Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File:                     cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier:          FZfYGPlo4MyqVSplZoEw6GoJvOz6/XNV83KSIkYmRGs=
Subject key identifier:   CA:15:7E:56:A2:60:6E:9D:50:9C:C9:8E:5C:48:47:85:30:BC:38:F1
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer:       /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial:       01962ECF9410D8DCBF2F8B73976435514142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number:          1096
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: MkZrEXKyhFwVvNuGV9aT6iA9e-E.roa (hash: P+ppmdHA85AavE4SuC0r26COz1iZwYG4tMktUYoh6TQ=)
                          2: bvvZErx8yb4YddobsQuNGqwzPUw.roa (hash: qLe1f2hJ1WmPgxP8UHTFIQszxs7kYJ5N6PdJJshRMio=)
                          3: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: 8oS951VHjOvTxWl3LqTQIm9+BHPIJQ2AM/67m35qMqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:10:d8:dc:bf:2f:8b:73:97:64:35:51:41:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=ca157e56a2606e9d509cc98e5c48478530bc38f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:de:e1:9b:80:ad:a5:9c:68:e4:95:3a:8d:
                    24:14:ea:99:e9:6f:6e:76:c2:10:b4:c6:11:f0:ba:
                    fc:fc:13:90:6f:cd:b0:d4:83:ba:42:87:a3:f2:8b:
                    30:13:e7:23:55:98:8f:61:ba:d9:71:ab:03:1d:78:
                    0a:82:a1:76:ec:80:2a:9f:98:68:8a:dd:33:8d:5b:
                    69:d6:69:a2:16:d3:71:9a:23:c2:50:48:98:8e:82:
                    39:92:d1:61:ae:30:fc:c0:b4:ac:24:45:e8:e3:0c:
                    5f:d3:f2:85:72:77:8d:b9:d5:57:40:de:51:c7:26:
                    f3:a0:44:ae:50:72:01:15:4c:07:db:e1:08:76:a3:
                    fa:9e:a8:68:fe:d0:fb:c1:75:8e:6a:6f:82:97:d0:
                    84:fe:e4:d1:60:3a:46:c2:8f:90:90:ae:b2:97:16:
                    c1:fb:97:8d:d7:3f:df:e4:a1:07:c8:36:ee:90:35:
                    d0:14:ae:58:22:86:67:61:c6:00:c1:2f:94:e2:25:
                    08:eb:97:f1:79:a6:71:60:0f:6a:c2:f1:4a:53:d9:
                    9e:2b:99:ad:6c:da:0f:76:32:d6:ad:da:8c:4f:81:
                    43:b2:28:ea:37:d7:0e:dc:cd:0a:e3:a1:10:8c:ff:
                    30:41:19:57:13:03:55:b8:91:82:8a:67:23:58:11:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:15:7E:56:A2:60:6E:9D:50:9C:C9:8E:5C:48:47:85:30:BC:38:F1
            X509v3 Authority Key Identifier:
                keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:29:e4:7f:af:1d:bb:b0:36:4b:52:a7:44:d7:1b:4a:90:
         37:37:c4:92:c6:b0:95:d5:dc:ed:67:ca:16:e7:e9:ae:3a:aa:
         0e:4a:8a:bd:50:cd:e3:68:df:d9:56:b4:23:0b:47:7d:46:88:
         50:93:95:d6:ac:5a:52:bb:83:3b:44:7a:9a:b8:8e:47:2f:11:
         c7:08:e7:43:df:51:0e:29:f9:a8:c3:bc:e9:12:44:37:d7:e1:
         52:4e:7d:fe:05:3a:d7:e8:4a:ca:24:1b:c9:9f:28:ef:c9:2a:
         8c:d5:d7:62:69:ae:9a:3e:24:0c:f3:89:ba:30:cd:4c:11:5e:
         04:c5:8a:42:ed:27:32:c6:32:e3:b7:4c:b4:7d:0c:39:2d:f0:
         f0:2c:b4:11:10:8d:ea:4b:6f:88:f5:27:33:a3:f4:08:b8:eb:
         39:b2:1c:ed:79:9d:13:5a:a6:06:5c:7b:a9:63:09:45:e7:91:
         11:d6:f4:6b:db:68:e4:8e:da:c7:6c:5a:e3:83:e1:31:62:90:
         9a:68:10:1a:f9:f1:71:11:92:a8:cb:7c:28:36:7d:78:7f:08:
         84:05:fc:cf:ae:ed:2a:e8:47:7b:74:fc:c7:46:fb:c3:af:1e:
         17:6d:ed:39:ee:fe:e8:2a:ac:cb:8f:a3:9d:c2:17:00:0e:3b:
         a6:4e:b6:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5QQ2Ny/L4tzl2Q1UUFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy
NTY5ZDMwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
EyhjYTE1N2U1NmEyNjA2ZTlkNTA5Y2M5OGU1YzQ4NDc4NTMwYmMzOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Te4ZuAraWcaOSVOo0kFOqZ6W9u
dsIQtMYR8Lr8/BOQb82w1IO6Qoej8oswE+cjVZiPYbrZcasDHXgKgqF27IAqn5ho
it0zjVtp1mmiFtNxmiPCUEiYjoI5ktFhrjD8wLSsJEXo4wxf0/KFcneNudVXQN5R
xybzoESuUHIBFUwH2+EIdqP6nqho/tD7wXWOam+Cl9CE/uTRYDpGwo+QkK6ylxbB
+5eN1z/f5KEHyDbukDXQFK5YIoZnYcYAwS+U4iUI65fxeaZxYA9qwvFKU9meK5mt
bNoPdjLWrdqMT4FDsijqN9cO3M0K46EQjP8wQRlXEwNVuJGCimcjWBGhsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoVflaiYG6dUJzJjlxIR4UwvDjxMB8GA1UdIwQY
MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct
MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz
LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+Yp5H+v
HbuwNktSp0TXG0qQNzfEksawldXc7WfKFufprjqqDkqKvVDN42jf2Va0IwtHfUaI
UJOV1qxaUruDO0R6mriORy8RxwjnQ99RDin5qMO86RJEN9fhUk59/gU61+hKyiQb
yZ8o78kqjNXXYmmumj4kDPOJujDNTBFeBMWKQu0nMsYy47dMtH0MOS3w8Cy0ERCN
6ktviPUnM6P0CLjrObIc7XmdE1qmBlx7qWMJReeREdb0a9to5I7ax2xa44PhMWKQ
mmgQGvnxcRGSqMt8KDZ9eH8IhAX8z67tKuhHe3T8x0b7w68eF23tOe7+6Cqsy4+j
ncIXAA47pk62vA==
-----END CERTIFICATE-----