Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File:                     U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier:          3gZRPfPTMqQ6Sea8+A4v1Zr3YtjaI3nZ+ZTH95xzPVs=
Subject key identifier:   2A:0F:74:C0:BE:87:37:5C:32:DC:DF:A2:62:06:0A:60:30:CC:76:F6
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer:       /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial:       01962F3D66EED13432BECC32191785662CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: fAkQ6T45P9YYsmbIOWFAehirEOByuF9+5u5HAO6CvYk=)
                          2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:ee:d1:34:32:be:cc:32:19:17:85:66:2c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=2a0f74c0be87375c32dcdfa262060a6030cc76f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:cf:3a:b7:c8:b2:e2:8f:36:87:cf:d5:4d:
                    75:0b:57:ff:43:60:e3:4b:3e:5a:24:0f:c3:f6:b9:
                    b3:79:fc:d7:8e:a9:dc:10:04:f5:53:38:e2:b6:6d:
                    af:d4:59:6f:04:f6:42:db:c5:32:e4:3f:f0:40:01:
                    04:86:5d:95:e5:f5:e4:15:b5:8d:10:6f:f9:0b:42:
                    8c:0a:1f:a9:e1:8a:63:c7:1b:ad:13:41:57:22:0d:
                    e2:6d:b9:ac:4d:b6:e7:a8:0a:80:d1:58:bd:1d:67:
                    d6:51:0f:92:37:d5:2a:37:2b:a1:09:d3:ff:59:a4:
                    45:da:58:c0:3b:87:37:81:86:fc:b5:e5:82:02:79:
                    d6:eb:11:8c:15:e0:0d:a6:fe:a6:05:17:6e:66:39:
                    c6:9d:e7:03:98:74:71:59:3d:13:91:ad:09:3b:05:
                    a4:91:be:f6:d5:12:da:8e:31:ec:ed:e4:ef:e0:4b:
                    8e:bb:51:3a:f3:b2:3e:a5:01:b7:6d:3e:69:11:7f:
                    0b:85:ee:7b:44:6e:89:7b:3f:a8:e7:3e:95:14:04:
                    2e:03:c8:18:14:02:44:67:41:1a:89:7e:ae:f3:ac:
                    e7:de:65:43:28:39:36:3f:c7:4d:46:63:1b:46:62:
                    58:b9:82:28:9b:48:01:f9:67:94:a4:b7:b7:39:49:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:74:C0:BE:87:37:5C:32:DC:DF:A2:62:06:0A:60:30:CC:76:F6
            X509v3 Authority Key Identifier:
                keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f5:72:e3:da:19:e0:d4:65:6d:05:15:d6:2d:fc:19:45:16:
         7b:bd:5c:e3:de:ce:91:66:de:68:5b:c0:c3:59:9a:a2:26:8e:
         ef:65:70:c2:4d:82:19:59:e5:1e:bf:b8:fc:c4:ae:69:3a:65:
         2a:e5:15:89:0f:2c:88:a0:2b:dc:c2:8a:91:4e:31:36:1e:0f:
         e5:ae:51:e6:98:f5:9b:5d:ba:14:91:2c:43:bd:a6:90:44:e3:
         6b:6a:32:e5:5e:ac:f3:31:d1:1e:1f:a8:4d:83:fa:dc:c8:cd:
         a7:e8:0e:41:7a:a8:42:8c:93:e9:d8:e4:46:32:57:69:fb:42:
         91:a3:87:19:f8:c2:60:75:4a:7b:84:8d:cd:29:e0:c4:cd:ce:
         df:84:23:e5:02:f1:d5:b2:25:09:68:20:67:11:7c:9c:bf:19:
         ea:f6:1e:b6:ad:75:fc:15:b3:5b:9e:18:2b:aa:a6:99:62:e7:
         eb:6d:64:cd:a5:0f:ff:8f:f9:ae:4f:03:c6:c9:30:33:8b:62:
         ee:ac:f8:c7:3e:01:d2:eb:6f:ef:36:bb:b3:0f:cf:6e:f1:8d:
         35:f3:ed:2c:9d:c1:b7:31:ce:ef:8a:cd:7e:93:3f:46:1d:45:
         04:f4:2f:bf:df:70:0a:3a:9d:81:05:40:fa:04:94:05:72:fc:
         6a:c5:a1:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWbu0TQyvswyGReFZiy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZGE5OWY5MzUxOGUyOWE5NDViMDdmNjBhMThlZjg2ZTli
MzllNjUwHhcNMjUwNDEzMTMwMTE1WhcNMjUwNDE0MTMwMTE1WjAzMTEwLwYDVQQD
EygyYTBmNzRjMGJlODczNzVjMzJkY2RmYTI2MjA2MGE2MDMwY2M3NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0zPOrfIsuKPNofP1U11C1f/Q2Dj
Sz5aJA/D9rmzefzXjqncEAT1Uzjitm2v1FlvBPZC28Uy5D/wQAEEhl2V5fXkFbWN
EG/5C0KMCh+p4YpjxxutE0FXIg3ibbmsTbbnqAqA0Vi9HWfWUQ+SN9UqNyuhCdP/
WaRF2ljAO4c3gYb8teWCAnnW6xGMFeANpv6mBRduZjnGnecDmHRxWT0Tka0JOwWk
kb721RLajjHs7eTv4EuOu1E687I+pQG3bT5pEX8Lhe57RG6Jez+o5z6VFAQuA8gY
FAJEZ0EaiX6u86zn3mVDKDk2P8dNRmMbRmJYuYIom0gB+WeUpLe3OUm54QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoPdMC+hzdcMtzfomIGCmAwzHb2MB8GA1UdIwQY
MBaAFFPamfk1GOKalFsH9goY74bps55lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODkt
OWYzMDJjMjBhZTcwLzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODktOWYzMDJjMjBhZTcw
LzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvVy49oZ
4NRlbQUV1i38GUUWe71c497OkWbeaFvAw1maoiaO72Vwwk2CGVnlHr+4/MSuaTpl
KuUViQ8siKAr3MKKkU4xNh4P5a5R5pj1m126FJEsQ72mkETja2oy5V6s8zHRHh+o
TYP63MjNp+gOQXqoQoyT6djkRjJXaftCkaOHGfjCYHVKe4SNzSngxM3O34Qj5QLx
1bIlCWggZxF8nL8Z6vYetq11/BWzW54YK6qmmWLn621kzaUP/4/5rk8DxskwM4ti
7qz4xz4B0utv7za7sw/PbvGNNfPtLJ3BtzHO74rNfpM/Rh1FBPQvv99wCjqdgQVA
+gSUBXL8asWhcg==
-----END CERTIFICATE-----