Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File:                     0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier:          01YR4nLLvTG/pNZlYcps/JzM4CanellLsvv2OJTRa6U=
Subject key identifier:   97:44:9E:9F:E5:40:82:F1:F6:65:E6:BA:01:96:E8:8C:17:02:BE:95
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer:       /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial:       01962E9996387BFB9E57251F24BA575C9EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: bGrLnVWWLhlvMky6wIexjad4JpbNyYvfD2Enk9CYjZs=)
                          2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:38:7b:fb:9e:57:25:1f:24:ba:57:5c:9e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=97449e9fe54082f1f665e6ba0196e88c1702be95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:e8:f0:5f:b7:33:f4:cc:a2:89:79:57:f1:
                    e2:13:95:54:d8:95:4a:ef:91:5f:f0:1f:66:89:33:
                    6f:03:0f:0f:f7:18:a3:7b:1b:2d:e1:68:e5:ad:e5:
                    41:69:d4:99:8a:c6:00:d3:1f:41:07:2f:30:bd:ae:
                    14:e6:f0:ec:73:fe:b1:e2:2d:b3:46:c2:4d:94:da:
                    1b:c4:71:e5:87:c1:d6:8a:14:ed:5a:82:45:0e:fd:
                    d8:64:f6:72:63:f9:a3:dc:54:62:b0:38:06:b1:01:
                    21:e0:1f:9e:53:9f:a5:26:a4:45:67:9b:68:67:90:
                    64:d3:07:1d:3a:b7:8c:47:99:c4:2a:5c:85:22:aa:
                    55:13:74:a0:df:59:dc:36:9a:61:43:99:a6:99:48:
                    9d:18:f0:6a:b8:36:15:08:00:4a:1e:3a:51:97:23:
                    87:ff:68:4b:bb:15:a6:40:c2:1d:96:69:31:9c:52:
                    68:c4:e0:07:36:5d:27:6a:d8:c6:2d:26:20:bf:c6:
                    6d:4b:eb:c9:79:c8:a4:2d:33:4c:a5:c1:0f:4d:34:
                    2f:db:e5:89:5e:4d:9a:39:89:56:4b:ca:64:28:13:
                    07:a1:ac:86:f2:cf:9f:95:dc:40:d2:17:ff:6b:20:
                    63:55:78:7b:0f:ad:c3:0d:b5:f2:69:b1:57:64:9a:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:9E:9F:E5:40:82:F1:F6:65:E6:BA:01:96:E8:8C:17:02:BE:95
            X509v3 Authority Key Identifier:
                keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:c7:ff:45:dd:0f:f0:2e:e1:02:13:08:2e:3d:2e:f4:6f:
         eb:d3:8d:3c:b6:09:df:fe:31:d5:e7:39:7e:9f:ea:4b:28:d5:
         1e:34:25:ec:75:73:6f:5e:6c:22:7b:8f:d1:4b:8f:9e:40:ad:
         b7:7d:05:db:c8:08:b2:1b:5f:4b:23:11:21:7b:15:9a:80:d8:
         f0:07:e1:d8:b7:88:4f:bd:aa:8a:1d:67:99:e3:b5:b8:e7:af:
         75:cf:33:34:15:6c:dd:07:38:0e:a6:70:7d:8c:17:ca:85:35:
         f7:5a:80:c3:20:66:7e:72:4c:49:5a:9f:8f:df:73:1b:92:fd:
         13:e0:56:00:f9:bc:c8:8a:ca:5b:59:67:f7:38:6b:bb:58:af:
         71:78:8d:0a:de:27:54:63:c1:77:8e:0f:1b:09:54:e4:1d:a9:
         e7:20:01:84:e1:1c:12:88:f4:1a:d8:74:69:7d:c3:f1:37:13:
         45:d2:75:12:dc:60:9b:5a:fe:4b:77:8e:fb:15:ee:d7:bc:8b:
         31:4c:5b:36:33:47:b5:0a:37:fc:6c:a6:0a:a4:13:64:83:4d:
         39:b0:98:96:ea:1d:ac:20:20:7c:61:29:cd:1e:32:32:d0:f1:
         87:95:96:e7:58:6c:b4:82:46:d0:f8:ee:59:84:97:98:6c:f8:
         4c:92:d3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZY4e/ueVyUfJLpXXJ78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGJhNjMzZjFlOTgyNDA3NmQxNjFhOTgzZDhiOGU4ODEy
NjM5ODIwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
Eyg5NzQ0OWU5ZmU1NDA4MmYxZjY2NWU2YmEwMTk2ZTg4YzE3MDJiZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW/o8F+3M/TMool5V/HiE5VU2JVK
75Ff8B9miTNvAw8P9xijexst4WjlreVBadSZisYA0x9BBy8wva4U5vDsc/6x4i2z
RsJNlNobxHHlh8HWihTtWoJFDv3YZPZyY/mj3FRisDgGsQEh4B+eU5+lJqRFZ5to
Z5Bk0wcdOreMR5nEKlyFIqpVE3Sg31ncNpphQ5mmmUidGPBquDYVCABKHjpRlyOH
/2hLuxWmQMIdlmkxnFJoxOAHNl0natjGLSYgv8ZtS+vJecikLTNMpcEPTTQv2+WJ
Xk2aOYlWS8pkKBMHoayG8s+fldxA0hf/ayBjVXh7D63DDbXyabFXZJojswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdEnp/lQILx9mXmugGW6IwXAr6VMB8GA1UdIwQY
MBaAFNALpjPx6YJAdtFhqYPYuOiBJjmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAt
M2NjMTFiYzlkNTk0LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAtM2NjMTFiYzlkNTk0
LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPzH/0Xd
D/Au4QITCC49LvRv69ONPLYJ3/4x1ec5fp/qSyjVHjQl7HVzb15sInuP0UuPnkCt
t30F28gIshtfSyMRIXsVmoDY8Afh2LeIT72qih1nmeO1uOevdc8zNBVs3Qc4DqZw
fYwXyoU191qAwyBmfnJMSVqfj99zG5L9E+BWAPm8yIrKW1ln9zhru1ivcXiNCt4n
VGPBd44PGwlU5B2p5yABhOEcEoj0Gth0aX3D8TcTRdJ1Etxgm1r+S3eO+xXu17yL
MUxbNjNHtQo3/GymCqQTZINNObCYluodrCAgfGEpzR4yMtDxh5WW51hstIJG0Pju
WYSXmGz4TJLTQA==
-----END CERTIFICATE-----