Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File:                     cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier:          xn2Jk0TgDpfdC7kBdFRbCRexDjba/s0vz65VCg7VyhY=
Subject key identifier:   E4:BE:EA:9A:65:21:9C:F2:48:98:3A:5C:9B:85:41:88:90:E8:EB:1D
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer:       /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial:       01962ECF7FF204E8AB955418761972FCBD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
                          2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: 4m2TYZkJBnHnxNjNVDIe8sqIMKShYMGW96D6f+LcAn0=)
                          3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:f2:04:e8:ab:95:54:18:76:19:72:fc:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=e4beea9a65219cf248983a5c9b85418890e8eb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d0:fe:78:ba:66:21:0b:aa:41:8a:cc:5f:fd:
                    fc:ad:76:51:46:d4:65:92:50:d1:60:8b:8a:3c:60:
                    d8:27:1b:ce:e6:ee:41:3a:13:85:19:8e:28:a3:2b:
                    b1:80:cc:7b:94:dc:1e:65:a0:c0:d9:65:12:58:17:
                    09:26:69:49:ab:eb:75:5c:f5:da:3a:f0:e2:fa:39:
                    58:68:5d:b7:b3:18:22:df:17:34:c0:bf:e9:a6:b4:
                    fa:62:21:e3:7a:7e:cc:3b:1b:af:c5:97:79:57:1e:
                    14:b9:6d:0f:f3:ca:df:ac:c5:37:ab:f9:b6:b3:ee:
                    27:5f:f9:0c:d7:35:c8:8c:ef:35:86:e8:db:f4:8c:
                    32:a3:39:c6:17:f8:8a:27:56:4a:7d:4f:dc:93:7f:
                    90:1c:84:0b:2f:50:a9:b5:03:1f:8c:27:51:00:cf:
                    a5:0b:38:4b:b6:74:3b:1b:d4:21:cf:2f:ee:d5:54:
                    fa:82:5f:2a:4b:e1:6e:d8:56:7f:ce:47:c6:87:72:
                    dc:4a:69:79:87:b7:86:9c:90:e2:1e:cf:70:15:d6:
                    86:93:61:5c:64:3a:89:89:51:4a:39:a1:43:ec:4a:
                    02:8d:11:21:5f:22:c8:d2:e4:71:5a:6d:28:60:05:
                    9c:7a:e3:3c:5a:66:00:54:70:4e:42:04:72:e2:67:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:EA:9A:65:21:9C:F2:48:98:3A:5C:9B:85:41:88:90:E8:EB:1D
            X509v3 Authority Key Identifier:
                keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:96:a1:e3:f1:54:b5:5d:2a:fd:8b:be:62:cf:f7:b1:f3:0a:
         2a:30:02:9c:bb:71:cf:5e:25:48:31:65:51:59:88:58:6f:ab:
         37:24:64:c1:3a:21:23:cf:60:bc:6e:cd:a5:40:dc:31:2f:2b:
         89:50:01:7a:ca:2c:7b:02:a6:92:ca:85:da:ad:94:9e:ed:22:
         d0:3c:05:7c:f8:de:05:62:ae:ba:0b:ba:36:0a:16:76:9e:a1:
         93:2c:af:f2:9c:b5:bb:c2:69:4c:0a:50:c5:b8:0d:46:15:4a:
         76:4d:52:5b:ec:63:b1:92:46:85:e4:03:8d:e5:32:b0:dd:65:
         05:db:94:76:02:e6:ec:7c:5c:c2:2e:9e:d6:a3:d9:08:72:25:
         17:ae:07:19:6d:c6:47:8c:16:61:f1:72:73:3e:10:10:70:9b:
         e5:92:de:f7:be:e5:ce:11:d5:bb:d0:66:ac:21:bf:05:d0:df:
         2f:6a:71:de:39:93:f9:05:94:1a:25:36:6a:66:e0:93:c0:50:
         b6:b6:57:d1:a7:1f:bf:d1:63:ef:5f:56:c2:31:b8:31:5c:04:
         8e:fa:6c:54:fe:ea:aa:e7:1f:e2:20:30:ac:a9:a8:de:30:1f:
         d4:ad:c1:ed:20:9c:19:c7:5c:c5:aa:fd:47:f6:1a:c2:5f:49:
         04:81:19:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3/yBOirlVQYdhly/L2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjUwNDEzMTEwMTEyWhcNMjUwNDE0MTEwMTEyWjAzMTEwLwYDVQQD
EyhlNGJlZWE5YTY1MjE5Y2YyNDg5ODNhNWM5Yjg1NDE4ODkwZThlYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/dD+eLpmIQuqQYrMX/38rXZRRtRl
klDRYIuKPGDYJxvO5u5BOhOFGY4ooyuxgMx7lNweZaDA2WUSWBcJJmlJq+t1XPXa
OvDi+jlYaF23sxgi3xc0wL/pprT6YiHjen7MOxuvxZd5Vx4UuW0P88rfrMU3q/m2
s+4nX/kM1zXIjO81hujb9IwyoznGF/iKJ1ZKfU/ck3+QHIQLL1CptQMfjCdRAM+l
CzhLtnQ7G9Qhzy/u1VT6gl8qS+Fu2FZ/zkfGh3LcSml5h7eGnJDiHs9wFdaGk2Fc
ZDqJiVFKOaFD7EoCjREhXyLI0uRxWm0oYAWceuM8WmYAVHBOQgRy4mdE1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS+6pplIZzySJg6XJuFQYiQ6OsdMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpah4/FU
tV0q/Yu+Ys/3sfMKKjACnLtxz14lSDFlUVmIWG+rNyRkwTohI89gvG7NpUDcMS8r
iVABesosewKmksqF2q2Unu0i0DwFfPjeBWKuugu6NgoWdp6hkyyv8py1u8JpTApQ
xbgNRhVKdk1SW+xjsZJGheQDjeUysN1lBduUdgLm7Hxcwi6e1qPZCHIlF64HGW3G
R4wWYfFycz4QEHCb5ZLe977lzhHVu9BmrCG/BdDfL2px3jmT+QWUGiU2ambgk8BQ
trZX0acfv9Fj719WwjG4MVwEjvpsVP7qqucf4iAwrKmo3jAf1K3B7SCcGcdcxar9
R/Yawl9JBIEZWQ==
-----END CERTIFICATE-----