ea:4a:1e:2e:5a:5f:ba:f3:
                    63:4b:07:d6:04:0c:de:9a:21:80:4d:09:72:41:f5:
                    c7:54:03:7f:74:60:52:c4:50:30:a3:60:77:01:81:
                    b6:3b:34:96:a5:81:28:75:dc:88:af:a7:9b:65:67:
                    e7:a4:b6:b4:d8:a5:ca:57:40:9f:f1:41:83:68:15:
                    e5:e1:44:f4:62:8b:1e:f9:69:3f:54:8b:b4:db:1c:
                    cc:79:7e:00:a6:a2:94:03:13:70:2d:a1:bb:aa:c0:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:17:D9:3F:86:72:84:E9:A8:8B:F9:86:2A:A4:E5:D9:5E:07:60:B7
            X509v3 Authority Key Identifier:
                keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:52:b6:f9:7b:a3:0b:a2:9d:02:a7:74:d6:8e:60:fe:47:
         f0:79:15:aa:77:fc:30:1c:df:02:a7:d1:a4:16:d0:28:95:d7:
         fc:db:fd:92:4e:a9:f4:93:4e:56:31:af:be:cc:45:2f:a3:c9:
         9a:05:88:d5:46:a7:78:23:60:00:c0:bc:96:e8:d9:ed:8d:98:
         83:38:c5:b8:f7:15:a2:1d:3e:ce:28:c1:bd:53:cc:bc:45:bf:
         26:f8:c9:76:a2:a4:e7:a4:71:ae:23:75:e1:0c:2f:aa:4b:95:
         b3:48:97:8e:40:98:f7:b4:e1:04:00:a4:8b:35:dd:e9:28:3f:
         b5:ba:df:de:64:ba:40:dc:de:2d:8f:b6:b2:3a:19:eb:42:23:
         8e:0c:56:a4:78:4d:c2:b3:5b:e9:c2:1b:ea:91:d4:d2:65:ce:
         9a:a3:ae:a6:fe:94:02:04:18:74:0f:1b:15:6f:10:86:f8:e3:
         a3:6f:b1:91:fc:c3:83:86:20:c6:93:3d:8f:85:30:dd:0e:f5:
         1a:bc:8f:58:22:3b:bb:74:59:b8:6a:98:41:a6:23:26:71:0f:
         2e:3f:41:7f:f9:fd:26:2b:16:d3:b6:3a:1b:f4:c0:5f:36:77:
         6b:ba:30:7b:9e:0f:5f:83:6f:02:89:6a:5e:58:68:93:58:b5:
         dc:c6:e6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHUCLCs6nFEgEXkztRwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx
ZDQ2Y2IwHhcNMjUwNDEzMTQwMTIzWhcNMjUwNDE0MTQwMTIzWjAzMTEwLwYDVQQD
Eyg0NDE3ZDkzZjg2NzI4NGU5YTg4YmY5ODYyYWE0ZTVkOTVlMDc2MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw+QBZCKMPcPwEKk0efpvI/xKWTP
qJVc/9kSt+z7SuDGp5vkd/PFJdWKmHn/gP6htkwMb0vS2AS4umEWq/R8tCIopKfL
cPruYIX9/CNZCyzNQ9plrslfJywU1tQnukNAY07v69iojOQr4VmpquGBGK8nvmbL
MKoBygVDpZPMpnhd3F3Do8oHXs7mLAiEfaov0VUJu9/3bJO9ESZJ6koeLlpfuvNj
SwfWBAzemiGATQlyQfXHVAN/dGBSxFAwo2B3AYG2OzSWpYEoddyIr6ebZWfnpLa0
2KXKV0Cf8UGDaBXl4UT0Yose+Wk/VIu02xzMeX4ApqKUAxNwLaG7qsCw9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQX2T+GcoTpqIv5hiqk5dleB2C3MB8GA1UdIwQY
MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct
OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw
LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsZStvl7
owuinQKndNaOYP5H8HkVqnf8MBzfAqfRpBbQKJXX/Nv9kk6p9JNOVjGvvsxFL6PJ
mgWI1UaneCNgAMC8lujZ7Y2YgzjFuPcVoh0+zijBvVPMvEW/JvjJdqKk56RxriN1
4QwvqkuVs0iXjkCY97ThBACkizXd6Sg/tbrf3mS6QNzeLY+2sjoZ60IjjgxWpHhN
wrNb6cIb6pHU0mXOmqOupv6UAgQYdA8bFW8Qhvjjo2+xkfzDg4YgxpM9j4Uw3Q71
GryPWCI7u3RZuGqYQaYjJnEPLj9Bf/n9JisW07Y6G/TAXzZ3a7owe54PX4NvAolq
Xlhok1i13MbmAQ==
-----END CERTIFICATE-----