Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
File:                     h5WLpmHENczSXCBgRi72ANJxnuA.mft (raw, json)
Hash identifier:          vzARmq+u3nqhRFbO/Biwkh+8ZyaT/TxhQtkwmVvIWrg=
Subject key identifier:   2B:A7:FB:CE:3B:22:10:BE:F4:F2:DF:59:CD:C7:A7:CF:25:2C:E9:FE
Authority key identifier: 87:95:8B:A6:61:C4:35:CC:D2:5C:20:60:46:2E:F6:00:D2:71:9E:E0
Certificate issuer:       /CN=87958ba661c435ccd25c2060462ef600d2719ee0
Certificate serial:       01962F06563D942B01CC81A43E32EC8B3580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: h5WLpmHENczSXCBgRi72ANJxnuA.crl (hash: 4R1+i+Oja9ItUmSpS4tfRMHwOHTd8IOBcrdtaGFzA4k=)
                          2: jQqQfOrb2tEbgL6-n1pYKtKDCGI.roa (hash: urbNu0k2kZWVDcdCEYQ210AYS3ke0pUxaEecPK2agnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:56:3d:94:2b:01:cc:81:a4:3e:32:ec:8b:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87958ba661c435ccd25c2060462ef600d2719ee0
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=2ba7fbce3b2210bef4f2df59cdc7a7cf252ce9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:0a:7b:d6:13:d6:a9:03:f7:c4:68:f2:fa:
                    82:d1:48:a0:68:a4:76:49:94:9f:19:47:c4:78:f6:
                    59:20:6a:a9:3c:20:bb:fa:a0:42:ba:dd:be:d8:c3:
                    53:25:b1:2d:d0:1a:2c:41:6a:18:4a:ca:c1:76:02:
                    a8:a5:be:5f:86:a2:da:6d:df:4a:bc:a6:75:1b:ac:
                    c6:4f:b4:f1:d3:fc:ac:7a:1d:93:e1:ff:0e:ce:0e:
                    a5:f2:81:41:ad:5b:ef:21:d1:db:fb:d1:61:7f:35:
                    7b:7e:d1:40:02:96:dd:2e:16:c8:a4:b5:cb:55:ce:
                    23:57:b6:bc:93:03:df:68:51:20:89:b9:fa:ab:d3:
                    6e:2b:fb:37:c3:b9:fe:e2:bb:01:93:b0:f4:97:50:
                    df:42:7e:16:26:b8:fd:83:96:5f:57:94:3d:b2:77:
                    7e:19:31:a8:cd:d8:90:68:1e:a2:d0:d8:06:46:67:
                    8b:f5:90:df:fe:69:5a:29:5a:70:5e:83:c6:ee:2c:
                    be:64:b4:e4:4b:48:dd:3d:c5:eb:23:3f:92:09:78:
                    77:02:c2:c0:6f:df:4d:0b:f4:26:da:94:8b:e4:29:
                    a6:71:44:27:66:27:b4:b8:0e:e2:20:da:a0:a2:26:
                    4c:b1:7b:11:fc:76:ab:c7:0e:0c:70:ea:12:b0:93:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A7:FB:CE:3B:22:10:BE:F4:F2:DF:59:CD:C7:A7:CF:25:2C:E9:FE
            X509v3 Authority Key Identifier:
                keyid:87:95:8B:A6:61:C4:35:CC:D2:5C:20:60:46:2E:F6:00:D2:71:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:70:7e:0d:d2:fa:48:fb:d5:d2:10:3f:13:e3:8a:2d:b0:
