Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File:                     2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier:          SSzNhEkENZOHC3vd1om30dYYWgp850CwD8gr7Gb9gig=
Subject key identifier:   B5:C2:26:2A:B5:D9:D5:B4:FA:24:67:55:26:0D:89:9C:FF:6B:5D:14
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer:       /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial:       01962F742662419178E6244755D7CD7AD65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number:          13B3
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: iaFW7Gz5whoPMvM2sdHDkYmMi0qVyuFmJVWkNETP/xc=)
                          2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:62:41:91:78:e6:24:47:55:d7:cd:7a:d6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=b5c2262ab5d9d5b4fa246755260d899cff6b5d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:61:0c:20:5a:5c:ed:ca:41:91:a9:42:ff:
                    28:ce:70:21:a5:40:f4:99:32:8c:c4:23:3b:3a:00:
                    a3:94:7a:4a:63:0b:22:5a:1c:a9:b9:49:1a:74:5b:
                    cf:be:d6:a2:71:27:b1:cb:e0:97:90:3a:96:07:a4:
                    4c:58:2a:7a:97:58:80:fe:8d:8b:96:6d:90:37:d3:
                    ac:93:e4:87:24:fe:0d:91:e9:8e:a1:90:a6:a4:cc:
                    d7:60:77:8a:59:e3:5a:ab:e0:8d:7a:a8:40:d7:cc:
                    db:c2:8a:1e:9e:75:75:a3:cd:a1:c1:94:ec:da:d4:
                    65:b4:2b:98:93:4b:48:5f:cf:ad:17:c1:61:28:c6:
                    0d:1e:69:f9:68:e1:92:7e:7d:75:c5:f2:d2:7d:ed:
                    b8:eb:06:fa:d3:0c:c3:24:9e:bb:47:6b:74:c6:ae:
                    a7:30:60:fd:98:06:f5:37:3b:3c:3a:23:ce:57:10:
                    7c:9b:e0:cc:64:18:4a:d5:f2:f1:96:1b:5a:1f:a0:
                    17:ed:32:b1:17:ac:ce:89:9c:d8:1e:ab:4a:20:11:
                    dc:24:13:0e:46:ff:91:d4:a8:91:48:f4:a2:f5:9c:
                    92:43:e7:ee:78:e3:62:b9:57:d9:1b:ec:ea:c0:22:
                    38:d3:f4:18:ca:8c:50:44:16:23:91:48:db:70:97:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:26:2A:B5:D9:D5:B4:FA:24:67:55:26:0D:89:9C:FF:6B:5D:14
            X509v3 Authority Key Identifier:
                keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:45:64:94:e0:5b:f3:6a:98:0e:f2:e6:ee:3c:11:7e:16:
         46:1d:c6:b1:a9:ed:c3:d2:2c:27:08:5a:28:95:aa:b0:c2:b9:
         8e:eb:8c:52:bd:b7:26:14:cb:d2:91:0d:ee:e2:a3:cf:c3:70:
         9c:23:e3:c2:24:a5:cf:d7:18:9d:07:5b:ad:65:22:77:e8:75:
         22:b3:2a:c4:9a:93:0e:b6:fa:b4:c8:aa:78:b7:ca:bf:6a:c9:
         49:13:a0:73:5c:83:05:88:02:4f:9d:e1:93:32:0f:9d:db:c8:
         58:b3:29:7a:ae:19:46:89:3b:b7:e0:79:5b:7f:e8:d6:b1:c3:
         e5:38:e4:10:ed:bd:21:88:c7:63:d5:b3:c8:e9:cf:22:9f:99:
         6d:a8:4c:a2:21:ab:67:30:91:3f:f8:99:ed:a2:6d:35:e4:3f:
         f3:75:a9:68:88:d7:e7:ab:31:e2:a4:18:58:cc:30:bb:f8:4d:
         5f:ee:ec:e1:0f:ed:3a:80:56:8a:51:e9:f9:0b:dc:24:65:ae:
         0a:15:84:af:e8:ee:ac:fd:de:80:24:f7:14:39:d8:04:51:05:
         c9:a2:96:c4:75:22:a0:3d:a7:b1:61:0b:95:fe:65:66:39:45:
         df:15:63:1d:b5:7b:44:13:a8:a5:91:a0:53:a2:5b:be:84:60:
         e2:86:e1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCZiQZF45iRHVdfNetZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NzczZDczM2QxODQ1YzQxZDNmOWEzNjJiNTViNzRlNjg2
ZjljMDIwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
EyhiNWMyMjYyYWI1ZDlkNWI0ZmEyNDY3NTUyNjBkODk5Y2ZmNmI1ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhINhDCBaXO3KQZGpQv8oznAhpUD0
mTKMxCM7OgCjlHpKYwsiWhypuUkadFvPvtaicSexy+CXkDqWB6RMWCp6l1iA/o2L
lm2QN9Osk+SHJP4NkemOoZCmpMzXYHeKWeNaq+CNeqhA18zbwooennV1o82hwZTs
2tRltCuYk0tIX8+tF8FhKMYNHmn5aOGSfn11xfLSfe246wb60wzDJJ67R2t0xq6n
MGD9mAb1Nzs8OiPOVxB8m+DMZBhK1fLxlhtaH6AX7TKxF6zOiZzYHqtKIBHcJBMO
Rv+R1KiRSPSi9ZySQ+fueONiuVfZG+zqwCI40/QYyoxQRBYjkUjbcJeUmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXCJiq12dW0+iRnVSYNiZz/a10UMB8GA1UdIwQY
MBaAFNl3PXM9GEXEHT+aNitVt05ob5wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMt
MDFhMjlmNWY2ZGRlLzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMtMDFhMjlmNWY2ZGRl
LzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/JFZJTg
W/NqmA7y5u48EX4WRh3Gsantw9IsJwhaKJWqsMK5juuMUr23JhTL0pEN7uKjz8Nw
nCPjwiSlz9cYnQdbrWUid+h1IrMqxJqTDrb6tMiqeLfKv2rJSROgc1yDBYgCT53h
kzIPndvIWLMpeq4ZRok7t+B5W3/o1rHD5TjkEO29IYjHY9WzyOnPIp+ZbahMoiGr
ZzCRP/iZ7aJtNeQ/83WpaIjX56sx4qQYWMwwu/hNX+7s4Q/tOoBWilHp+QvcJGWu
ChWEr+jurP3egCT3FDnYBFEFyaKWxHUioD2nsWELlf5lZjlF3xVjHbV7RBOopZGg
U6JbvoRg4obhnQ==
-----END CERTIFICATE-----