Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File:                     Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier:          Jvrh8weDbMDDnLTn9I01q1eqcJwXyrvHl9ocfAWraCc=
Subject key identifier:   78:F0:17:C7:2D:71:25:A8:40:41:69:18:E7:CB:DF:5F:B5:ED:5F:F1
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer:       /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial:       01962DF3A7AE1FCB2A280BBBDBD59986359F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number:          0262
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: wpX48NNjGkNdrmVCnrQo1ATZK2EGEAmFWKg1vybnCac=)
                          2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:ae:1f:cb:2a:28:0b:bb:db:d5:99:86:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=78f017c72d7125a840416918e7cbdf5fb5ed5ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:4e:64:77:a6:ae:90:60:c1:25:f5:76:3f:
                    dc:86:91:d4:d1:b9:6b:90:08:e6:26:97:e7:1c:51:
                    b3:12:dd:d3:15:fc:7f:83:c7:73:19:96:05:e3:97:
                    8a:77:83:74:50:51:8a:ef:16:42:aa:03:6f:b4:84:
                    af:ed:c1:09:47:22:98:90:95:c3:a0:f7:41:0a:2a:
                    1c:8e:5e:de:03:d4:42:69:5c:e8:05:37:b0:cd:b0:
                    59:07:6b:7b:01:af:be:04:d5:a0:76:da:cd:d7:81:
                    84:a2:8d:9f:5e:72:3b:69:e4:90:a9:cd:e3:b7:8f:
                    b2:cb:88:59:6e:ca:8d:3f:ec:35:1f:30:5b:51:49:
                    17:fc:43:11:cf:e1:b5:c5:5d:2e:be:ad:5f:49:19:
                    d5:8d:c1:74:9f:28:54:95:79:8d:44:b4:55:c9:ae:
                    c2:b7:d7:55:3f:a4:1b:da:75:8f:2d:16:31:2b:55:
                    74:e6:80:ed:84:40:1a:30:1c:c9:db:bc:84:e9:ad:
                    8a:0a:46:c7:f5:02:05:cd:cd:14:1f:09:b3:b1:ce:
                    c8:d9:34:d7:5f:17:f1:c3:eb:d7:2d:9a:af:49:72:
                    0f:2c:54:d5:ff:a0:33:d1:8f:77:26:8e:1a:83:38:
                    83:4b:c6:b2:04:0d:93:53:e7:26:75:df:9b:2f:1e:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:17:C7:2D:71:25:A8:40:41:69:18:E7:CB:DF:5F:B5:ED:5F:F1
            X509v3 Authority Key Identifier:
                keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:ef:50:89:0a:37:69:c7:2a:ac:4e:e6:68:06:8a:5c:9a:
         bd:1e:28:75:55:28:ad:80:1a:33:15:4f:78:99:c7:8e:4a:16:
         9c:ea:d0:6e:a7:57:e6:9e:df:91:a1:0d:49:72:47:f1:dd:45:
         6e:aa:39:78:37:fe:14:6a:82:f7:e5:0e:e3:d2:20:fd:3b:50:
         ab:81:74:a0:81:22:2a:70:2d:f8:9d:5c:fe:8e:47:84:96:7c:
         50:0d:49:78:a2:d4:03:a0:29:64:7e:25:a4:3f:3e:4a:45:07:
         ac:f0:2e:c3:ea:41:b1:b6:65:26:92:06:94:82:f7:a3:f3:46:
         49:90:95:e2:64:bb:8a:94:de:68:9e:17:79:26:d6:f8:8d:61:
         7b:95:0e:6f:9c:be:07:86:44:0f:aa:ff:ce:b4:49:d6:c4:02:
         df:3a:b7:f4:54:04:af:56:37:b1:53:10:83:af:e1:98:df:e5:
         51:80:33:f1:79:34:ab:6c:56:c1:4a:28:25:02:55:de:0d:ed:
         f4:7b:ce:ef:f8:65:8c:55:72:9c:94:eb:36:6b:5f:15:9e:bb:
         8b:20:31:31:8b:90:7d:44:cb:77:93:19:fb:b2:81:5f:c0:05:
         2f:8b:6c:10:dd:c5:18:ee:16:65:6d:5c:b1:0e:0e:49:89:fa:
         1f:6f:1a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86euH8sqKAu729WZhjWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
Eyg3OGYwMTdjNzJkNzEyNWE4NDA0MTY5MThlN2NiZGY1ZmI1ZWQ1ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61pOZHemrpBgwSX1dj/chpHU0blr
kAjmJpfnHFGzEt3TFfx/g8dzGZYF45eKd4N0UFGK7xZCqgNvtISv7cEJRyKYkJXD
oPdBCiocjl7eA9RCaVzoBTewzbBZB2t7Aa++BNWgdtrN14GEoo2fXnI7aeSQqc3j
t4+yy4hZbsqNP+w1HzBbUUkX/EMRz+G1xV0uvq1fSRnVjcF0nyhUlXmNRLRVya7C
t9dVP6Qb2nWPLRYxK1V05oDthEAaMBzJ27yE6a2KCkbH9QIFzc0UHwmzsc7I2TTX
Xxfxw+vXLZqvSXIPLFTV/6Az0Y93Jo4agziDS8ayBA2TU+cmdd+bLx7yPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjwF8ctcSWoQEFpGOfL31+17V/xMB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEPvUIkK
N2nHKqxO5mgGilyavR4odVUorYAaMxVPeJnHjkoWnOrQbqdX5p7fkaENSXJH8d1F
bqo5eDf+FGqC9+UO49Ig/TtQq4F0oIEiKnAt+J1c/o5HhJZ8UA1JeKLUA6ApZH4l
pD8+SkUHrPAuw+pBsbZlJpIGlIL3o/NGSZCV4mS7ipTeaJ4XeSbW+I1he5UOb5y+
B4ZED6r/zrRJ1sQC3zq39FQEr1Y3sVMQg6/hmN/lUYAz8Xk0q2xWwUooJQJV3g3t
9HvO7/hljFVynJTrNmtfFZ67iyAxMYuQfUTLd5MZ+7KBX8AFL4tsEN3FGO4WZW1c
sQ4OSYn6H28aLw==
-----END CERTIFICATE-----