Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File:                     1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier:          PRVt+x7e25E6fbp3E7n39VKAXzjIhpO0t0Ma4qAu6aM=
Subject key identifier:   FA:65:25:29:36:7D:32:01:AA:67:11:27:45:2B:E3:45:CC:2C:A1:CC
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer:       /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial:       01962ECFB4EBEA71AF74FF3493FE958E3047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: UgrxGDSEeB3TWi0V5WywGpi3N1AftwVWY7yq0t8Kuhw=)
                          2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:eb:ea:71:af:74:ff:34:93:fe:95:8e:30:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=fa652529367d3201aa671127452be345cc2ca1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:89:76:c1:12:fd:c8:f1:96:84:e3:b6:c6:
                    0a:14:29:f6:f4:1a:b4:7d:fb:65:14:d0:92:7a:fb:
                    d2:c9:16:2b:6a:2b:35:8f:7c:3f:49:2c:02:b6:be:
                    3d:4e:ce:7b:57:ba:7d:a0:94:87:f7:62:9a:7e:0e:
                    66:e6:b5:13:52:b8:36:06:b8:4e:4c:c5:53:be:83:
                    30:73:38:7d:f7:b4:b1:0c:f0:71:4d:a8:7e:d6:89:
                    a1:7f:4a:55:19:42:71:45:12:38:5b:09:3b:cb:67:
                    8a:54:d3:48:48:1e:3f:b7:54:63:08:9d:04:95:49:
                    1a:4e:70:0d:70:52:6f:4c:22:eb:21:6c:df:19:51:
                    f5:0b:46:11:43:5f:eb:54:9a:d7:68:5e:ed:52:6f:
                    9f:fe:84:bc:e2:b0:e5:65:fd:83:3e:1a:fd:8a:bc:
                    f9:42:03:88:6d:6e:ca:a7:70:c2:56:cd:6c:95:c9:
                    f8:a1:42:6f:d0:17:6b:fd:19:50:ce:43:71:87:2f:
                    f1:de:8b:31:b8:b4:b0:db:d2:8c:6f:5a:b1:06:78:
                    4f:92:4e:48:e4:83:be:51:15:d1:21:59:22:c7:83:
                    b3:64:30:ec:87:d7:d0:91:44:95:50:a3:05:63:a7:
                    cf:46:ac:5c:91:61:f3:6a:5b:b3:3e:12:aa:3a:ee:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:65:25:29:36:7D:32:01:AA:67:11:27:45:2B:E3:45:CC:2C:A1:CC
            X509v3 Authority Key Identifier:
                keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:f1:82:a5:5d:b8:88:00:75:70:27:85:1d:c4:a4:bf:ee:
         2e:a9:0d:3b:a9:a5:ac:9a:f0:af:b6:5b:73:18:57:fc:fb:4f:
         1c:3c:88:a1:14:9a:57:e1:71:70:a1:ac:93:9b:2c:d4:b6:d8:
         17:1e:b3:df:4b:05:1e:03:bb:8c:8b:14:42:dd:b8:94:d6:c0:
         38:5a:ce:aa:2a:b4:2d:00:9c:f9:75:29:75:95:5a:7b:46:7a:
         3e:92:fb:67:1d:71:d3:5b:43:e1:15:e2:c6:cb:15:05:69:49:
         93:98:48:b9:b5:89:9c:6b:5f:52:a3:e7:ab:14:53:9f:e8:21:
         76:67:25:67:c7:70:51:37:4b:2c:24:97:85:0f:38:2c:52:a3:
         c4:3f:ef:bb:3c:a4:fb:91:34:ad:ad:4e:17:c7:f1:88:3c:b6:
         33:90:3d:57:57:de:9e:c4:cf:9a:9e:ee:85:75:ad:52:ca:76:
         40:8b:6c:74:3e:34:d7:a4:09:80:6b:e3:04:52:52:9c:20:23:
         cd:e0:ac:a2:60:d7:ad:12:01:61:7b:0e:25:61:33:1b:a1:b0:
         7b:86:49:52:e5:92:50:1f:a0:47:4f:9d:1f:5d:d6:4e:1a:93:
         3f:a0:ae:81:b9:ae:74:a6:d1:92:a0:04:e6:cf:25:9e:7c:89:
         73:e6:26:67
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuz7Tr6nGvdP80k/6VjjBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
EyhmYTY1MjUyOTM2N2QzMjAxYWE2NzExMjc0NTJiZTM0NWNjMmNhMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1+JdsES/cjxloTjtsYKFCn29Bq0
fftlFNCSevvSyRYrais1j3w/SSwCtr49Ts57V7p9oJSH92Kafg5m5rUTUrg2BrhO
TMVTvoMwczh997SxDPBxTah+1omhf0pVGUJxRRI4Wwk7y2eKVNNISB4/t1RjCJ0E
lUkaTnANcFJvTCLrIWzfGVH1C0YRQ1/rVJrXaF7tUm+f/oS84rDlZf2DPhr9irz5
QgOIbW7Kp3DCVs1slcn4oUJv0Bdr/RlQzkNxhy/x3osxuLSw29KMb1qxBnhPkk5I
5IO+URXRIVkix4OzZDDsh9fQkUSVUKMFY6fPRqxckWHzaluzPhKqOu5a3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPplJSk2fTIBqmcRJ0Ur40XMLKHMMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqm/x
gqVduIgAdXAnhR3EpL/uLqkNO6mlrJrwr7ZbcxhX/PtPHDyIoRSaV+FxcKGsk5ss
1LbYFx6z30sFHgO7jIsUQt24lNbAOFrOqiq0LQCc+XUpdZVae0Z6PpL7Zx1x01tD
4RXixssVBWlJk5hIubWJnGtfUqPnqxRTn+ghdmclZ8dwUTdLLCSXhQ84LFKjxD/v
uzyk+5E0ra1OF8fxiDy2M5A9V1fensTPmp7uhXWtUsp2QItsdD4016QJgGvjBFJS
nCAjzeCsomDXrRIBYXsOJWEzG6Gwe4ZJUuWSUB+gR0+dH13WThqTP6CugbmudKbR
kqAE5s8lnnyJc+YmZw==
-----END CERTIFICATE-----