Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File:                     iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier:          XQ6EP3tKRHNtyeZiG4VxcPbn5jCujJR8uht+xmAn068=
Subject key identifier:   F7:79:EE:83:1B:15:E6:CF:BE:82:83:27:F7:97:CB:59:7F:86:C6:B3
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer:       /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial:       01962E61EF2EBEB629F67EF38D1A8B5E1412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: OV4Zg8k9z6aaT0r45lQJXn1GdQsEFgxwaHtTsDPWbSA=)
                          2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ef:2e:be:b6:29:f6:7e:f3:8d:1a:8b:5e:14:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=f779ee831b15e6cfbe828327f797cb597f86c6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:7c:ab:e5:93:0e:5b:fc:9b:9b:b0:a8:33:
                    90:3f:73:53:38:9f:e3:2a:66:fb:e1:1d:8c:af:17:
                    9c:26:47:b3:8c:b5:9f:1f:5d:5e:c6:fc:98:19:56:
                    5c:0c:f4:29:86:6d:83:fc:5b:fb:ec:8d:38:26:1a:
                    88:8b:f0:ae:26:cb:71:78:2b:39:9a:87:e2:12:9e:
                    a6:5f:b4:7b:f2:1e:f8:38:0b:1c:33:ca:de:76:33:
                    9f:a4:66:14:22:86:49:86:59:ca:05:88:01:9f:2c:
                    64:8c:f0:c2:5e:60:af:02:f5:e4:36:a0:af:14:b9:
                    a7:de:38:01:fe:52:61:8d:f7:5c:e9:a3:b9:4b:4f:
                    f3:d0:18:79:6a:d8:26:b9:d7:15:30:56:ac:88:c8:
                    9e:f4:36:3a:eb:a5:54:e2:d1:4b:e2:44:43:f3:3f:
                    47:94:aa:16:6f:43:a5:ad:ee:56:93:14:3a:70:77:
                    09:47:87:52:ec:60:75:e3:3a:1e:06:15:12:85:7b:
                    f7:14:df:45:30:3d:47:3d:d9:49:f7:b0:de:b1:19:
                    de:41:2d:7c:7c:52:bd:dd:78:7a:80:79:a9:7b:c2:
                    38:ad:63:37:d7:16:47:ce:aa:0a:38:62:a5:f2:57:
                    4d:07:8f:5b:3c:f9:37:39:6a:67:c2:5c:6d:68:36:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:EE:83:1B:15:E6:CF:BE:82:83:27:F7:97:CB:59:7F:86:C6:B3
            X509v3 Authority Key Identifier:
                keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:39:a0:9b:96:5c:25:d0:6b:29:5e:d1:2a:aa:44:4a:b2:04:
         e3:45:3f:41:fd:1d:84:e6:63:4b:d3:ab:0b:67:0c:a8:e3:ff:
         bb:c8:a2:5d:b0:aa:a1:89:7f:f3:9c:40:2b:7f:8e:12:6a:7f:
         f2:40:4f:be:9e:5c:15:74:bb:d0:1c:b8:c7:cb:dc:9c:6f:42:
         da:1b:33:2d:78:df:09:a6:00:5e:30:b1:a4:72:c3:91:d7:89:
         3e:64:4f:85:37:43:c2:3a:03:b5:51:92:9d:48:51:bb:db:bf:
         68:1e:e7:51:ac:40:16:d0:1f:51:e9:06:73:aa:70:1b:a3:15:
         bb:dc:c8:cf:1f:3b:0e:6b:fb:b4:65:d1:68:80:fa:5f:3d:cb:
         2d:7c:b8:30:38:8d:80:92:62:a0:c9:5c:6c:f1:43:91:ce:73:
         8b:71:8b:4f:98:93:a1:ff:b7:12:68:84:6b:90:1d:d6:d2:c0:
         09:27:18:99:40:7d:85:41:5f:46:5e:ef:bd:01:62:38:af:16:
         fc:b8:42:a5:09:6a:a8:7c:53:3f:ad:8a:14:93:4f:89:04:0c:
         51:58:f5:dc:cc:77:25:3c:9d:21:f6:9f:98:6b:4c:4e:ab:26:
         20:6b:74:17:d4:1c:41:40:aa:2c:88:81:61:a2:eb:a9:78:df:
         a6:a2:0c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYe8uvrYp9n7zjRqLXhQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjBjMWQxMGU0ZTVhNzFlM2NkNWM1ZDZiZWViZjc3OGEw
NmUzMDQwHhcNMjUwNDEzMDkwMTMyWhcNMjUwNDE0MDkwMTMyWjAzMTEwLwYDVQQD
EyhmNzc5ZWU4MzFiMTVlNmNmYmU4MjgzMjdmNzk3Y2I1OTdmODZjNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHR8q+WTDlv8m5uwqDOQP3NTOJ/j
Kmb74R2MrxecJkezjLWfH11exvyYGVZcDPQphm2D/Fv77I04JhqIi/CuJstxeCs5
mofiEp6mX7R78h74OAscM8redjOfpGYUIoZJhlnKBYgBnyxkjPDCXmCvAvXkNqCv
FLmn3jgB/lJhjfdc6aO5S0/z0Bh5atgmudcVMFasiMie9DY666VU4tFL4kRD8z9H
lKoWb0Olre5WkxQ6cHcJR4dS7GB14zoeBhUShXv3FN9FMD1HPdlJ97DesRneQS18
fFK93Xh6gHmpe8I4rWM31xZHzqoKOGKl8ldNB49bPPk3OWpnwlxtaDZhsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd57oMbFebPvoKDJ/eXy1l/hsazMB8GA1UdIwQY
MBaAFIjwwdEOTlpx481cXWvuv3eKBuMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3Mzct
YjI4ZGY4NTU5NTI5LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3MzctYjI4ZGY4NTU5NTI5
LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzmgm5Zc
JdBrKV7RKqpESrIE40U/Qf0dhOZjS9OrC2cMqOP/u8iiXbCqoYl/85xAK3+OEmp/
8kBPvp5cFXS70By4x8vcnG9C2hszLXjfCaYAXjCxpHLDkdeJPmRPhTdDwjoDtVGS
nUhRu9u/aB7nUaxAFtAfUekGc6pwG6MVu9zIzx87Dmv7tGXRaID6Xz3LLXy4MDiN
gJJioMlcbPFDkc5zi3GLT5iTof+3EmiEa5Ad1tLACScYmUB9hUFfRl7vvQFiOK8W
/LhCpQlqqHxTP62KFJNPiQQMUVj13Mx3JTydIfafmGtMTqsmIGt0F9QcQUCqLIiB
YaLrqXjfpqIM1A==
-----END CERTIFICATE-----