Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File:                     8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier:          7mZZpDsdrK+HcULbwVXPJkLIBqyzqdswlOQAxkH1fw4=
Subject key identifier:   01:FF:D4:35:66:F6:3E:EB:2A:A6:78:2F:03:86:34:4C:E3:8F:01:11
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer:       /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial:       01962F067151821A9723914EBE8F5534A939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: OKllzbfuPRbzmmhRgw4fyf4nz0vwWXGxG/hu0SfiNwg=)
                          2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:71:51:82:1a:97:23:91:4e:be:8f:55:34:a9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=01ffd43566f63eeb2aa6782f0386344ce38f0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:0c:33:f3:0c:b3:89:2a:9c:8c:16:fe:b2:
                    7c:49:a4:f4:68:b4:ae:a4:ec:c7:e3:03:dc:1b:22:
                    38:a3:0c:8b:22:c9:b2:d4:8b:32:fd:c0:00:54:b8:
                    0b:52:cc:cb:fc:af:62:04:e7:a8:a1:19:34:df:05:
                    92:ad:c2:fa:8e:6f:e9:6b:30:f8:8a:32:d0:97:94:
                    ee:e3:a1:ae:62:a8:ce:75:f4:fa:95:4a:75:f7:a8:
                    08:4a:8e:6c:17:46:31:28:d0:27:0d:2d:67:a0:83:
                    87:a2:e1:41:84:4b:b1:d2:a9:2e:1d:e0:9d:f1:0d:
                    cf:27:bb:7a:e7:3c:3d:0e:2b:bf:28:1a:e7:f9:c0:
                    67:30:ee:55:f1:d0:b0:8f:d3:3e:20:03:1d:5d:f2:
                    89:2b:de:01:89:ae:4f:20:02:68:2c:20:b2:65:f1:
                    53:be:af:f4:4d:71:a6:6f:83:7d:ca:ac:75:1f:d6:
                    71:9d:08:54:63:92:1f:06:81:16:0a:12:5e:9a:a2:
                    64:d2:48:b2:06:a2:01:ac:99:ef:db:18:fc:7a:31:
                    d5:b6:7d:3c:ac:c6:83:b0:8b:d8:5b:d4:01:cc:32:
                    3c:d0:0d:ac:4e:d7:c8:63:ed:2f:ed:46:7c:c3:2c:
                    d7:bd:62:d5:64:d7:92:ea:75:1a:0f:b8:22:fd:90:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:D4:35:66:F6:3E:EB:2A:A6:78:2F:03:86:34:4C:E3:8F:01:11
            X509v3 Authority Key Identifier:
                keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:60:42:0c:3a:2e:77:54:1a:bc:ed:f0:2e:d6:bd:04:c9:
         f6:7a:43:d1:c7:90:7b:5b:3f:4f:c4:e0:07:55:ab:a8:39:9e:
         1b:87:79:03:f1:bb:b1:53:1d:40:a8:38:38:04:73:6c:a6:a6:
         4d:05:d4:0f:2f:e3:5b:fa:27:50:80:e8:3b:60:72:74:5b:b8:
         99:1f:27:17:6b:da:35:d8:a6:98:6a:55:9a:97:78:33:45:46:
         fa:2d:10:59:76:92:14:15:4a:10:1f:84:eb:43:b4:10:e5:15:
         47:d0:16:4b:fd:3a:cc:69:b8:9b:b3:65:65:82:1e:0c:25:2e:
         39:36:ba:36:37:4f:dd:80:c7:06:9b:99:bc:24:0d:b6:a4:d3:
         b6:45:de:a8:b7:d1:e1:15:c9:dd:c1:0a:52:7c:73:31:67:c4:
         66:5d:e4:94:b1:6e:1e:56:5e:b3:10:80:67:23:fc:4f:ae:41:
         e6:a2:3e:4c:2e:de:0a:7f:25:98:60:4b:e4:ae:57:85:ff:aa:
         bf:66:44:4c:e2:8f:f8:95:c0:45:75:2c:94:6d:bb:e5:d9:92:
         bd:75:6e:a8:ad:c2:d4:a0:09:23:64:0b:7e:ba:87:0c:85:62:
         e4:31:9f:08:26:7c:02:c4:c9:4a:b5:f5:6e:c5:f4:3f:1c:2e:
         9c:42:f4:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnFRghqXI5FOvo9VNKk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOTZmYTc5OTY3ZTFhZWEwNDI2MDJmOTMyNDI4ODBhOTU0
MzkzOGIwHhcNMjUwNDEzMTIwMTEzWhcNMjUwNDE0MTIwMTEzWjAzMTEwLwYDVQQD
EygwMWZmZDQzNTY2ZjYzZWViMmFhNjc4MmYwMzg2MzQ0Y2UzOGYwMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT4MM/MMs4kqnIwW/rJ8SaT0aLSu
pOzH4wPcGyI4owyLIsmy1Isy/cAAVLgLUszL/K9iBOeooRk03wWSrcL6jm/pazD4
ijLQl5Tu46GuYqjOdfT6lUp196gISo5sF0YxKNAnDS1noIOHouFBhEux0qkuHeCd
8Q3PJ7t65zw9Diu/KBrn+cBnMO5V8dCwj9M+IAMdXfKJK94Bia5PIAJoLCCyZfFT
vq/0TXGmb4N9yqx1H9ZxnQhUY5IfBoEWChJemqJk0kiyBqIBrJnv2xj8ejHVtn08
rMaDsIvYW9QBzDI80A2sTtfIY+0v7UZ8wyzXvWLVZNeS6nUaD7gi/ZCzZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH/1DVm9j7rKqZ4LwOGNEzjjwERMB8GA1UdIwQY
MBaAFPKW+nmWfhrqBCYC+TJCiAqVQ5OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYt
OTQwOWQ5MTA5MGZhLzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYtOTQwOWQ5MTA5MGZh
LzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7VgQgw6
LndUGrzt8C7WvQTJ9npD0ceQe1s/T8TgB1WrqDmeG4d5A/G7sVMdQKg4OARzbKam
TQXUDy/jW/onUIDoO2BydFu4mR8nF2vaNdimmGpVmpd4M0VG+i0QWXaSFBVKEB+E
60O0EOUVR9AWS/06zGm4m7NlZYIeDCUuOTa6NjdP3YDHBpuZvCQNtqTTtkXeqLfR
4RXJ3cEKUnxzMWfEZl3klLFuHlZesxCAZyP8T65B5qI+TC7eCn8lmGBL5K5Xhf+q
v2ZETOKP+JXARXUslG275dmSvXVuqK3C1KAJI2QLfrqHDIVi5DGfCCZ8AsTJSrX1
bsX0PxwunEL0uQ==
-----END CERTIFICATE-----