Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File:                     DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier:          brHV/8yNS6Xg3W7LaCMGJYBe86iJPp21KJYLboOKqv4=
Subject key identifier:   C7:82:CA:C9:2F:77:0F:F6:32:E9:DB:0C:34:2D:76:EA:60:60:49:BE
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer:       /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial:       01962ECF9174D24CF9B4BBB0EF6936EA68C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
                          2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: tUUPw0omh/d680643X3SrmX9NpHLMYlHMx8s9MBww08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:91:74:d2:4c:f9:b4:bb:b0:ef:69:36:ea:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=c782cac92f770ff632e9db0c342d76ea606049be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:4d:26:fc:53:72:3a:de:cb:3a:b1:1c:a9:
                    d8:ad:49:47:3f:e1:d7:33:64:63:34:a7:99:c4:29:
                    9a:cc:f7:d6:4c:7f:07:a6:e1:15:9e:ee:c8:92:04:
                    bf:e8:22:bd:3c:78:5f:5e:ee:9f:66:19:0b:9f:e9:
                    9c:47:20:0c:22:a1:24:d6:32:82:a7:7b:ff:f4:31:
                    be:96:fa:bf:ec:e7:6c:49:2c:01:94:56:f2:2b:97:
                    92:13:c2:a2:03:e4:ae:14:09:87:c8:53:13:4b:6e:
                    96:f0:3f:84:7b:de:72:32:bb:a0:d0:81:d4:f3:07:
                    1b:5c:83:60:55:c0:92:66:b5:f4:c0:61:4a:b1:f3:
                    8f:36:3e:95:75:6a:aa:2a:a1:05:2a:cc:8f:4d:4e:
                    30:4c:80:53:c7:77:b7:95:9c:8a:95:8e:61:d7:80:
                    5e:af:97:b9:9e:26:37:71:3a:f5:56:01:56:e8:a5:
                    9a:1c:26:68:5c:ff:fb:97:e1:da:ad:33:20:7d:00:
                    4a:50:1b:d4:61:83:b4:27:7c:6f:2a:4f:8f:03:4e:
                    7e:a4:1f:ef:ad:d7:c6:8c:bb:01:d0:3c:18:c2:a3:
                    cd:27:b8:07:78:e7:ac:f3:0c:59:6b:0b:34:35:91:
                    99:07:b6:39:39:b8:bd:ee:16:bb:4d:24:19:0f:2d:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:82:CA:C9:2F:77:0F:F6:32:E9:DB:0C:34:2D:76:EA:60:60:49:BE
            X509v3 Authority Key Identifier:
                keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:54:5a:be:7f:2a:62:a5:4e:84:a7:0e:65:b1:ff:20:56:
         df:8a:1b:3f:3f:2e:c1:bc:82:e5:c1:30:ee:a7:f0:95:9d:46:
         26:e8:1c:8c:2f:bc:e1:e2:63:d1:f9:d0:95:b4:ac:2f:d8:45:
         88:22:7d:bb:94:1b:80:d6:de:3d:22:1b:8f:65:02:3d:07:2d:
         5e:83:89:78:83:c2:2b:b5:48:f2:6e:76:9e:71:58:13:cd:95:
         42:50:bd:05:42:10:dc:72:12:34:22:ec:a6:37:07:02:f9:bc:
         5d:b5:17:8f:30:4f:08:df:7e:48:9f:af:82:82:c1:9b:68:bb:
         14:4d:a1:7d:72:a7:b9:9c:c8:a0:e5:88:f8:8b:73:c6:fa:6b:
         00:3f:ef:ef:eb:d2:0a:47:4e:a1:2b:10:5f:02:5d:e5:78:5f:
         7e:13:07:cc:8c:95:96:54:20:c7:2e:21:98:d6:79:d6:78:5d:
         b5:78:a3:5c:a8:be:3a:e5:7e:0a:c5:9a:10:0a:7f:cd:c2:21:
         31:32:7a:4c:40:49:ab:46:90:fc:77:87:50:b0:96:af:da:70:
         e1:f6:24:2f:be:d2:58:ae:64:d8:b3:33:16:f1:cd:bc:7f:56:
         88:34:a4:52:03:85:33:23:e3:68:78:ea:4b:bc:6c:bd:50:84:
         fc:78:38:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5F00kz5tLuw72k26mjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
EyhjNzgyY2FjOTJmNzcwZmY2MzJlOWRiMGMzNDJkNzZlYTYwNjA0OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL9NJvxTcjreyzqxHKnYrUlHP+HX
M2RjNKeZxCmazPfWTH8HpuEVnu7IkgS/6CK9PHhfXu6fZhkLn+mcRyAMIqEk1jKC
p3v/9DG+lvq/7OdsSSwBlFbyK5eSE8KiA+SuFAmHyFMTS26W8D+Ee95yMrug0IHU
8wcbXINgVcCSZrX0wGFKsfOPNj6VdWqqKqEFKsyPTU4wTIBTx3e3lZyKlY5h14Be
r5e5niY3cTr1VgFW6KWaHCZoXP/7l+HarTMgfQBKUBvUYYO0J3xvKk+PA05+pB/v
rdfGjLsB0DwYwqPNJ7gHeOes8wxZaws0NZGZB7Y5Obi97ha7TSQZDy3sVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeCyskvdw/2MunbDDQtdupgYEm+MB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZpUWr5/
KmKlToSnDmWx/yBW34obPz8uwbyC5cEw7qfwlZ1GJugcjC+84eJj0fnQlbSsL9hF
iCJ9u5QbgNbePSIbj2UCPQctXoOJeIPCK7VI8m52nnFYE82VQlC9BUIQ3HISNCLs
pjcHAvm8XbUXjzBPCN9+SJ+vgoLBm2i7FE2hfXKnuZzIoOWI+ItzxvprAD/v7+vS
CkdOoSsQXwJd5XhffhMHzIyVllQgxy4hmNZ51nhdtXijXKi+OuV+CsWaEAp/zcIh
MTJ6TEBJq0aQ/HeHULCWr9pw4fYkL77SWK5k2LMzFvHNvH9WiDSkUgOFMyPjaHjq
S7xsvVCE/Hg4Ew==
-----END CERTIFICATE-----