Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          xd6ZxTi42zDbmehGilcP5ZyHFxT3SnlOL8aPp1aNgmc=
Subject key identifier:   A9:65:0E:FF:0D:92:48:1A:3C:64:41:01:7F:1A:DF:41:15:B7:B4:61
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       01962E2B390812F9A58403FBAFC82464AC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: 8ZD7VMGEYMlYKRrd/ZS3rBYCDF+956sYBwlp49slkuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:08:12:f9:a5:84:03:fb:af:c8:24:64:ac:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=a9650eff0d92481a3c6441017f1adf4115b7b461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:df:08:02:cd:f1:cc:e6:17:d1:b6:05:e5:
                    db:67:7a:76:84:74:97:73:e1:a8:0d:7d:ea:44:d0:
                    92:d3:ac:df:ef:38:b1:ae:4c:ec:dd:4d:10:19:db:
                    f2:4d:b3:12:79:3f:3a:1e:8f:c5:95:25:ee:1b:0f:
                    6e:b1:91:29:7f:ab:05:70:41:6a:31:1b:9f:83:8a:
                    e3:8b:8b:be:3b:76:c9:2d:2f:5f:02:69:e9:90:51:
                    ff:9d:56:cb:2a:c7:a0:ca:88:fc:1c:91:3b:61:f1:
                    83:b7:f1:76:02:0f:7f:56:2b:f3:aa:fd:04:a9:af:
                    41:ed:fc:28:bd:09:7b:f7:d4:9b:2a:3d:42:97:a0:
                    d0:a4:36:58:38:5d:60:0a:05:54:d6:24:7c:63:fe:
                    c3:51:85:8f:1e:47:d1:1f:e8:1c:37:77:9a:c9:cb:
                    40:04:84:b3:44:36:4a:8d:67:55:fd:d0:34:d6:48:
                    22:47:97:d3:e9:16:23:a3:91:69:d5:47:c8:48:06:
                    73:21:2a:96:a6:35:37:cb:f7:f0:ad:c1:70:6f:58:
                    64:a7:d9:4f:62:67:ad:a6:50:03:08:fa:61:3a:8e:
                    d6:7e:e3:2d:dc:8b:db:37:e5:ba:9e:c5:37:5e:97:
                    06:e2:f8:f9:3e:3a:4c:7d:0b:9b:df:21:6f:3a:18:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:65:0E:FF:0D:92:48:1A:3C:64:41:01:7F:1A:DF:41:15:B7:B4:61
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:49:26:ae:f5:cc:cd:3f:b2:bf:6f:a6:fc:c4:6e:14:98:d1:
         a8:c0:90:78:ca:17:ca:97:ac:6a:a7:50:6e:33:91:39:b2:91:
         fe:36:62:a1:3b:51:64:17:8d:a8:ad:f9:ab:f9:e2:39:0d:39:
         fb:69:25:d6:30:1a:ba:e0:4c:6e:ae:41:58:4e:bc:ca:fa:4b:
         6e:2a:5e:10:5b:1a:f4:fa:f4:be:9d:9f:00:9e:f7:40:80:4f:
         ec:5e:0f:92:27:a2:f3:d8:fa:ec:14:2f:76:4d:4e:af:85:5b:
         55:b9:4d:b9:3f:be:f6:40:85:5a:5d:b0:7a:18:ba:36:d9:39:
         c6:3c:f2:0d:d3:a5:e0:0e:0c:d5:88:81:a0:1b:ee:9d:63:8d:
         4d:35:19:47:5d:1d:f5:0b:5d:fe:4a:40:28:a1:e4:2b:48:11:
         ba:b3:c0:18:4f:78:ce:92:e2:bb:ed:99:f8:a3:10:99:7e:60:
         81:df:6e:4b:5c:9a:1f:b5:04:15:e1:1b:93:06:cc:62:e7:1b:
         cd:2a:16:f8:4c:85:51:29:e8:e7:34:b3:f0:75:9f:d4:01:a1:
         6f:b2:15:05:b2:86:d0:9c:38:8e:17:7b:ed:88:75:c3:d2:b7:
         82:c9:ef:58:e9:06:e2:12:6b:4b:5a:76:de:d4:b1:34:e6:a4:
         ea:4e:4f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzkIEvmlhAP7r8gkZKxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZmVhY2VhNWQ4MTJmMzAzMGM1NTdlNDhjNTM3NTg3NTNm
YjZjNmIwHhcNMjUwNDEzMDgwMTQ2WhcNMjUwNDE0MDgwMTQ2WjAzMTEwLwYDVQQD
EyhhOTY1MGVmZjBkOTI0ODFhM2M2NDQxMDE3ZjFhZGY0MTE1YjdiNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hbfCALN8czmF9G2BeXbZ3p2hHSX
c+GoDX3qRNCS06zf7zixrkzs3U0QGdvyTbMSeT86Ho/FlSXuGw9usZEpf6sFcEFq
MRufg4rji4u+O3bJLS9fAmnpkFH/nVbLKsegyoj8HJE7YfGDt/F2Ag9/Vivzqv0E
qa9B7fwovQl799SbKj1Cl6DQpDZYOF1gCgVU1iR8Y/7DUYWPHkfRH+gcN3eayctA
BISzRDZKjWdV/dA01kgiR5fT6RYjo5Fp1UfISAZzISqWpjU3y/fwrcFwb1hkp9lP
YmetplADCPphOo7WfuMt3IvbN+W6nsU3XpcG4vj5PjpMfQub3yFvOhhj9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKllDv8NkkgaPGRBAX8a30EVt7RhMB8GA1UdIwQY
MBaAFKz+rOpdgS8wMMVX5IxTdYdT+2xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDkt
YTJmZDI4ODQwYTAzLzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDktYTJmZDI4ODQwYTAz
LzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUkmrvXM
zT+yv2+m/MRuFJjRqMCQeMoXypesaqdQbjORObKR/jZioTtRZBeNqK35q/niOQ05
+2kl1jAauuBMbq5BWE68yvpLbipeEFsa9Pr0vp2fAJ73QIBP7F4Pkiei89j67BQv
dk1Or4VbVblNuT++9kCFWl2wehi6Ntk5xjzyDdOl4A4M1YiBoBvunWONTTUZR10d
9Qtd/kpAKKHkK0gRurPAGE94zpLiu+2Z+KMQmX5ggd9uS1yaH7UEFeEbkwbMYucb
zSoW+EyFUSno5zSz8HWf1AGhb7IVBbKG0Jw4jhd77Yh1w9K3gsnvWOkG4hJrS1p2
3tSxNOak6k5PtQ==
-----END CERTIFICATE-----