Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          Zgpv52x7NLvHOlhgzRMoewDmVKU7Plsua5YVzzueIT4=
Subject key identifier:   B6:66:B3:02:FE:15:2A:6E:34:A8:0E:D2:59:FB:DC:6D:A8:CD:17:4A
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       01962F7444F7384B5F180BB222515AC47326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: NIrLKtOMXxDzC9AluRNxTFwX+Q2l1HvsqJIRJp9oAwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:f7:38:4b:5f:18:0b:b2:22:51:5a:c4:73:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=b666b302fe152a6e34a80ed259fbdc6da8cd174a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:ea:67:90:ed:16:88:c2:5a:97:81:70:bf:
                    87:dc:bd:77:38:b9:c8:07:32:d7:6c:80:85:7d:1e:
                    ad:9f:a2:f0:44:24:69:f4:d1:19:19:a7:aa:24:96:
                    18:de:c2:24:b8:ee:0a:f9:d3:b2:19:ef:f2:df:e8:
                    fc:af:58:9b:3c:4c:ea:6d:46:ef:6f:fa:0f:3a:9d:
                    df:2d:2c:30:86:dd:b7:58:60:b9:62:28:46:2e:0a:
                    8f:12:ba:62:e8:9c:79:8f:a8:d9:12:72:c5:d8:ed:
                    70:24:90:0b:05:83:ea:74:5d:d1:66:a7:c7:02:66:
                    ce:7e:6c:27:f4:4d:bf:65:64:60:c7:b8:ff:7c:53:
                    5d:77:09:b3:00:09:58:b6:76:5d:ad:0c:15:91:e2:
                    07:3e:10:7d:3f:16:b3:aa:f6:87:d9:aa:8e:e9:10:
                    f3:76:4c:fe:76:ed:75:74:86:0b:e2:ca:f6:4c:71:
                    de:f5:8b:a3:99:b8:fa:2a:50:e8:11:69:82:c7:98:
                    70:c1:5b:a8:25:f5:2a:4b:8f:fa:f5:2d:db:93:b1:
                    43:36:76:f7:45:fc:6c:e7:45:18:77:a7:5a:b9:32:
                    67:67:c8:db:ba:8f:3c:e7:54:ea:64:19:8c:0d:8a:
                    9c:52:67:83:bc:3d:8f:fa:d2:60:78:e3:04:c6:ab:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:B3:02:FE:15:2A:6E:34:A8:0E:D2:59:FB:DC:6D:A8:CD:17:4A
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:3d:79:1b:c3:f2:6b:7a:35:fe:60:47:90:70:5c:e0:fe:
         95:ef:d9:02:0b:17:29:43:cd:bd:42:a5:6a:2c:85:37:9d:2b:
         90:1d:7b:cb:65:46:99:cc:a3:09:0e:d3:77:ba:56:28:f4:87:
         1f:5c:a2:6f:29:50:16:0f:07:ce:75:ca:c1:ac:0c:c7:85:9d:
         a2:23:29:26:9f:b9:94:a7:a0:c1:d7:3d:d4:ba:97:87:2e:4c:
         3f:02:1b:7f:c7:82:5d:88:82:88:3b:ad:f7:89:ed:f9:a9:4d:
         52:66:78:87:ad:b3:3e:a3:6c:30:5a:75:b5:90:30:04:9e:a7:
         ee:56:10:16:b0:78:6b:91:d4:11:9b:d9:65:f1:8f:d9:34:0d:
         73:3e:30:0f:8e:38:99:fc:e3:85:42:63:25:1c:7c:e8:4b:8b:
         56:e2:25:ba:80:c1:db:8d:2f:34:41:e2:18:71:4a:74:23:d0:
         4d:c3:b3:7b:60:a7:71:f3:f9:89:ba:03:a0:7f:03:16:65:2b:
         45:b8:ed:8a:64:5a:a9:61:c3:46:5e:71:af:06:4f:40:c4:f2:
         de:f3:f1:30:d1:64:7f:5f:b3:d5:75:64:f9:24:15:aa:cd:13:
         7c:2c:38:41:87:da:d8:7d:f5:76:fd:e0:04:e2:88:81:32:03:
         74:d4:a9:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdET3OEtfGAuyIlFaxHMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTgyMjZjZGNmNzQxZGNjOGE0MmE2NTlhOGIzZGUyMTk4
MTg4ZjkwHhcNMjUwNDEzMTQwMTExWhcNMjUwNDE0MTQwMTExWjAzMTEwLwYDVQQD
EyhiNjY2YjMwMmZlMTUyYTZlMzRhODBlZDI1OWZiZGM2ZGE4Y2QxNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr/qZ5DtFojCWpeBcL+H3L13OLnI
BzLXbICFfR6tn6LwRCRp9NEZGaeqJJYY3sIkuO4K+dOyGe/y3+j8r1ibPEzqbUbv
b/oPOp3fLSwwht23WGC5YihGLgqPErpi6Jx5j6jZEnLF2O1wJJALBYPqdF3RZqfH
AmbOfmwn9E2/ZWRgx7j/fFNddwmzAAlYtnZdrQwVkeIHPhB9PxazqvaH2aqO6RDz
dkz+du11dIYL4sr2THHe9Yujmbj6KlDoEWmCx5hwwVuoJfUqS4/69S3bk7FDNnb3
Rfxs50UYd6dauTJnZ8jbuo8851TqZBmMDYqcUmeDvD2P+tJgeOMExqtztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZmswL+FSpuNKgO0ln73G2ozRdKMB8GA1UdIwQY
MBaAFA6YImzc90HcyKQqZZqLPeIZgYj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83OTAyNGQtNWI0NS00ZWY0LWI1Mjgt
ZTljN2I1NTA2ZTU1LzEvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83OTAyNGQtNWI0NS00ZWY0LWI1MjgtZTljN2I1NTA2ZTU1
LzEvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGw9eRvD
8mt6Nf5gR5BwXOD+le/ZAgsXKUPNvUKlaiyFN50rkB17y2VGmcyjCQ7Td7pWKPSH
H1yibylQFg8HznXKwawMx4WdoiMpJp+5lKegwdc91LqXhy5MPwIbf8eCXYiCiDut
94nt+alNUmZ4h62zPqNsMFp1tZAwBJ6n7lYQFrB4a5HUEZvZZfGP2TQNcz4wD444
mfzjhUJjJRx86EuLVuIluoDB240vNEHiGHFKdCPQTcOze2CncfP5iboDoH8DFmUr
RbjtimRaqWHDRl5xrwZPQMTy3vPxMNFkf1+z1XVk+SQVqs0TfCw4QYfa2H31dv3g
BOKIgTIDdNSp4A==
-----END CERTIFICATE-----