Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
File:                     69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json)
Hash identifier:          4JcsBw79L+WBRD3WIsaOXq8iZvH74UrzyZu3zi4ocvg=
Subject key identifier:   D4:35:3B:64:48:BA:E2:62:C5:FE:B9:99:94:D6:8B:7A:18:64:F4:F8
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Certificate issuer:       /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial:       01962DF3CB700DA1B62FFB8186A03A78D717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: HhVxYnIGBjDElHhvp551ZZqDG2EMrPB4CXCFwYFuTHE=)
                          2: jKlk89-fCSzoTB01s7RShivsAOE.roa (hash: iI/3xADl4iYI6LJcczTraHOHC9ZNevaWvmg8LIoJztg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:70:0d:a1:b6:2f:fb:81:86:a0:3a:78:d7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=d4353b6448bae262c5feb99994d68b7a1864f4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:e4:07:a9:61:1c:1f:a4:a8:9b:ef:67:f3:
                    02:4f:f1:c8:cc:3b:02:c5:7d:b9:9e:48:8e:a2:ee:
                    16:26:46:3f:d5:13:4e:c3:4e:fc:af:7e:7e:7b:98:
                    e1:45:ad:b9:cc:02:08:c9:02:6a:9b:76:31:d4:72:
                    d5:12:d7:d1:96:be:e1:ba:42:5a:77:e6:16:fa:58:
                    98:63:26:b2:de:8a:4b:71:9b:92:92:a1:c7:af:40:
                    cc:a8:3d:35:71:44:ed:91:12:64:7a:b0:04:57:c9:
                    b7:fe:10:8d:01:9a:86:05:ca:d5:9a:5a:74:25:11:
                    b2:52:9b:b8:de:3a:3f:3a:5e:52:46:ed:eb:92:07:
                    e7:9c:de:c0:f3:0b:87:b5:27:a3:67:d9:77:ff:15:
                    10:51:69:69:3e:95:c1:3d:80:96:9f:31:7e:78:6b:
                    37:17:fb:86:39:41:35:8a:57:f2:7b:ec:63:f2:05:
                    17:61:49:b9:12:e4:dc:a3:f4:54:7e:5d:b8:ad:79:
                    d1:93:03:29:dc:48:5e:b2:b1:b6:89:38:18:7a:be:
                    2d:c0:65:e5:87:1e:bb:ff:ad:5f:3e:41:58:8f:96:
                    8a:b7:81:b3:f5:8d:df:44:86:74:81:0e:fd:1e:c3:
                    6d:39:db:c9:47:05:ef:f9:62:f7:da:3f:f1:68:fe:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:3B:64:48:BA:E2:62:C5:FE:B9:99:94:D6:8B:7A:18:64:F4:F8
            X509v3 Authority Key Identifier:
                keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:52:c2:47:0c:3c:1a:53:f2:92:8e:d9:45:04:40:4c:dc:
         8a:c6:80:a6:b0:e4:2c:d4:31:fa:2a:7d:a2:06:40:c8:1f:d9:
         c1:b9:90:1f:a9:90:38:4e:1d:8c:4c:c5:be:5a:70:3b:4b:53:
         e0:7b:cb:2e:9e:80:6b:b1:a4:b1:15:ce:65:7d:01:a6:23:5c:
         a4:1e:16:67:13:0f:05:43:88:0b:16:f8:de:b2:f1:d4:fa:80:
         54:3d:9c:83:1c:15:7f:ae:aa:07:fa:93:82:9f:af:cb:86:95:
         54:b0:6e:83:51:2f:cb:e7:e8:7e:da:7b:c5:f1:ce:70:87:b4:
         39:0e:da:a9:ec:f6:c0:ac:d4:c0:05:7d:02:a7:33:da:cd:fe:
         d7:a5:3d:a2:28:7c:28:ed:93:8e:1b:b1:ca:30:32:ae:b7:f3:
         0f:a2:32:62:38:1e:85:dc:01:8c:4a:eb:82:74:05:1a:cb:5f:
         a4:54:57:e3:d0:d7:2a:b1:2e:1f:ad:6f:84:a7:d9:fe:cc:81:
         a0:4d:7f:93:46:68:aa:75:74:26:71:06:1f:d4:cf:72:ce:75:
         ec:db:f7:b7:e3:ae:5d:d5:a8:66:83:e1:44:74:c0:63:48:41:
         55:b2:c6:b9:7f:a2:5d:b2:b0:85:3e:3c:9a:15:66:91:dc:82:
         3f:59:a5:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88twDaG2L/uBhqA6eNcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZGZhN2MwYWQ3ZWY2NzRkZDViNDE5NDk2MGYyZmZkNDEx
NWYyNjEwHhcNMjUwNDEzMDcwMTE0WhcNMjUwNDE0MDcwMTE0WjAzMTEwLwYDVQQD
EyhkNDM1M2I2NDQ4YmFlMjYyYzVmZWI5OTk5NGQ2OGI3YTE4NjRmNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrzkB6lhHB+kqJvvZ/MCT/HIzDsC
xX25nkiOou4WJkY/1RNOw078r35+e5jhRa25zAIIyQJqm3Yx1HLVEtfRlr7hukJa
d+YW+liYYyay3opLcZuSkqHHr0DMqD01cUTtkRJkerAEV8m3/hCNAZqGBcrVmlp0
JRGyUpu43jo/Ol5SRu3rkgfnnN7A8wuHtSejZ9l3/xUQUWlpPpXBPYCWnzF+eGs3
F/uGOUE1ilfye+xj8gUXYUm5EuTco/RUfl24rXnRkwMp3EhesrG2iTgYer4twGXl
hx67/61fPkFYj5aKt4Gz9Y3fRIZ0gQ79HsNtOdvJRwXv+WL32j/xaP5phQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ1O2RIuuJixf65mZTWi3oYZPT4MB8GA1UdIwQY
MBaAFOvfp8CtfvZ03VtBlJYPL/1BFfJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MzRmZWQtODc3ZC00YTBmLWEyNTYt
ODUzNDVmNjYwNjU1LzEvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80MzRmZWQtODc3ZC00YTBmLWEyNTYtODUzNDVmNjYwNjU1
LzEvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW5SwkcM
PBpT8pKO2UUEQEzcisaAprDkLNQx+ip9ogZAyB/ZwbmQH6mQOE4djEzFvlpwO0tT
4HvLLp6Aa7GksRXOZX0BpiNcpB4WZxMPBUOICxb43rLx1PqAVD2cgxwVf66qB/qT
gp+vy4aVVLBug1Evy+foftp7xfHOcIe0OQ7aqez2wKzUwAV9Aqcz2s3+16U9oih8
KO2TjhuxyjAyrrfzD6IyYjgehdwBjErrgnQFGstfpFRX49DXKrEuH61vhKfZ/syB
oE1/k0ZoqnV0JnEGH9TPcs517Nv3t+OuXdWoZoPhRHTAY0hBVbLGuX+iXbKwhT48
mhVmkdyCP1ml0A==
-----END CERTIFICATE-----