         68:9e:ad:a1:c3:56:0a:3c:43:f7:b9:04:8e:62:16:66:92:a8:
         e1:65:54:2b:5a:6e:1d:0f:a7:e2:17:1c:5d:eb:c6:04:78:3d:
         be:98:28:e1:89:20:40:b2:e6:94:e2:74:70:bf:40:1d:48:f2:
         df:9f:53:af:4e:33:22:0b:01:f1:c7:39:7b:e5:1c:8c:30:c2:
         ae:f9:b0:96:39:43:f2:38:81:1f:e8:fd:7c:b5:00:d3:68:48:
         fa:09:bc:e5:03:94:ec:2f:26:9f:59:12:6f:2a:15:69:e8:22:
         65:63:d5:e6:b4:a9:a7:cd:a2:ce:3e:cc:76:c0:e0:88:bd:b0:
         da:2f:e4:a2:c4:a7:83:8c:48:14:fc:d4:6e:b6:b1:45:3f:25:
         42:60:a3:41:61:d1:6d:cb:95:1a:e3:a6:95:34:23:d0:8c:2f:
         6b:2f:72:bb:05:f9:26:de:aa:09:24:6b:c8:e1:36:b2:a5:e4:
         37:12:fa:26:e8:b0:83:c4:6c:fa:44:89:ff:c3:70:c9:b6:e6:
         d5:01:f4:56:b1:06:32:93:74:ba:04:5d:c2:ea:33:5f:54:27:
         c8:e1:63:6f:34:07:2d:c4:92:c6:4f:f1:4c:ec:45:15:f3:09:
         a2:60:e0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlY9lCsBzIGkPjLsizWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTU4YmE2NjFjNDM1Y2NkMjVjMjA2MDQ2MmVmNjAwZDI3
MTllZTAwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EygyYmE3ZmJjZTNiMjIxMGJlZjRmMmRmNTljZGM3YTdjZjI1MmNlOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQgKe9YT1qkD98Ro8vqC0UigaKR2
SZSfGUfEePZZIGqpPCC7+qBCut2+2MNTJbEt0BosQWoYSsrBdgKopb5fhqLabd9K
vKZ1G6zGT7Tx0/yseh2T4f8Ozg6l8oFBrVvvIdHb+9FhfzV7ftFAApbdLhbIpLXL
Vc4jV7a8kwPfaFEgibn6q9NuK/s3w7n+4rsBk7D0l1DfQn4WJrj9g5ZfV5Q9snd+
GTGozdiQaB6i0NgGRmeL9ZDf/mlaKVpwXoPG7iy+ZLTkS0jdPcXrIz+SCXh3AsLA
b99NC/Qm2pSL5CmmcUQnZie0uA7iINqgoiZMsXsR/Harxw4McOoSsJMXVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCun+847IhC+9PLfWc3Hp88lLOn+MB8GA1UdIwQY
MBaAFIeVi6ZhxDXM0lwgYEYu9gDScZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVXTHBtSEVOY3pTWENCZ1JpNzJBTkp4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82NWNmMGEtYWRlMy00MGIxLTk5ODct
OGMzNGU0Y2Y5MDI2LzEvaDVXTHBtSEVOY3pTWENCZ1JpNzJBTkp4bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82NWNmMGEtYWRlMy00MGIxLTk5ODctOGMzNGU0Y2Y5MDI2
LzEvaDVXTHBtSEVOY3pTWENCZ1JpNzJBTkp4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpNwfg3S
+kj71dIQPxPjii2waJ6tocNWCjxD97kEjmIWZpKo4WVUK1puHQ+n4hccXevGBHg9
vpgo4YkgQLLmlOJ0cL9AHUjy359Tr04zIgsB8cc5e+UcjDDCrvmwljlD8jiBH+j9
fLUA02hI+gm85QOU7C8mn1kSbyoVaegiZWPV5rSpp82izj7MdsDgiL2w2i/kosSn
g4xIFPzUbraxRT8lQmCjQWHRbcuVGuOmlTQj0Iwvay9yuwX5Jt6qCSRryOE2sqXk
NxL6Juiwg8Rs+kSJ/8Nwybbm1QH0VrEGMpN0ugRdwuozX1QnyOFjbzQHLcSSxk/x
TOxFFfMJomDgEQ==
-----END CERTIFICATE-----