Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File:                     cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier:          Ezpm6RBt+VqnQDm7bxtdqzp5KuO79Ig0JrR3i4tJA1s=
Subject key identifier:   4C:AD:B9:C0:22:94:F1:24:38:B5:7A:DD:83:85:E9:99:05:D1:54:C3
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer:       /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial:       01962F06D7C682AFE523214B58E59433BEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: +gJ8Wh3Bw+itGC0tyXE1qm0S7GX4UrRovRPhwD5AnHg=)
                          2: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
                          3: jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa (hash: RvRrftZ+/LxLaZ6N2kHwAtDW2/FTXY0AOnQQBNDsQnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d7:c6:82:af:e5:23:21:4b:58:e5:94:33:be:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=4cadb9c02294f12438b57add8385e99905d154c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:09:50:bc:33:bd:d7:12:18:dd:35:a6:fc:
                    37:80:0c:71:b7:a2:7e:38:15:3c:38:d5:3f:85:bc:
                    7b:e1:a0:c3:31:9d:05:5e:ac:74:ac:75:46:2a:6e:
                    1b:ca:d5:c8:ab:da:c9:1e:c3:59:f1:b9:0f:61:15:
                    95:54:63:f4:21:08:22:14:21:09:1e:2f:47:66:7d:
                    e5:3f:54:ae:a1:90:fa:02:5a:bf:c1:fc:94:11:88:
                    59:63:cf:ed:b3:4c:21:fb:68:28:b3:c8:22:9b:9c:
                    ed:06:3a:a2:26:b0:f6:95:87:ea:7b:ed:5e:f0:ca:
                    b2:71:77:69:db:72:ce:b5:8d:fc:04:90:61:2c:e0:
                    76:2d:ac:cc:bc:af:2b:4d:c4:b0:42:b6:57:cb:06:
                    95:99:41:0a:c3:88:3c:c6:72:99:87:6c:74:c5:06:
                    a4:33:ad:91:6c:46:29:4d:80:70:3c:6e:ce:12:1c:
                    ec:aa:4f:2a:5e:3b:68:bc:4e:ff:a6:00:81:45:c0:
                    c4:38:b1:03:1c:5f:c4:51:0c:a2:5e:20:d7:1b:3c:
                    dc:cb:4a:f3:0b:42:b4:e2:fd:9d:ee:4f:0c:05:75:
                    90:ec:c2:37:66:3d:1d:74:0e:de:d3:30:2f:79:3e:
                    b6:e1:f7:4d:12:de:12:77:41:23:68:ba:45:a5:6b:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AD:B9:C0:22:94:F1:24:38:B5:7A:DD:83:85:E9:99:05:D1:54:C3
            X509v3 Authority Key Identifier:
                keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:8c:7c:28:aa:42:c7:75:59:05:1f:c9:b4:7c:e9:0e:24:6b:
         66:d2:50:3f:80:7d:e6:c7:c5:3a:34:86:e4:82:79:6b:1c:16:
         e5:b2:04:99:47:f3:b1:32:24:21:08:3d:69:70:cf:1f:22:51:
         bc:c0:4f:38:6c:88:89:33:21:a7:50:96:67:79:24:13:bd:98:
         d6:1b:43:e3:5b:b7:d4:15:67:d2:21:ac:11:b6:7a:49:d8:60:
         95:ca:dd:ae:bf:f8:e3:72:bc:28:71:73:21:b2:ad:58:11:22:
         22:88:19:99:02:ed:e3:eb:37:34:84:fb:17:2e:5f:18:49:70:
         3c:7b:cc:55:68:f2:34:3c:1f:dd:94:d7:a5:7a:2e:2b:f2:1c:
         a2:40:b0:79:94:4d:aa:8f:20:19:07:d3:d1:f3:93:5d:7e:86:
         b3:77:f1:a3:a6:01:2a:c8:ae:13:0d:19:f9:8e:21:c2:b4:dd:
         40:56:bd:49:c1:52:bf:aa:ea:a0:55:0d:66:24:32:f7:74:ac:
         ec:bb:aa:13:fb:23:86:1e:70:06:68:fe:f9:f4:aa:89:c0:c7:
         eb:d2:b4:2a:75:2d:a7:99:45:39:59:e8:1f:3d:57:b8:bc:48:
         98:39:f9:70:79:e2:fd:03:b8:e9:07:b7:69:9c:97:d4:76:3e:
         f7:82:b9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtfGgq/lIyFLWOWUM76kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2I5NDA0YTBjNDMyMjNhZGRjOGVhMWIxMGFiNzRiNzc3
YTJhMDEwHhcNMjUwNDEzMTIwMTM5WhcNMjUwNDE0MTIwMTM5WjAzMTEwLwYDVQQD
Eyg0Y2FkYjljMDIyOTRmMTI0MzhiNTdhZGQ4Mzg1ZTk5OTA1ZDE1NGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaoJULwzvdcSGN01pvw3gAxxt6J+
OBU8ONU/hbx74aDDMZ0FXqx0rHVGKm4bytXIq9rJHsNZ8bkPYRWVVGP0IQgiFCEJ
Hi9HZn3lP1SuoZD6Alq/wfyUEYhZY8/ts0wh+2gos8gim5ztBjqiJrD2lYfqe+1e
8MqycXdp23LOtY38BJBhLOB2LazMvK8rTcSwQrZXywaVmUEKw4g8xnKZh2x0xQak
M62RbEYpTYBwPG7OEhzsqk8qXjtovE7/pgCBRcDEOLEDHF/EUQyiXiDXGzzcy0rz
C0K04v2d7k8MBXWQ7MI3Zj0ddA7e0zAveT624fdNEt4Sd0EjaLpFpWt8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEytucAilPEkOLV63YOF6ZkF0VTDMB8GA1UdIwQY
MBaAFHE7lASgxDIjrdyOobEKt0t3eioBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUt
N2E1MzFkNDgzNzQ3LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUtN2E1MzFkNDgzNzQ3
LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ox8KKpC
x3VZBR/JtHzpDiRrZtJQP4B95sfFOjSG5IJ5axwW5bIEmUfzsTIkIQg9aXDPHyJR
vMBPOGyIiTMhp1CWZ3kkE72Y1htD41u31BVn0iGsEbZ6Sdhglcrdrr/443K8KHFz
IbKtWBEiIogZmQLt4+s3NIT7Fy5fGElwPHvMVWjyNDwf3ZTXpXouK/IcokCweZRN
qo8gGQfT0fOTXX6Gs3fxo6YBKsiuEw0Z+Y4hwrTdQFa9ScFSv6rqoFUNZiQy93Ss
7LuqE/sjhh5wBmj++fSqicDH69K0KnUtp5lFOVnoHz1XuLxImDn5cHni/QO46Qe3
aZyX1HY+94K5kw==
-----END CERTIFICATE-----