Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File:                     mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier:          QaSxFqkdVtl6ywWqBO9Dd+iMU38b6NWE/pIIUYOn86E=
Subject key identifier:   B5:22:7A:17:7E:C9:B6:D5:46:8A:94:FD:BE:38:7B:67:29:8B:25:F2
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer:       /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial:       01962F06FD49F6A41552154585C37B3194DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number:          030F
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: 022L9fV8F1ZZ2EE1EuaAsn4eywo.roa (hash: XmLPJO8dC104vud5SObyJBz1K1qN+7X4uqFqIhLIBZ4=)
                          2: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: 7oq+krb5TIWcVzqWT/8KYUMtzHiSpsT6XFwGlPS4Tm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:49:f6:a4:15:52:15:45:85:c3:7b:31:94:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=b5227a177ec9b6d5468a94fdbe387b67298b25f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:0f:ea:7f:4f:1a:ff:2d:aa:84:b8:12:ea:
                    15:94:8c:f8:a8:f7:c3:53:53:c6:8a:11:41:3a:d2:
                    54:22:61:cb:94:73:e2:7b:ab:ad:4a:dd:00:f4:b0:
                    57:bb:60:21:d7:8c:f3:eb:1b:c9:56:9d:e5:5a:7a:
                    97:33:99:48:d1:2a:03:b4:1e:c6:b2:de:87:62:41:
                    0b:b3:71:c5:2e:11:90:f4:32:73:13:f5:9d:f1:33:
                    5b:45:f3:e3:2a:4d:d1:26:5f:20:7a:06:f2:89:cd:
                    a0:2f:2d:f8:17:e0:4c:2a:24:d2:3d:31:1c:93:ed:
                    e2:c6:d4:58:f9:9c:d3:b2:20:32:1c:f7:87:27:41:
                    17:75:4a:d1:5e:c0:db:70:2f:9f:97:eb:ab:99:d8:
                    b7:08:a7:43:e0:37:14:f0:c1:b7:fb:09:95:67:a6:
                    e1:30:b7:ae:5b:20:25:57:b8:41:70:51:d2:b9:0e:
                    b0:3d:4a:45:6f:47:66:42:f9:4e:b7:e2:01:6b:75:
                    79:e5:f5:09:c2:aa:7d:1b:7a:59:8d:7f:dc:37:2f:
                    12:19:09:85:0e:80:32:59:f4:a5:a0:e5:27:78:9c:
                    7c:c2:ef:a4:95:21:4b:1a:10:cc:b8:ed:ce:d2:07:
                    37:88:30:b2:c6:83:50:90:1c:f8:be:54:16:64:46:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:7A:17:7E:C9:B6:D5:46:8A:94:FD:BE:38:7B:67:29:8B:25:F2
            X509v3 Authority Key Identifier:
                keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:8e:b7:7a:fb:a4:7a:45:44:c7:6f:e9:51:ae:16:70:26:
         9d:c6:79:89:ec:8c:cd:2b:12:1a:a2:58:76:5d:3d:ba:1a:3f:
         ca:d5:22:ff:30:13:12:69:76:15:4d:a3:e3:4e:d3:d0:58:25:
         cf:0c:90:3b:ff:6c:f1:49:ca:a5:4c:9a:71:9f:86:f6:8c:41:
         4a:67:5d:e6:36:a3:63:4e:14:f7:cd:17:99:d7:59:66:2b:49:
         53:19:4e:90:77:a5:45:61:3c:39:c8:0d:2a:d3:14:b7:ae:47:
         0a:ed:47:8a:38:24:a9:9c:18:41:c4:46:96:16:68:0c:1a:c3:
         f1:5f:e6:f2:52:c4:a6:66:47:ec:58:a0:a8:12:4e:9e:b4:87:
         40:ef:fc:5d:22:5e:d7:e7:76:47:28:08:47:34:7f:a6:03:f9:
         f1:3d:03:c7:8a:79:15:a7:7e:6b:80:42:d1:02:95:86:72:6a:
         81:e3:50:6a:61:c9:9b:f3:90:fd:1c:1d:df:e2:b4:12:a2:22:
         85:37:27:bc:ed:13:1b:ff:2e:69:73:5e:c3:73:27:8e:72:17:
         6b:e8:65:e0:3c:b4:96:1c:5d:ec:46:79:a9:3c:84:0b:1b:a9:
         2e:d6:3e:6f:cd:55:ce:1d:2c:6a:19:81:ec:f0:ae:db:96:a3:
         c0:7d:d0:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBv1J9qQVUhVFhcN7MZTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWZlOTY5Y2YwZWE5M2EwZThlNTdlZTk1ODhjYWY1NTcy
YjNiMjIwHhcNMjUwNDEzMTIwMTQ5WhcNMjUwNDE0MTIwMTQ5WjAzMTEwLwYDVQQD
EyhiNTIyN2ExNzdlYzliNmQ1NDY4YTk0ZmRiZTM4N2I2NzI5OGIyNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscUP6n9PGv8tqoS4EuoVlIz4qPfD
U1PGihFBOtJUImHLlHPie6utSt0A9LBXu2Ah14zz6xvJVp3lWnqXM5lI0SoDtB7G
st6HYkELs3HFLhGQ9DJzE/Wd8TNbRfPjKk3RJl8gegbyic2gLy34F+BMKiTSPTEc
k+3ixtRY+ZzTsiAyHPeHJ0EXdUrRXsDbcC+fl+urmdi3CKdD4DcU8MG3+wmVZ6bh
MLeuWyAlV7hBcFHSuQ6wPUpFb0dmQvlOt+IBa3V55fUJwqp9G3pZjX/cNy8SGQmF
DoAyWfSloOUneJx8wu+klSFLGhDMuO3O0gc3iDCyxoNQkBz4vlQWZEZL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUiehd+ybbVRoqU/b44e2cpiyXyMB8GA1UdIwQY
MBaAFJiv6WnPDqk6Do5X7pWIyvVXKzsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MmJkMDctM2NmMS00NWIxLTllZWYt
Yjg0N2ViNzdhZmM4LzEvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MmJkMDctM2NmMS00NWIxLTllZWYtYjg0N2ViNzdhZmM4
LzEvbUtfcGFjOE9xVG9PamxmdWxZaks5VmNyT3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff2Ot3r7
pHpFRMdv6VGuFnAmncZ5ieyMzSsSGqJYdl09uho/ytUi/zATEml2FU2j407T0Fgl
zwyQO/9s8UnKpUyacZ+G9oxBSmdd5jajY04U980XmddZZitJUxlOkHelRWE8OcgN
KtMUt65HCu1HijgkqZwYQcRGlhZoDBrD8V/m8lLEpmZH7FigqBJOnrSHQO/8XSJe
1+d2RygIRzR/pgP58T0Dx4p5Fad+a4BC0QKVhnJqgeNQamHJm/OQ/Rwd3+K0EqIi
hTcnvO0TG/8uaXNew3MnjnIXa+hl4Dy0lhxd7EZ5qTyECxupLtY+b81Vzh0sahmB
7PCu25ajwH3Qgw==
-----END CERTIFICATE-----