Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File:                     IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier:          artuX+o7Fh+ivPFEBNUNkye3Nc30EzJnuvz4h4D+kN4=
Subject key identifier:   E5:F3:EB:69:4C:67:E5:5F:EA:3A:4F:60:DD:E1:42:0E:3E:3B:66:D6
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer:       /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial:       01962ECF74D8DBE47A36C3506F77621A5AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: 9OLZauIT6inYCaT7eu4Mrhz0CMCAY5VcpWMjH3/Ox3k=)
                          2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:d8:db:e4:7a:36:c3:50:6f:77:62:1a:5a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=e5f3eb694c67e55fea3a4f60dde1420e3e3b66d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:da:66:9a:4b:ef:f9:22:50:ca:9c:3a:0d:
                    b8:e9:b0:1a:c6:18:57:2e:92:07:e3:ad:44:f4:79:
                    69:1a:d0:85:86:f3:4e:c3:d9:d3:22:76:85:89:4f:
                    93:3f:20:12:85:52:7e:51:bc:63:1a:0f:66:e8:06:
                    a4:58:53:3f:47:77:f9:b3:a5:fa:0b:9b:37:73:ce:
                    6c:b8:cf:4b:4f:3a:ae:02:dd:41:0f:50:c8:2d:62:
                    02:9c:73:ff:2d:5b:54:73:cb:15:e2:87:b1:85:48:
                    18:07:24:d5:37:4f:2b:31:7a:89:cb:d4:1a:b7:c9:
                    9c:ca:be:65:44:1e:a5:32:a4:87:1e:57:71:46:63:
                    b2:bb:a3:40:6f:09:a7:24:e0:33:01:65:00:8c:49:
                    0e:f4:3d:f6:c2:50:14:45:a1:47:32:09:40:ad:e2:
                    09:37:5f:d9:71:74:65:82:87:86:d3:a6:66:86:83:
                    6f:3f:f9:93:a9:2c:d7:97:d4:3d:43:77:97:e5:cd:
                    66:92:8f:90:7c:53:ac:e3:f5:cf:92:af:b5:67:c4:
                    09:2a:44:df:fb:ac:55:76:86:2e:22:71:78:b0:0c:
                    03:e8:98:86:12:e9:b8:4d:c9:b9:92:1c:27:ff:46:
                    8d:aa:74:1f:ee:11:62:5d:96:fb:8c:e5:76:ec:b5:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F3:EB:69:4C:67:E5:5F:EA:3A:4F:60:DD:E1:42:0E:3E:3B:66:D6
            X509v3 Authority Key Identifier:
                keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:2d:6a:18:aa:b5:78:2e:60:95:57:f7:e9:57:81:ab:2a:
         dd:e0:d5:f6:bc:35:bb:0b:40:3d:16:14:a5:22:58:f3:da:8a:
         47:08:52:e4:5f:40:c7:14:90:8f:12:7e:4a:ff:f7:07:5d:6c:
         7d:c1:eb:01:d5:70:70:0c:30:46:0c:07:18:7f:df:2b:52:93:
         9b:d4:75:24:7d:03:72:4a:87:7f:87:47:f6:a5:e3:38:cb:1c:
         89:9e:64:4f:40:3c:a5:f1:4c:9f:6c:4a:88:9b:60:f8:41:fe:
         c6:4d:db:c5:fc:2c:1c:4f:67:67:6f:1a:f9:c0:d0:fb:db:dd:
         64:b0:c5:25:c5:2b:05:9b:55:57:ec:29:4a:8a:84:7f:f1:b3:
         10:36:ba:18:9c:74:ae:26:ce:d7:98:8c:51:4e:4e:0a:eb:e4:
         1c:4a:eb:af:c3:02:ba:d6:b0:05:b0:81:7d:cd:79:8e:83:ce:
         26:64:9d:ee:ae:59:06:0c:47:50:9a:8b:8e:4b:88:bd:f8:55:
         9e:3d:43:ce:e8:78:3d:99:5a:b4:1b:c8:c4:6a:b0:6d:b8:a9:
         9d:e1:0f:ad:3d:dc:7d:be:32:6e:59:b5:95:b0:a0:a8:a2:c1:
         22:03:6c:2e:ac:35:a1:6e:71:c6:3f:a2:a7:48:66:f2:87:46:
         6b:d2:03:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3TY2+R6NsNQb3diGlqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFiYzdmNzFiYjBkMWE4NTY2ZmQ0NjA0MjE0NTA3YzBk
NDcxMWIwHhcNMjUwNDEzMTEwMTA5WhcNMjUwNDE0MTEwMTA5WjAzMTEwLwYDVQQD
EyhlNWYzZWI2OTRjNjdlNTVmZWEzYTRmNjBkZGUxNDIwZTNlM2I2NmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2jaZppL7/kiUMqcOg246bAaxhhX
LpIH461E9HlpGtCFhvNOw9nTInaFiU+TPyAShVJ+UbxjGg9m6AakWFM/R3f5s6X6
C5s3c85suM9LTzquAt1BD1DILWICnHP/LVtUc8sV4oexhUgYByTVN08rMXqJy9Qa
t8mcyr5lRB6lMqSHHldxRmOyu6NAbwmnJOAzAWUAjEkO9D32wlAURaFHMglAreIJ
N1/ZcXRlgoeG06ZmhoNvP/mTqSzXl9Q9Q3eX5c1mko+QfFOs4/XPkq+1Z8QJKkTf
+6xVdoYuInF4sAwD6JiGEum4Tcm5khwn/0aNqnQf7hFiXZb7jOV27LUkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXz62lMZ+Vf6jpPYN3hQg4+O2bWMB8GA1UdIwQY
MBaAFCAxvH9xuw0ahWb9RgQhRQfA1HEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYt
ZTNmNGJiY2JiYmQ3LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYtZTNmNGJiY2JiYmQ3
LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTktahiq
tXguYJVX9+lXgasq3eDV9rw1uwtAPRYUpSJY89qKRwhS5F9AxxSQjxJ+Sv/3B11s
fcHrAdVwcAwwRgwHGH/fK1KTm9R1JH0DckqHf4dH9qXjOMsciZ5kT0A8pfFMn2xK
iJtg+EH+xk3bxfwsHE9nZ28a+cDQ+9vdZLDFJcUrBZtVV+wpSoqEf/GzEDa6GJx0
ribO15iMUU5OCuvkHErrr8MCutawBbCBfc15joPOJmSd7q5ZBgxHUJqLjkuIvfhV
nj1Dzuh4PZlatBvIxGqwbbipneEPrT3cfb4yblm1lbCgqKLBIgNsLqw1oW5xxj+i
p0hm8odGa9IDnA==
-----END CERTIFICATE-----