Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File:                     l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier:          Mu/Xi3cQA5kmhn/WYspGemNrgGY8AbnAx8zm4p+Enr4=
Subject key identifier:   0D:AE:93:BE:5B:E7:5B:BA:B7:D0:7A:B7:9C:6B:31:8B:CF:E1:A7:F9
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer:       /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial:       01962E99702897ACADB4E136CF04620F112B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: 7tDvaVjR08A+T2VWFRHpqXukQ3UmEG6G/0MVUC3X18E=)
                          2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:70:28:97:ac:ad:b4:e1:36:cf:04:62:0f:11:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=0dae93be5be75bbab7d07ab79c6b318bcfe1a7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:4a:c9:01:9d:30:ef:85:ee:d2:e6:f5:b5:
                    07:80:0f:93:17:c0:25:cd:6e:dc:06:3a:58:70:a3:
                    d4:ec:41:6e:a0:f3:d6:64:5c:14:17:fd:64:8f:77:
                    e9:3e:63:d3:9e:93:57:16:90:d9:a6:94:d5:16:f3:
                    e5:04:24:9e:15:97:3d:8f:30:49:ae:3b:37:98:07:
                    d8:1c:49:b2:29:6b:2f:97:03:8f:f8:14:00:c4:9f:
                    45:8b:dd:7b:8c:dc:97:73:02:3a:ce:a8:0e:6c:fc:
                    22:b1:cc:05:10:f8:8c:93:a6:bd:7a:4b:e3:25:62:
                    96:8e:3b:41:6a:32:43:17:07:89:52:47:9b:e3:ab:
                    9f:3a:2b:92:97:9a:b6:93:3a:72:6f:d3:08:30:8f:
                    c8:17:6d:2e:c6:a7:d8:12:97:dc:73:e8:2d:cc:57:
                    89:d7:9c:46:39:7f:49:8c:1d:6e:86:55:7e:a6:fb:
                    9f:4e:e4:69:91:e2:88:97:2a:58:d6:cc:d3:ec:b2:
                    7c:ff:e7:2a:11:10:75:40:3c:b9:ff:d1:d9:cb:f3:
                    5b:4c:8f:64:f8:cb:99:55:21:85:d6:16:9b:fa:5b:
                    f6:96:7e:bf:8c:bf:36:54:fc:07:cf:51:50:94:91:
                    e9:93:21:bf:67:da:a5:1f:25:3b:af:a9:3a:37:03:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AE:93:BE:5B:E7:5B:BA:B7:D0:7A:B7:9C:6B:31:8B:CF:E1:A7:F9
            X509v3 Authority Key Identifier:
                keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:8a:91:09:bc:e2:ca:10:50:86:48:1d:02:77:f4:e5:09:
         63:79:e5:67:55:f8:2e:86:d3:5f:c9:26:c8:30:a3:74:de:30:
         fd:d0:af:42:21:95:ce:62:0f:f2:c8:ea:0d:8d:be:f9:13:a0:
         f2:6d:c0:e0:88:dc:ae:0d:a5:4c:4f:12:a0:70:17:1e:14:eb:
         31:1a:bc:dd:49:25:00:5e:52:05:10:b7:c9:1c:84:0c:04:78:
         ea:c7:3c:99:c0:21:d9:37:ab:42:59:f9:9f:7a:58:60:87:3d:
         cb:8b:c9:5d:2a:f9:03:51:bc:bc:ba:8d:05:fd:44:27:0d:18:
         43:fb:ca:db:2b:55:75:87:58:6b:6f:57:db:ce:1a:88:22:c4:
         9e:2e:ab:e5:65:5b:5b:2c:b3:f1:2e:40:9e:5e:d0:56:8f:cd:
         64:71:99:57:89:da:f3:30:60:ac:4a:03:e2:9b:3f:27:eb:7e:
         68:c1:17:56:7c:bf:52:aa:48:4d:a8:4d:03:ac:27:bf:f9:2d:
         a1:79:76:34:23:fc:1f:90:61:81:55:3d:9c:ed:a2:97:78:c7:
         88:83:c2:cb:4b:45:e0:6b:ec:39:1d:fa:1a:76:55:d3:c5:e7:
         be:33:84:b6:00:4a:e1:99:be:00:db:f1:b8:03:f2:4a:dc:45:
         01:4c:2d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXAol6yttOE2zwRiDxErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTcwNTIwNzU5NjFlOWQ5MGMyN2QwNzEyNWE0YjQ0NmNh
ZmQ3OTAwHhcNMjUwNDEzMTAwMjA5WhcNMjUwNDE0MTAwMjA5WjAzMTEwLwYDVQQD
EygwZGFlOTNiZTViZTc1YmJhYjdkMDdhYjc5YzZiMzE4YmNmZTFhN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04ZKyQGdMO+F7tLm9bUHgA+TF8Al
zW7cBjpYcKPU7EFuoPPWZFwUF/1kj3fpPmPTnpNXFpDZppTVFvPlBCSeFZc9jzBJ
rjs3mAfYHEmyKWsvlwOP+BQAxJ9Fi917jNyXcwI6zqgObPwiscwFEPiMk6a9ekvj
JWKWjjtBajJDFweJUkeb46ufOiuSl5q2kzpyb9MIMI/IF20uxqfYEpfcc+gtzFeJ
15xGOX9JjB1uhlV+pvufTuRpkeKIlypY1szT7LJ8/+cqERB1QDy5/9HZy/NbTI9k
+MuZVSGF1hab+lv2ln6/jL82VPwHz1FQlJHpkyG/Z9qlHyU7r6k6NwMohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2uk75b51u6t9B6t5xrMYvP4af5MB8GA1UdIwQY
MBaAFJdXBSB1lh6dkMJ9BxJaS0Rsr9eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEt
YmVhZmUwZWZjMDljLzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEtYmVhZmUwZWZjMDlj
LzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0KKkQm8
4soQUIZIHQJ39OUJY3nlZ1X4LobTX8kmyDCjdN4w/dCvQiGVzmIP8sjqDY2++ROg
8m3A4Ijcrg2lTE8SoHAXHhTrMRq83UklAF5SBRC3yRyEDAR46sc8mcAh2TerQln5
n3pYYIc9y4vJXSr5A1G8vLqNBf1EJw0YQ/vK2ytVdYdYa29X284aiCLEni6r5WVb
Wyyz8S5Anl7QVo/NZHGZV4na8zBgrEoD4ps/J+t+aMEXVny/UqpITahNA6wnv/kt
oXl2NCP8H5BhgVU9nO2il3jHiIPCy0tF4GvsOR36GnZV08XnvjOEtgBK4Zm+ANvx
uAPyStxFAUwtqA==
-----END CERTIFICATE-----