Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File:                     S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier:          YYvQddNBk5/qvSab0Iyftd4bcp0zsmDoePibnF/MpVY=
Subject key identifier:   D6:51:50:AF:E0:05:E3:AE:FF:BC:E8:B7:CC:76:53:26:80:00:22:FF
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer:       /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial:       01962F06CBE92238079F8231AB42AA452F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number:          1443
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: 7gpkcGDyO5wHtAXeWT+rx9XQfwD52D/2pI3OtbKJQA4=)
                          2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cb:e9:22:38:07:9f:82:31:ab:42:aa:45:2f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=d65150afe005e3aeffbce8b7cc765326800022ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:fb:2f:c7:e0:d0:17:82:56:09:04:d0:70:
                    5b:65:77:c6:d3:7e:f4:fb:d8:fb:c0:b2:c5:76:86:
                    7c:80:7b:b1:3b:66:ca:7f:90:e1:a6:37:83:c2:71:
                    7c:a6:d8:47:fa:81:a5:77:36:65:92:bb:be:ee:94:
                    9d:59:61:39:76:07:66:16:c4:3d:ce:6d:1a:e1:c5:
                    55:38:d3:f7:cf:d4:1f:e2:5b:00:ef:0f:ec:9b:46:
                    61:d9:aa:cb:dc:de:9a:1f:ea:f2:14:4a:88:66:ae:
                    f1:48:aa:6f:98:8a:1e:f2:08:99:7e:2c:f3:ab:b5:
                    3d:9e:4b:33:da:c9:b8:6c:e7:6a:d5:ac:03:64:ed:
                    75:0d:2b:5e:31:2a:30:91:0e:b4:c3:7b:93:0c:d8:
                    e8:3e:11:e3:8e:e7:d6:cf:e9:65:1c:e6:83:7b:d5:
                    77:e6:a9:51:fa:b4:21:fc:70:46:1e:eb:e3:23:42:
                    f0:1f:e9:98:de:1c:8f:0d:81:d9:07:c3:a7:dc:5a:
                    f7:22:ff:8a:fd:5d:cb:36:9b:ed:d6:17:ee:a8:1d:
                    d0:64:69:28:dc:18:87:23:d0:e2:34:88:75:7c:b9:
                    68:87:78:4b:7e:f9:09:3e:63:90:3a:18:e0:49:20:
                    3d:58:e5:4c:e3:6a:fc:06:42:9c:7d:c1:42:42:4f:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:51:50:AF:E0:05:E3:AE:FF:BC:E8:B7:CC:76:53:26:80:00:22:FF
            X509v3 Authority Key Identifier:
                keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:23:08:0d:99:2a:f3:ba:88:bb:16:02:b6:9f:37:a5:cf:
         98:00:57:13:c4:9e:80:cf:47:74:db:77:a9:2a:7f:31:65:76:
         73:58:e6:0b:60:ec:00:0d:9b:55:2a:8e:03:3f:d4:32:ec:21:
         05:56:15:df:e6:cf:6b:d5:5d:be:67:3f:e5:bd:bb:20:ca:2a:
         bc:65:f4:7b:3d:93:41:05:11:7f:c7:5b:81:9e:cd:32:8b:11:
         de:1f:b6:79:97:30:c8:d0:b9:e5:22:b0:59:42:79:56:20:ce:
         87:8b:aa:37:c3:16:48:a6:05:ce:75:29:6c:cb:02:3e:33:70:
         1a:6b:27:27:7c:af:d9:7e:f3:e5:ce:a9:9f:79:c1:e8:52:78:
         9e:76:01:c0:ee:ff:5d:db:89:57:5b:b5:ac:3b:70:7a:90:b5:
         38:58:d5:fb:ba:3d:84:28:3e:d9:84:31:75:61:3c:24:dd:81:
         82:94:01:68:b0:5d:c7:24:8b:ab:f9:de:22:34:50:14:06:6a:
         35:a8:25:31:ef:87:49:5e:cb:2b:cb:33:fb:d9:61:c6:67:15:
         41:9a:7a:95:f9:36:c5:7f:35:5e:d4:5b:93:fc:ff:4c:c3:bf:
         ff:31:e9:49:a9:4c:db:26:1f:bc:15:9a:2c:aa:48:1f:f1:a6:
         49:07:a5:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsvpIjgHn4Ixq0KqRS+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTNjNmExMGQxNDFmMDBhZWZhZGUwMWJjZDM0OTJmNzU0
ZjRlODMwHhcNMjUwNDEzMTIwMTM2WhcNMjUwNDE0MTIwMTM2WjAzMTEwLwYDVQQD
EyhkNjUxNTBhZmUwMDVlM2FlZmZiY2U4YjdjYzc2NTMyNjgwMDAyMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjv7L8fg0BeCVgkE0HBbZXfG0370
+9j7wLLFdoZ8gHuxO2bKf5DhpjeDwnF8pthH+oGldzZlkru+7pSdWWE5dgdmFsQ9
zm0a4cVVONP3z9Qf4lsA7w/sm0Zh2arL3N6aH+ryFEqIZq7xSKpvmIoe8giZfizz
q7U9nksz2sm4bOdq1awDZO11DSteMSowkQ60w3uTDNjoPhHjjufWz+llHOaDe9V3
5qlR+rQh/HBGHuvjI0LwH+mY3hyPDYHZB8On3Fr3Iv+K/V3LNpvt1hfuqB3QZGko
3BiHI9DiNIh1fLloh3hLfvkJPmOQOhjgSSA9WOVM42r8BkKcfcFCQk+nzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZRUK/gBeOu/7zot8x2UyaAACL/MB8GA1UdIwQY
MBaAFEuTxqENFB8ArvreAbzTSS91T06DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEt
ZTEwNGM5ODJkN2EwLzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEtZTEwNGM5ODJkN2Ew
LzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmwjCA2Z
KvO6iLsWArafN6XPmABXE8SegM9HdNt3qSp/MWV2c1jmC2DsAA2bVSqOAz/UMuwh
BVYV3+bPa9Vdvmc/5b27IMoqvGX0ez2TQQURf8dbgZ7NMosR3h+2eZcwyNC55SKw
WUJ5ViDOh4uqN8MWSKYFznUpbMsCPjNwGmsnJ3yv2X7z5c6pn3nB6FJ4nnYBwO7/
XduJV1u1rDtwepC1OFjV+7o9hCg+2YQxdWE8JN2BgpQBaLBdxySLq/neIjRQFAZq
NaglMe+HSV7LK8sz+9lhxmcVQZp6lfk2xX81XtRbk/z/TMO//zHpSalM2yYfvBWa
LKpIH/GmSQel5w==
-----END CERTIFICATE-----