Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File:                     0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier:          48CsN3e3QjPd7eLJj6k6k7GGTuZ19Tw6UxuxVutOwzc=
Subject key identifier:   67:CC:38:6B:9B:7F:F1:1B:AD:28:AE:4F:D3:25:83:69:C6:53:16:EE
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer:       /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial:       01962DF3FFC0B7C7F1A43E98DEEAE2BE562C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number:          0949
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: 5V/v+FCJtGVkQmp+QBpUHS+wIIAg/WlzP00eXwCJRFM=)
                          2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ff:c0:b7:c7:f1:a4:3e:98:de:ea:e2:be:56:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=67cc386b9b7ff11bad28ae4fd3258369c65316ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:3c:71:82:80:df:87:42:c2:6e:87:c6:f6:
                    8e:f6:b8:fa:05:aa:74:c6:6a:a7:c5:b8:2d:0c:f0:
                    e0:20:61:91:2a:71:b6:29:87:1c:1c:fc:6f:a2:74:
                    ff:8e:d7:ce:ac:f7:4d:da:d8:9c:f6:98:af:8a:ff:
                    3c:21:6e:e4:69:8e:80:3a:43:85:9b:10:50:d9:eb:
                    a9:31:5e:64:b7:ac:c8:b3:51:b4:16:7f:2a:be:ec:
                    c5:14:d4:3f:56:a0:71:56:fd:4e:85:cb:8c:89:30:
                    80:6a:73:5c:32:8f:44:c5:78:f2:e2:7f:b0:02:df:
                    a0:07:bf:fb:62:74:d7:31:a7:af:be:c9:ab:4b:92:
                    8c:70:ab:28:ee:2d:87:6e:10:4f:67:c9:80:0a:fd:
                    9b:9c:6b:26:cc:87:1b:fa:db:55:d3:7c:03:7a:b7:
                    96:71:81:c9:4c:97:1b:5e:c5:40:38:60:19:f7:1a:
                    77:44:48:51:b0:98:bd:f0:82:c6:aa:7a:a3:a3:3f:
                    54:df:c7:0c:58:8b:ae:8f:35:ed:37:1a:48:70:24:
                    cd:0d:9c:aa:ab:f8:9d:0e:01:cb:8f:9a:25:79:f7:
                    05:e9:21:7e:80:f2:3c:93:07:1a:3a:45:de:83:c4:
                    7c:c1:bb:fe:e0:36:af:41:66:84:41:91:01:fa:c5:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:38:6B:9B:7F:F1:1B:AD:28:AE:4F:D3:25:83:69:C6:53:16:EE
            X509v3 Authority Key Identifier:
                keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:16:df:6e:04:b7:b2:ec:80:76:df:35:3b:d5:8b:2f:f7:9e:
         8e:c7:e0:c4:f8:2b:3a:19:0f:03:9d:fb:b8:96:0a:9d:71:ab:
         de:a1:8b:bb:dc:fd:7f:5c:20:6e:e2:5e:7d:1f:67:a2:3e:14:
         4d:46:55:25:33:42:c2:67:64:f1:b1:e9:2e:9e:ba:83:72:dc:
         f6:ac:f9:5c:25:1a:4c:6f:69:67:c5:fa:df:ec:a2:e4:ca:19:
         29:73:71:f1:00:6e:51:7b:4a:b5:36:1f:bc:ec:27:6c:94:37:
         5e:9d:fe:58:7a:a5:92:68:2c:11:f1:2c:10:85:53:ab:67:13:
         ea:86:68:20:7c:89:28:83:6d:26:94:a2:62:d8:cc:03:93:5c:
         1e:8c:1b:b9:d9:c5:b4:f5:a6:8d:d6:06:9a:1a:92:fb:e2:07:
         b0:cf:63:c6:75:f7:13:be:3d:1a:5a:b1:cf:e9:d6:04:7a:65:
         91:cf:65:b8:e1:ed:b8:8f:24:36:9e:1b:ac:45:4a:2e:db:dd:
         5e:c3:66:26:47:6c:98:b2:22:31:8f:90:44:cc:9f:e2:a8:69:
         30:85:f0:36:fd:d4:6f:ce:8c:01:b7:fe:a9:dc:2c:4b:32:0f:
         43:55:95:5f:80:c5:85:d2:39:47:e6:cb:e7:84:b4:2c:9d:32:
         a3:79:16:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8//At8fxpD6Y3urivlYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz
OTgzOWYwHhcNMjUwNDEzMDcwMTI3WhcNMjUwNDE0MDcwMTI3WjAzMTEwLwYDVQQD
Eyg2N2NjMzg2YjliN2ZmMTFiYWQyOGFlNGZkMzI1ODM2OWM2NTMxNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliY8cYKA34dCwm6HxvaO9rj6Bap0
xmqnxbgtDPDgIGGRKnG2KYccHPxvonT/jtfOrPdN2tic9piviv88IW7kaY6AOkOF
mxBQ2eupMV5kt6zIs1G0Fn8qvuzFFNQ/VqBxVv1OhcuMiTCAanNcMo9ExXjy4n+w
At+gB7/7YnTXMaevvsmrS5KMcKso7i2HbhBPZ8mACv2bnGsmzIcb+ttV03wDereW
cYHJTJcbXsVAOGAZ9xp3REhRsJi98ILGqnqjoz9U38cMWIuujzXtNxpIcCTNDZyq
q/idDgHLj5olefcF6SF+gPI8kwcaOkXeg8R8wbv+4DavQWaEQZEB+sWjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfMOGubf/EbrSiuT9Mlg2nGUxbuMB8GA1UdIwQY
MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt
ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm
LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhbfbgS3
suyAdt81O9WLL/eejsfgxPgrOhkPA537uJYKnXGr3qGLu9z9f1wgbuJefR9noj4U
TUZVJTNCwmdk8bHpLp66g3Lc9qz5XCUaTG9pZ8X63+yi5MoZKXNx8QBuUXtKtTYf
vOwnbJQ3Xp3+WHqlkmgsEfEsEIVTq2cT6oZoIHyJKINtJpSiYtjMA5NcHowbudnF
tPWmjdYGmhqS++IHsM9jxnX3E749Glqxz+nWBHplkc9luOHtuI8kNp4brEVKLtvd
XsNmJkdsmLIiMY+QRMyf4qhpMIXwNv3Ub86MAbf+qdwsSzIPQ1WVX4DFhdI5R+bL
54S0LJ0yo3kWoQ==
-----END CERTIFICATE-----