Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File:                     lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier:          QAHzDyfJjGRQs0xIQQ5OoHstg9HQqR4BNGBZTnRghNs=
Subject key identifier:   1E:DB:3B:4A:7F:AB:0A:98:21:55:2D:57:DD:DC:B0:BB:DC:65:89:1B
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer:       /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial:       01962E99370B2E6342F241F2755534439C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
                          2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: 5Af9D7IDJ+j1h4KnipjaGQFrFlaFZj/9AARSJRBk5Ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:0b:2e:63:42:f2:41:f2:75:55:34:43:9c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=1edb3b4a7fab0a9821552d57dddcb0bbdc65891b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:23:9a:e0:d5:42:42:a0:2c:00:2f:fa:0e:
                    b6:72:a2:fd:3a:9b:25:27:bf:63:96:ab:e5:fd:5b:
                    35:8a:9e:66:ce:42:59:1f:66:b4:ed:f6:22:6e:e5:
                    9f:7f:a3:d1:f6:d4:cc:4b:e6:37:87:fa:09:47:b5:
                    b0:d1:e3:4e:f7:bf:14:55:a7:3a:d9:d9:bd:75:19:
                    01:53:78:2c:c1:06:95:fc:2b:e2:55:ab:5a:6d:8b:
                    ea:a4:de:a5:4b:8e:05:86:c8:5f:19:04:fa:13:25:
                    2f:47:62:32:d1:e1:a2:2f:47:65:a7:5f:a5:fa:42:
                    e7:26:2e:51:83:68:89:5c:fb:ed:1f:03:29:50:bc:
                    69:b7:6d:39:98:6d:22:1e:a6:37:2e:86:22:77:b7:
                    79:00:65:eb:0a:05:5e:71:91:ec:b5:47:f5:6b:9e:
                    bf:e0:6e:4f:99:2a:d1:60:36:42:71:b9:fc:d9:2f:
                    52:8c:98:71:65:e9:56:6e:50:b0:c7:28:61:74:41:
                    7f:c8:36:2a:e5:2f:b6:57:fa:53:e2:36:e6:31:cb:
                    ed:c6:0a:74:dd:e6:70:16:6f:35:fc:c4:c5:c0:ef:
                    b5:79:bc:dc:67:57:d6:b2:75:23:97:22:b5:7f:9c:
                    69:66:df:8b:37:a5:9a:60:64:0b:0f:ff:c0:df:37:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DB:3B:4A:7F:AB:0A:98:21:55:2D:57:DD:DC:B0:BB:DC:65:89:1B
            X509v3 Authority Key Identifier:
                keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:75:36:50:89:9e:dd:b0:93:76:08:f4:8d:56:f8:5a:45:
         df:79:7e:c3:d6:a1:01:3c:4a:9e:51:8f:c4:8d:21:92:60:ab:
         de:e9:72:27:d0:8e:5c:86:04:66:82:b7:40:08:62:06:fe:cb:
         54:51:46:6b:37:bb:a6:12:a1:f2:8c:21:45:46:d9:96:18:aa:
         bd:94:2a:f1:cb:13:31:4f:62:e2:4c:95:5d:2e:d5:ce:d7:1b:
         94:9b:98:16:d5:2f:71:cb:53:95:89:b3:2b:20:0c:81:07:02:
         ab:d3:b6:8b:b2:61:6e:03:3b:72:85:3b:30:30:a1:db:6d:a9:
         7b:01:69:d1:0d:32:7e:35:72:40:0f:b2:91:dc:d1:9c:b2:70:
         a8:96:0e:8d:7a:a1:de:45:90:4a:c5:b2:a0:7f:2d:1a:a5:56:
         47:fb:a2:d5:5e:43:cc:39:b7:b9:38:46:66:d8:20:80:c3:6a:
         3c:1a:24:32:ff:eb:75:72:2e:80:76:f6:de:82:3b:bd:b4:5b:
         0e:3a:af:d0:60:4b:49:53:62:30:3c:6b:05:20:92:a9:15:44:
         51:7e:96:75:f2:a3:7a:98:8b:37:35:97:f8:25:fc:f5:b4:59:
         15:20:20:94:c8:61:2d:74:19:0d:6e:aa:23:1f:0a:2c:64:ca:
         de:00:6e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTcLLmNC8kHydVU0Q5wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi
MTg2OGYwHhcNMjUwNDEzMTAwMTU1WhcNMjUwNDE0MTAwMTU1WjAzMTEwLwYDVQQD
EygxZWRiM2I0YTdmYWIwYTk4MjE1NTJkNTdkZGRjYjBiYmRjNjU4OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqngjmuDVQkKgLAAv+g62cqL9Opsl
J79jlqvl/Vs1ip5mzkJZH2a07fYibuWff6PR9tTMS+Y3h/oJR7Ww0eNO978UVac6
2dm9dRkBU3gswQaV/CviVatabYvqpN6lS44FhshfGQT6EyUvR2Iy0eGiL0dlp1+l
+kLnJi5Rg2iJXPvtHwMpULxpt205mG0iHqY3LoYid7d5AGXrCgVecZHstUf1a56/
4G5PmSrRYDZCcbn82S9SjJhxZelWblCwxyhhdEF/yDYq5S+2V/pT4jbmMcvtxgp0
3eZwFm81/MTFwO+1ebzcZ1fWsnUjlyK1f5xpZt+LN6WaYGQLD//A3zdEywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7bO0p/qwqYIVUtV93csLvcZYkbMB8GA1UdIwQY
MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt
OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk
LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeR1NlCJ
nt2wk3YI9I1W+FpF33l+w9ahATxKnlGPxI0hkmCr3ulyJ9COXIYEZoK3QAhiBv7L
VFFGaze7phKh8owhRUbZlhiqvZQq8csTMU9i4kyVXS7VztcblJuYFtUvcctTlYmz
KyAMgQcCq9O2i7JhbgM7coU7MDCh222pewFp0Q0yfjVyQA+ykdzRnLJwqJYOjXqh
3kWQSsWyoH8tGqVWR/ui1V5DzDm3uThGZtgggMNqPBokMv/rdXIugHb23oI7vbRb
Djqv0GBLSVNiMDxrBSCSqRVEUX6WdfKjepiLNzWX+CX89bRZFSAglMhhLXQZDW6q
Ix8KLGTK3gBulA==
-----END CERTIFICATE-----