Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File:                     upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier:          ZUTr+1JPkk8nYB0RlHBRqfcJSEqXqHO2QU9JwN+8DeQ=
Subject key identifier:   43:15:13:03:D8:BA:76:53:64:83:54:82:33:D7:69:52:EE:7D:9E:4D
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer:       /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial:       01962E61E444BBC18493F735403C97B2040B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number:          0870
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: iB0nh2pqz5-ySXR-fF2YCAS68X8.roa (hash: Y94jSzgT6noKQkiYTVT17vXi3fN7I6D0Bkm1xKFYYKk=)
                          2: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: 5l1LnuMx+iqmougVLN5bX4mlT0o8Fps8MBRqn/ivNsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:44:bb:c1:84:93:f7:35:40:3c:97:b2:04:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=43151303d8ba76536483548233d76952ee7d9e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:06:13:3d:5a:54:cd:f8:8b:76:0d:e9:75:
                    37:0f:cc:2d:48:c7:aa:14:b8:5d:8d:40:ea:8a:18:
                    3b:55:f8:96:68:ed:ee:ac:2c:3b:77:82:2d:ea:68:
                    6b:18:5e:d9:0e:3d:0e:70:47:07:a4:b6:57:28:5c:
                    76:64:e5:d4:90:45:ce:db:d9:e1:08:9c:dd:5a:5b:
                    18:0f:0c:b6:37:59:93:7f:a9:0f:19:b9:47:1e:6b:
                    27:b7:22:83:7d:e4:0e:96:cb:55:8f:6f:86:d5:59:
                    f0:33:5c:4b:76:1b:af:dd:37:13:a9:41:00:d9:11:
                    57:84:ab:41:8f:88:a2:80:b1:30:36:35:d8:20:e2:
                    6d:55:a2:34:6e:62:cd:64:cd:bb:b9:a5:28:3a:73:
                    f1:68:d7:74:29:ed:f9:a6:fc:75:6c:11:ec:36:94:
                    02:10:be:6f:db:d4:4d:11:e4:45:be:6c:6f:83:ba:
                    2f:af:45:24:17:d6:6e:1b:1f:f5:14:af:1b:ea:09:
                    0e:7c:13:30:bb:80:69:14:35:48:ed:d7:b5:55:b0:
                    11:5f:af:4b:cd:73:3e:dc:70:05:c5:ef:c4:ff:67:
                    dd:21:78:1e:e0:e5:7f:3e:c5:9b:c3:35:22:1b:0e:
                    14:59:0e:43:40:99:d4:b1:08:dc:4f:54:6f:8c:58:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:15:13:03:D8:BA:76:53:64:83:54:82:33:D7:69:52:EE:7D:9E:4D
            X509v3 Authority Key Identifier:
                keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:c4:b2:7b:f5:85:41:45:0a:e6:03:6a:02:aa:5f:ed:93:
         be:43:c6:76:14:ce:43:08:74:bc:5f:22:52:a4:30:6d:dc:12:
         d6:dc:52:2f:68:fb:c4:5e:7f:42:d9:06:dd:55:ad:fc:2d:56:
         14:f7:54:81:c4:cb:ab:7b:1b:2b:5a:d9:ed:b0:cf:6d:32:bb:
         8e:d5:93:1f:a1:ed:31:d7:ba:e9:ac:0e:7a:3f:a5:b2:2f:a2:
         3d:be:88:1c:8c:78:d6:0c:f8:c9:84:d3:75:30:42:44:79:52:
         f3:22:7d:67:f7:9a:41:0b:40:e4:b8:5f:0d:64:f1:94:53:44:
         e3:d5:9c:e8:16:4c:d8:42:f5:75:01:ff:97:5f:8a:cc:fe:86:
         a0:6c:d6:9d:76:ef:eb:92:ac:ca:e6:93:b0:1e:a3:6f:e8:9c:
         23:22:80:d6:d8:68:06:a3:10:d9:27:dc:c1:af:df:54:7b:30:
         db:c3:23:bd:08:71:3d:3a:2d:f9:ac:e1:1d:95:d3:a6:53:cc:
         be:f4:50:ef:0f:6a:9c:cf:49:eb:fd:a4:bf:07:5b:b4:cd:61:
         9c:3b:6a:40:8b:92:e6:fc:ad:3e:59:ce:17:6b:30:ed:7c:f4:
         1e:14:b4:46:be:25:af:25:9f:37:ec:c7:27:c9:2d:61:eb:23:
         55:b2:e3:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeREu8GEk/c1QDyXsgQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOTcwZGUxMjZiM2EwYjU0OGRhZDc2ZjVlZmE4ODg1NWM2
ZjFmZjIwHhcNMjUwNDEzMDkwMTI5WhcNMjUwNDE0MDkwMTI5WjAzMTEwLwYDVQQD
Eyg0MzE1MTMwM2Q4YmE3NjUzNjQ4MzU0ODIzM2Q3Njk1MmVlN2Q5ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcYGEz1aVM34i3YN6XU3D8wtSMeq
FLhdjUDqihg7VfiWaO3urCw7d4It6mhrGF7ZDj0OcEcHpLZXKFx2ZOXUkEXO29nh
CJzdWlsYDwy2N1mTf6kPGblHHmsntyKDfeQOlstVj2+G1VnwM1xLdhuv3TcTqUEA
2RFXhKtBj4iigLEwNjXYIOJtVaI0bmLNZM27uaUoOnPxaNd0Ke35pvx1bBHsNpQC
EL5v29RNEeRFvmxvg7ovr0UkF9ZuGx/1FK8b6gkOfBMwu4BpFDVI7de1VbARX69L
zXM+3HAFxe/E/2fdIXge4OV/PsWbwzUiGw4UWQ5DQJnUsQjcT1RvjFhhHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMVEwPYunZTZINUgjPXaVLufZ5NMB8GA1UdIwQY
MBaAFLqXDeEms6C1SNrXb176iIVcbx/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXBjTjRTYXpvTFZJMnRkdlh2cUloVnh2SF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjcyZTgtZjBkMi00ZDY2LWI1MjAt
M2FiYTU5NWI1OGE4LzEvdXBjTjRTYXpvTFZJMnRkdlh2cUloVnh2SF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZjcyZTgtZjBkMi00ZDY2LWI1MjAtM2FiYTU5NWI1OGE4
LzEvdXBjTjRTYXpvTFZJMnRkdlh2cUloVnh2SF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ43Esnv1
hUFFCuYDagKqX+2TvkPGdhTOQwh0vF8iUqQwbdwS1txSL2j7xF5/QtkG3VWt/C1W
FPdUgcTLq3sbK1rZ7bDPbTK7jtWTH6HtMde66awOej+lsi+iPb6IHIx41gz4yYTT
dTBCRHlS8yJ9Z/eaQQtA5LhfDWTxlFNE49Wc6BZM2EL1dQH/l1+KzP6GoGzWnXbv
65KsyuaTsB6jb+icIyKA1thoBqMQ2Sfcwa/fVHsw28MjvQhxPTot+azhHZXTplPM
vvRQ7w9qnM9J6/2kvwdbtM1hnDtqQIuS5vytPlnOF2sw7Xz0HhS0Rr4lryWfN+zH
J8ktYesjVbLjxw==
-----END CERTIFICATE-----