Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File:                     IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier:          uuQoeLogjQ4FP6xx5aSBSga4kJ9AXcYpBR/dCy13d8Q=
Subject key identifier:   BE:99:DE:CE:A1:6A:34:04:D6:56:56:14:B2:18:7D:31:07:5A:5E:9F
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer:       /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial:       01962DF466D146C6289D272936832CA95097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number:          09BA
Signing time:             Sun 13 Apr 2025 07:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:53 +0000
Files and hashes:         1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: 4j8VpJfBujypOTHEqPf7yXLe6RUwIsYmVFigJxYxQ1M=)
                          2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:66:d1:46:c6:28:9d:27:29:36:83:2c:a9:50:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
        Validity
            Not Before: Apr 13 07:01:53 2025 GMT
            Not After : Apr 14 07:01:53 2025 GMT
        Subject: CN=be99decea16a3404d6565614b2187d31075a5e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:06:e5:b5:a9:1b:7a:67:ba:d5:9f:65:62:
                    76:30:96:7c:56:1e:b7:0e:13:d2:a3:83:86:f8:c3:
                    42:bf:bd:84:97:de:18:e7:e2:34:2a:19:eb:4c:9b:
                    4d:1b:48:d1:39:83:44:83:23:29:80:ad:65:92:72:
                    b3:ef:44:36:18:49:cc:83:e8:0f:a2:59:5b:e6:31:
                    e6:be:a9:a6:9a:c5:d2:f7:dd:f7:a2:75:65:75:b2:
                    7e:dd:31:1b:90:88:d8:c1:ff:f7:2c:0b:1e:80:e0:
                    41:e5:d1:a8:59:d9:35:5e:fc:de:7a:c9:20:34:04:
                    6e:21:de:e9:e1:33:4f:c1:4d:24:59:d2:26:a4:97:
                    ea:26:dc:ac:b4:f5:6e:28:24:bc:e6:59:36:eb:b8:
                    2c:6f:d4:2b:e0:1b:5f:11:0f:10:0c:1d:83:52:1d:
                    6f:46:5f:16:dc:ef:cb:93:c8:60:28:fc:32:47:cf:
                    eb:17:cd:5f:68:1d:c3:3c:5d:4e:fa:02:0b:2a:41:
                    6a:b7:0d:d9:be:cd:45:04:3e:d0:c2:77:b5:4e:df:
                    23:8f:db:d7:43:9b:60:1e:af:e6:45:dc:ec:14:24:
                    d4:59:db:d0:9e:4b:ce:77:e0:29:2a:e4:2b:9b:27:
                    d5:b7:26:43:2f:d8:36:4b:cc:1d:8b:91:a1:2e:bb:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:DE:CE:A1:6A:34:04:D6:56:56:14:B2:18:7D:31:07:5A:5E:9F
            X509v3 Authority Key Identifier:
                keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:9a:6a:1c:e4:02:b5:99:c5:48:23:55:13:cd:f8:1b:f8:
         49:87:21:5b:c9:ed:e4:41:01:c8:ed:e2:d5:a5:09:68:f1:c6:
         e0:23:fa:21:89:16:28:d9:2d:ca:55:73:d9:d3:cd:62:fd:6c:
         33:49:ed:47:ba:e4:5b:7b:bd:76:b8:16:91:26:8f:bf:64:de:
         76:ae:1d:b2:83:0d:40:49:c4:b9:b9:95:ac:0f:ee:59:9c:e0:
         7c:df:08:0b:50:f8:ad:b0:bf:4d:a7:57:45:8c:4d:13:68:23:
         9f:64:dc:05:df:31:b7:9d:05:ed:93:f6:44:3a:16:09:7b:1c:
         a2:26:fb:d4:b4:1f:37:25:d0:fd:b7:6e:19:d3:14:7e:ce:b1:
         b5:0e:97:ca:6e:fd:2b:82:78:2e:22:bb:9d:55:fe:d6:2e:b2:
         a0:5c:09:17:f2:0b:6d:4e:3a:b0:48:fb:d5:47:8b:1d:53:ba:
         aa:c3:57:f3:f4:ad:95:d7:10:35:16:a4:d7:66:e6:d0:cf:98:
         04:c0:78:ed:2c:a4:91:65:82:fd:84:77:0c:9d:3f:85:aa:00:
         77:20:8b:8b:61:27:23:3d:90:ab:a4:3b:6b:c2:1d:56:14:a6:
         ed:b7:d2:44:02:c9:3b:4f:82:44:76:24:9d:5e:8c:a8:7c:26:
         b5:9f:6c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9GbRRsYonScpNoMsqVCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzdlYWM0NWM4ZGJiNWU1ZWZkZDY1YzE4ODE0NDk4NjAz
ZjAyMDkwHhcNMjUwNDEzMDcwMTUzWhcNMjUwNDE0MDcwMTUzWjAzMTEwLwYDVQQD
EyhiZTk5ZGVjZWExNmEzNDA0ZDY1NjU2MTRiMjE4N2QzMTA3NWE1ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1YG5bWpG3pnutWfZWJ2MJZ8Vh63
DhPSo4OG+MNCv72El94Y5+I0KhnrTJtNG0jROYNEgyMpgK1lknKz70Q2GEnMg+gP
ollb5jHmvqmmmsXS9933onVldbJ+3TEbkIjYwf/3LAsegOBB5dGoWdk1Xvzeeskg
NARuId7p4TNPwU0kWdImpJfqJtystPVuKCS85lk267gsb9Qr4BtfEQ8QDB2DUh1v
Rl8W3O/Lk8hgKPwyR8/rF81faB3DPF1O+gILKkFqtw3Zvs1FBD7Qwne1Tt8jj9vX
Q5tgHq/mRdzsFCTUWdvQnkvOd+ApKuQrmyfVtyZDL9g2S8wdi5GhLrtKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6Z3s6hajQE1lZWFLIYfTEHWl6fMB8GA1UdIwQY
MBaAFCDH6sRcjbteXv3WXBiBRJhgPwIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUt
NzA0ZWFiNmNhM2U4LzEvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUtNzA0ZWFiNmNhM2U4
LzEvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwqaahzk
ArWZxUgjVRPN+Bv4SYchW8nt5EEByO3i1aUJaPHG4CP6IYkWKNktylVz2dPNYv1s
M0ntR7rkW3u9drgWkSaPv2Tedq4dsoMNQEnEubmVrA/uWZzgfN8IC1D4rbC/TadX
RYxNE2gjn2TcBd8xt50F7ZP2RDoWCXscoib71LQfNyXQ/bduGdMUfs6xtQ6Xym79
K4J4LiK7nVX+1i6yoFwJF/ILbU46sEj71UeLHVO6qsNX8/StldcQNRak12bm0M+Y
BMB47SykkWWC/YR3DJ0/haoAdyCLi2EnIz2Qq6Q7a8IdVhSm7bfSRALJO0+CRHYk
nV6MqHwmtZ9saw==
-----END CERTIFICATE-----