Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier:          lOXQmK06nLokzc3e2n9PUqdIuqiR7gjWtoxS/eUmD0U=
Subject key identifier:   A0:D7:94:EB:62:FA:B8:AD:29:C0:48:04:82:6E:1A:9C:04:E1:ED:F3
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer:       /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial:       01962F3D46B3F7DE89F3A1521E4C2C31070D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
                          2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: cpQsjmERbdQgvjIwJr6DSAc/U9rq+ts7qlMVQETewuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:b3:f7:de:89:f3:a1:52:1e:4c:2c:31:07:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=a0d794eb62fab8ad29c04804826e1a9c04e1edf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:bd:e1:e9:4c:cd:a7:0e:82:de:be:1a:5f:
                    16:a5:a3:c0:c7:32:23:ae:f5:0b:e7:f7:f0:4f:71:
                    26:af:9c:e9:2a:38:d9:2c:21:aa:04:7c:06:b2:cb:
                    7b:8c:37:6d:49:35:cb:4d:93:c2:29:da:d1:b1:6c:
                    be:ba:bb:25:79:80:fd:02:c8:0e:9e:b0:59:12:53:
                    7b:dc:22:35:6b:42:c9:6d:af:f7:89:e7:54:19:cf:
                    a4:d3:cd:18:92:18:2a:0a:bb:ce:2b:ef:9f:3f:1e:
                    65:75:9d:b0:9a:16:8d:40:c2:4b:1e:d5:b7:7f:16:
                    77:9c:18:eb:82:95:27:da:5b:60:f6:8a:ef:f6:4c:
                    e7:ce:08:0d:f2:5c:6e:76:ef:1d:ea:ab:3f:9b:7d:
                    b7:0a:de:2d:0c:a1:9d:28:8c:b7:73:e9:ca:6a:6c:
                    55:d3:67:bd:b2:1a:70:17:bd:5a:41:c6:01:69:13:
                    7b:61:f7:26:9e:56:24:27:a6:69:60:96:f3:4c:3e:
                    65:b6:bb:07:b2:96:7d:59:83:42:e4:94:d3:e1:a7:
                    c6:c6:12:44:03:a5:c6:91:4b:c6:f5:ba:97:52:f3:
                    46:9e:1d:a5:41:2e:85:49:51:dd:0f:cb:b0:7e:eb:
                    78:93:8b:bf:aa:13:21:48:71:95:b9:7d:4d:4e:ae:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D7:94:EB:62:FA:B8:AD:29:C0:48:04:82:6E:1A:9C:04:E1:ED:F3
            X509v3 Authority Key Identifier:
                keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:06:9d:6f:bb:fe:1f:12:45:9e:7f:16:b6:87:66:52:e6:
         f9:ac:22:45:9e:ca:dd:a3:d5:7c:f4:d0:ba:0d:d1:4a:30:19:
         8a:02:47:bc:d2:4f:00:d9:10:67:6a:93:5c:50:24:3c:12:a3:
         08:7d:39:c4:84:89:52:95:13:cb:60:b5:05:25:bc:7f:5c:ec:
         4e:33:73:22:c6:f3:c6:05:95:fc:a0:22:bd:e7:5f:e7:9d:97:
         a9:85:f9:3c:bf:68:35:1c:9f:67:7e:8a:12:88:f1:f1:64:dc:
         02:ea:f5:a3:eb:2e:e2:f7:be:8d:ea:04:6c:61:98:5a:a7:a2:
         66:61:8b:59:d5:2d:01:85:91:2f:3c:40:f6:c4:9f:d4:3e:c7:
         f1:b2:65:dc:6a:af:6d:03:f7:03:f9:e5:11:a6:0c:5e:78:8d:
         81:9e:1d:2a:76:fb:84:43:b8:69:57:04:7d:0e:47:c0:e6:91:
         2e:60:df:aa:0a:99:14:a4:dc:aa:f5:b7:83:1d:8a:99:9c:b6:
         9e:83:22:16:35:ab:7c:78:5a:95:e3:a1:e4:c5:33:6c:e1:c6:
         f3:e7:d6:82:08:5a:94:d5:c8:cd:c3:e4:77:ad:29:e1:5c:76:
         dc:bc:af:49:1e:4f:a6:eb:cf:e7:3c:f2:f1:3e:d7:77:71:27:
         5c:6c:fd:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUaz996J86FSHkwsMQcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm
Yjg4ZWYwHhcNMjUwNDEzMTMwMTA2WhcNMjUwNDE0MTMwMTA2WjAzMTEwLwYDVQQD
EyhhMGQ3OTRlYjYyZmFiOGFkMjljMDQ4MDQ4MjZlMWE5YzA0ZTFlZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkq94elMzacOgt6+Gl8WpaPAxzIj
rvUL5/fwT3Emr5zpKjjZLCGqBHwGsst7jDdtSTXLTZPCKdrRsWy+ursleYD9AsgO
nrBZElN73CI1a0LJba/3iedUGc+k080YkhgqCrvOK++fPx5ldZ2wmhaNQMJLHtW3
fxZ3nBjrgpUn2ltg9orv9kznzggN8lxudu8d6qs/m323Ct4tDKGdKIy3c+nKamxV
02e9shpwF71aQcYBaRN7YfcmnlYkJ6ZpYJbzTD5ltrsHspZ9WYNC5JTT4afGxhJE
A6XGkUvG9bqXUvNGnh2lQS6FSVHdD8uwfut4k4u/qhMhSHGVuX1NTq4WIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDXlOti+ritKcBIBIJuGpwE4e3zMB8GA1UdIwQY
MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt
MWNkNmM4NzFjMWU4LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4
LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6UGnW+7
/h8SRZ5/FraHZlLm+awiRZ7K3aPVfPTQug3RSjAZigJHvNJPANkQZ2qTXFAkPBKj
CH05xISJUpUTy2C1BSW8f1zsTjNzIsbzxgWV/KAivedf552XqYX5PL9oNRyfZ36K
Eojx8WTcAur1o+su4ve+jeoEbGGYWqeiZmGLWdUtAYWRLzxA9sSf1D7H8bJl3Gqv
bQP3A/nlEaYMXniNgZ4dKnb7hEO4aVcEfQ5HwOaRLmDfqgqZFKTcqvW3gx2KmZy2
noMiFjWrfHhaleOh5MUzbOHG8+fWgghalNXIzcPkd60p4Vx23LyvSR5PpuvP5zzy
8T7Xd3EnXGz9dQ==
-----END CERTIFICATE-----