Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File:                     xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier:          juuPWAmKdrB0Dh8FcgHRxGPj6GFSMN0/akwZu+1XajY=
Subject key identifier:   D3:02:D7:49:6D:5A:52:25:9E:5D:2F:6E:3B:BD:90:4D:17:C2:6B:77
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer:       /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial:       01962F74EB9F66DE5300A0A977452A224C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
                          2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: IiHst4VNiMSL4pruZRL9uVe9KwtTvLYrjQKSKrZqvNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:9f:66:de:53:00:a0:a9:77:45:2a:22:4c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=d302d7496d5a52259e5d2f6e3bbd904d17c26b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:29:46:6b:0a:bd:bf:4f:d3:d9:06:7f:bb:
                    ea:08:87:4f:68:15:29:86:4f:fb:5d:1c:2f:17:c9:
                    b1:ed:c4:c7:d0:38:ad:43:c5:7b:c3:06:2f:2a:64:
                    4c:0e:7b:0b:a0:aa:70:48:34:cf:74:bc:c7:3b:c1:
                    b6:4c:00:78:9e:34:83:ef:3e:b9:8f:3a:c7:5e:d2:
                    c8:4c:d0:f5:fd:47:03:a6:4e:d2:7e:42:b9:13:89:
                    d1:cf:dd:24:3f:14:bb:f8:04:23:c1:ec:44:36:c8:
                    70:0c:3d:7e:d3:78:81:a9:aa:92:30:a2:e2:85:b9:
                    3e:65:80:9e:17:bb:8f:4f:ba:d2:fa:6a:c7:eb:78:
                    83:a8:74:2a:61:5a:96:77:f2:b0:8f:e2:4d:fb:5f:
                    ac:3f:da:92:aa:9d:e6:6d:23:36:a8:f1:f6:66:7f:
                    00:31:9b:b8:04:64:92:a5:dd:b9:af:03:81:92:fa:
                    5f:02:c7:e7:14:93:a2:fc:07:c9:85:67:63:00:de:
                    10:a9:60:33:f4:b5:8f:d6:e6:c2:8b:d7:9e:d6:bb:
                    73:72:df:7d:7d:5c:6c:92:ae:16:e1:12:64:f8:02:
                    57:4f:1b:35:e9:6f:64:d2:e6:db:33:4d:52:cc:6c:
                    13:25:ec:3a:54:ab:0a:bf:18:f1:f4:26:25:a4:2e:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:D7:49:6D:5A:52:25:9E:5D:2F:6E:3B:BD:90:4D:17:C2:6B:77
            X509v3 Authority Key Identifier:
                keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d8:e0:38:f2:3e:9d:ad:68:19:a1:61:2c:0a:21:31:76:dc:
         dc:fd:26:fe:cc:34:6e:17:66:ac:bc:f2:2c:e3:a3:52:af:60:
         0a:52:e6:1f:34:5b:02:32:8b:eb:19:f1:39:fc:e3:d7:8b:99:
         22:86:87:e5:17:a6:b6:9d:0c:c5:5e:ec:3d:b9:9a:3c:48:82:
         f2:af:1c:85:47:6d:e5:51:ab:1f:ec:96:fa:88:e0:07:07:38:
         8e:94:c6:6d:85:6d:f0:a9:93:fb:a2:63:61:92:a4:de:35:17:
         be:fe:b9:b4:35:67:96:d6:54:87:41:b6:af:56:ae:bb:b2:99:
         38:ee:9b:ff:fd:4c:ea:26:4d:84:1d:c5:38:a8:d8:da:85:d8:
         29:8f:ed:0e:dc:88:c5:9b:e0:4e:0d:95:61:75:6e:b4:2d:db:
         f5:cd:83:9e:95:50:73:c4:83:eb:9c:9f:70:cd:1b:b1:1e:7b:
         d9:d9:80:35:89:91:33:37:be:31:6e:98:72:dd:2d:d6:c1:4d:
         d2:e6:4a:71:e1:df:e3:f5:a2:22:c4:37:b4:7e:95:e1:ed:c8:
         f4:84:24:60:7e:5f:fd:83:0b:b2:93:41:46:4a:67:c8:1e:aa:
         22:81:d8:76:8f:3e:71:06:35:4f:ea:d7:41:ff:bd:11:f6:3b:
         c4:b9:95:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOufZt5TAKCpd0UqIkw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDFhZTI2MTJkMjUyNzE2N2M4M2Y3YWZjMTZmNWU2NzRk
ODhiMGYwHhcNMjUwNDEzMTQwMTUzWhcNMjUwNDE0MTQwMTUzWjAzMTEwLwYDVQQD
EyhkMzAyZDc0OTZkNWE1MjI1OWU1ZDJmNmUzYmJkOTA0ZDE3YzI2Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovUpRmsKvb9P09kGf7vqCIdPaBUp
hk/7XRwvF8mx7cTH0DitQ8V7wwYvKmRMDnsLoKpwSDTPdLzHO8G2TAB4njSD7z65
jzrHXtLITND1/UcDpk7SfkK5E4nRz90kPxS7+AQjwexENshwDD1+03iBqaqSMKLi
hbk+ZYCeF7uPT7rS+mrH63iDqHQqYVqWd/Kwj+JN+1+sP9qSqp3mbSM2qPH2Zn8A
MZu4BGSSpd25rwOBkvpfAsfnFJOi/AfJhWdjAN4QqWAz9LWP1ubCi9ee1rtzct99
fVxskq4W4RJk+AJXTxs16W9k0ubbM01SzGwTJew6VKsKvxjx9CYlpC4RpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMC10ltWlIlnl0vbju9kE0Xwmt3MB8GA1UdIwQY
MBaAFMRBriYS0lJxZ8g/evwW9eZ02IsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjkt
MjRlN2U2YWRhMWUyLzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjktMjRlN2U2YWRhMWUy
LzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNjgOPI+
na1oGaFhLAohMXbc3P0m/sw0bhdmrLzyLOOjUq9gClLmHzRbAjKL6xnxOfzj14uZ
IoaH5Remtp0MxV7sPbmaPEiC8q8chUdt5VGrH+yW+ojgBwc4jpTGbYVt8KmT+6Jj
YZKk3jUXvv65tDVnltZUh0G2r1auu7KZOO6b//1M6iZNhB3FOKjY2oXYKY/tDtyI
xZvgTg2VYXVutC3b9c2DnpVQc8SD65yfcM0bsR572dmANYmRMze+MW6Yct0t1sFN
0uZKceHf4/WiIsQ3tH6V4e3I9IQkYH5f/YMLspNBRkpnyB6qIoHYdo8+cQY1T+rX
Qf+9EfY7xLmVpA==
-----END CERTIFICATE-----