Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File:                     ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier:          Par3Sw4lxqDxIBUSFCIkNurLQl4c7TxYwE1Q7QTADPk=
Subject key identifier:   71:4A:C6:04:C5:94:67:96:7C:9E:75:FE:72:41:05:3F:02:D2:3E:FE
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer:       /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial:       01962DF434A0A1EC7F9AD104BDA4036E53C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number:          02C2
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
                          2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: HRZyLecVcNpDTTtEalYiFzadJPmTWcWMHYNErgBnhKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:a0:a1:ec:7f:9a:d1:04:bd:a4:03:6e:53:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=714ac604c59467967c9e75fe7241053f02d23efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5e:86:43:bb:d9:9d:6e:cc:4b:cb:2d:30:c5:
                    41:85:e9:cf:02:0b:fa:77:ae:f5:9f:a2:86:a8:05:
                    7d:be:53:52:79:73:d9:d7:f7:96:80:bf:f8:4b:a1:
                    59:90:5f:a6:e6:cc:61:69:fc:76:26:d6:72:b3:6c:
                    1a:5e:88:48:6c:c0:a9:03:f1:60:c3:b8:e8:fa:fc:
                    79:97:f3:09:9f:52:1a:b7:da:db:ad:55:58:c7:d5:
                    8d:db:4d:02:d7:63:af:19:17:47:94:cc:89:de:10:
                    04:2f:9b:af:74:b2:40:af:d1:02:79:5f:02:07:96:
                    96:1c:40:96:ce:cd:b6:02:63:ba:99:57:85:d9:bc:
                    48:61:e4:e3:87:6a:13:24:e6:82:13:b4:a9:7a:b1:
                    a5:ad:71:92:ae:fd:e6:3b:7b:65:54:4e:ea:5d:26:
                    14:75:4f:d2:55:da:db:63:58:3f:48:71:e0:02:5f:
                    70:0f:15:18:3e:f6:db:5a:01:23:ec:e8:a1:61:41:
                    8e:0e:d8:f3:df:cb:e0:6d:4f:fc:b0:cb:91:8f:30:
                    0d:61:29:da:8d:5f:94:8f:63:12:20:9e:ec:27:75:
                    82:4e:4d:77:bd:96:59:7e:ed:9b:5a:15:37:c4:b5:
                    f5:0a:77:bf:19:4b:ff:6b:3a:49:22:23:23:71:ed:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:C6:04:C5:94:67:96:7C:9E:75:FE:72:41:05:3F:02:D2:3E:FE
            X509v3 Authority Key Identifier:
                keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:98:e4:54:56:c3:0f:f8:bd:2f:21:d7:7d:68:a2:2b:0d:3c:
         4a:60:cd:8e:96:9c:cd:81:0b:cd:30:d9:e8:4e:c1:c3:29:eb:
         95:02:9d:21:1f:f4:41:26:8a:71:63:ab:60:5a:42:bf:fc:1b:
         d5:40:e6:74:f8:1f:fc:94:36:1d:41:2a:a5:a9:40:ce:d0:01:
         fe:b1:5d:db:b8:c5:40:f4:2a:90:72:7e:9d:8f:94:35:27:c5:
         6b:fa:45:90:3b:6f:7f:e1:0b:76:b5:2d:db:d9:0c:5b:ad:23:
         d0:56:2e:7b:49:cd:70:ff:1f:e9:e0:63:d0:2a:03:88:46:52:
         38:86:07:5d:f2:73:42:f5:e6:6a:63:e5:1a:fb:c9:b7:ab:2c:
         d3:0c:f7:5f:86:9b:cb:60:ed:8f:45:ed:de:3e:84:28:e1:65:
         bc:a6:72:75:c8:9e:88:b8:89:dc:dc:3a:ff:86:77:43:1f:5c:
         7b:39:11:29:b0:5c:82:61:1b:fb:af:24:71:8c:36:e4:db:2e:
         40:29:33:b1:6a:e7:4d:38:54:5e:a6:a5:f9:ea:27:89:0f:27:
         75:a4:54:f6:f3:5f:21:6c:bd:37:20:30:1b:c9:a3:3b:40:32:
         93:cc:bc:d6:bd:8b:a0:e3:fe:ba:82:a1:1a:02:de:52:37:f7:
         cb:75:13:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DSgoex/mtEEvaQDblPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh
NjE3MTcwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg3MTRhYzYwNGM1OTQ2Nzk2N2M5ZTc1ZmU3MjQxMDUzZjAyZDIzZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV6GQ7vZnW7MS8stMMVBhenPAgv6
d671n6KGqAV9vlNSeXPZ1/eWgL/4S6FZkF+m5sxhafx2JtZys2waXohIbMCpA/Fg
w7jo+vx5l/MJn1Iat9rbrVVYx9WN200C12OvGRdHlMyJ3hAEL5uvdLJAr9ECeV8C
B5aWHECWzs22AmO6mVeF2bxIYeTjh2oTJOaCE7SperGlrXGSrv3mO3tlVE7qXSYU
dU/SVdrbY1g/SHHgAl9wDxUYPvbbWgEj7OihYUGODtjz38vgbU/8sMuRjzANYSna
jV+Uj2MSIJ7sJ3WCTk13vZZZfu2bWhU3xLX1Cne/GUv/azpJIiMjce18dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFKxgTFlGeWfJ51/nJBBT8C0j7+MB8GA1UdIwQY
MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt
N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0
LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJjkVFbD
D/i9LyHXfWiiKw08SmDNjpaczYELzTDZ6E7BwynrlQKdIR/0QSaKcWOrYFpCv/wb
1UDmdPgf/JQ2HUEqpalAztAB/rFd27jFQPQqkHJ+nY+UNSfFa/pFkDtvf+ELdrUt
29kMW60j0FYue0nNcP8f6eBj0CoDiEZSOIYHXfJzQvXmamPlGvvJt6ss0wz3X4ab
y2Dtj0Xt3j6EKOFlvKZydcieiLiJ3Nw6/4Z3Qx9cezkRKbBcgmEb+68kcYw25Nsu
QCkzsWrnTThUXqal+eoniQ8ndaRU9vNfIWy9NyAwG8mjO0Ayk8y81r2LoOP+uoKh
GgLeUjf3y3UTuA==
-----END CERTIFICATE-----