Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
File:                     1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft (raw, json)
Hash identifier:          xePwgJBHt97RX0F5kXrhv7bG0GLZe1bwpQejzCC3cCc=
Subject key identifier:   5D:56:D2:56:A7:F1:08:66:6C:8A:89:07:6B:E9:61:0A:E7:14:14:63
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Certificate issuer:       /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial:       01962F7468FEA28D059D8543B3AEA01C5E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
Manifest number:          097A
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl (hash: Ju9VQHw5O9/KdgcVMifP5jGdiTJhC55ax4MvLGkl308=)
                          2: ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa (hash: XKv64QH5ODk1+MXzK56Lue/Lun/NuUmKCWEmKamL9J8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:fe:a2:8d:05:9d:85:43:b3:ae:a0:1c:5e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=5d56d256a7f108666c8a89076be9610ae7141463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:77:bd:5e:c1:91:13:96:70:1c:a5:4e:5e:
                    5c:f0:2a:e9:9e:7d:24:73:4f:84:8f:e7:ba:0e:b2:
                    80:45:bb:f4:7b:16:89:18:d3:9f:fa:ba:1a:66:ca:
                    75:ce:54:91:69:b5:49:1e:07:26:3e:62:0a:a1:2c:
                    f7:47:0b:76:f0:8d:a0:67:39:49:2f:22:db:ae:6d:
                    ad:16:da:73:58:16:85:8d:a5:8a:a5:3c:59:e4:84:
                    c9:35:50:63:ff:45:7f:68:4c:fb:c5:45:3f:ed:74:
                    b5:72:e7:ac:f9:f9:47:27:af:87:aa:0c:70:6a:1b:
                    a2:d6:ec:bb:67:8f:24:5a:e8:17:fe:0b:92:2e:83:
                    8d:7e:93:d6:fa:6f:89:20:de:5a:fb:9a:d5:0b:25:
                    de:cc:36:b4:ca:9b:43:a4:7e:52:4c:9b:75:c0:dd:
                    ab:a0:73:59:52:f1:29:34:63:68:5a:45:17:60:47:
                    bb:55:c4:d4:4f:83:14:a5:71:9f:c8:c4:8d:7e:42:
                    23:9d:33:44:2d:b8:aa:d1:d9:89:df:56:24:ed:2d:
                    98:47:22:12:45:db:f0:00:e5:dd:21:c6:5f:14:c1:
                    8a:0b:c5:74:43:66:f4:68:ed:3a:36:99:12:1d:46:
                    57:f4:00:6d:ec:68:1e:ea:9a:f0:f4:30:30:6f:13:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:56:D2:56:A7:F1:08:66:6C:8A:89:07:6B:E9:61:0A:E7:14:14:63
            X509v3 Authority Key Identifier:
                keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:28:4e:c6:e1:01:74:dd:1f:14:7d:7d:9b:aa:40:db:96:99:
         c4:12:bf:ba:9b:49:d5:b0:18:d2:b7:d7:21:d9:e2:fb:ec:d5:
         be:f8:62:e8:f6:9a:fc:4f:7f:c7:b7:16:72:b7:a3:fc:4c:7c:
         9f:9b:40:32:88:0e:1e:0f:ec:fb:a8:ca:df:2c:38:83:d0:2a:
         27:8d:a6:61:c1:a6:46:8b:f7:95:af:11:ae:1f:41:82:6d:1b:
         df:15:dc:af:b7:0d:7f:7e:87:5f:6e:99:4f:fb:62:e9:66:54:
         47:aa:44:d0:6c:00:42:03:2b:8f:16:24:d5:94:a2:5e:8e:91:
         78:56:66:29:ee:1a:4c:53:a0:65:ca:08:72:3c:18:ec:43:92:
         c0:cc:bb:95:8a:36:a0:f8:fa:fc:2a:74:44:d8:4c:c0:66:7f:
         61:7b:c8:fd:c3:c8:2c:e6:8e:b5:0c:f9:89:4f:5a:a0:6c:a7:
         b8:a9:61:62:7c:8a:81:1d:d5:73:a6:6e:c8:f6:21:31:91:ae:
         d0:0f:a1:dd:02:93:de:51:10:7e:6b:1c:ab:ea:b9:c3:e3:15:
         70:1d:94:9a:6c:a3:48:b2:87:8f:b9:9b:27:44:0e:a4:3a:9d:
         0c:36:78:53:09:cf:15:98:21:e2:97:a6:6c:91:b6:ba:50:4a:
         2a:62:bb:d1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvdGj+oo0FnYVDs66gHF57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDdlMTRhMjYyNTYwMTkxYzY2NTc2OTk4ZTljNjliODlj
M2MxMzYwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
Eyg1ZDU2ZDI1NmE3ZjEwODY2NmM4YTg5MDc2YmU5NjEwYWU3MTQxNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vZ3vV7BkROWcBylTl5c8Crpnn0k
c0+Ej+e6DrKARbv0exaJGNOf+roaZsp1zlSRabVJHgcmPmIKoSz3Rwt28I2gZzlJ
LyLbrm2tFtpzWBaFjaWKpTxZ5ITJNVBj/0V/aEz7xUU/7XS1cues+flHJ6+Hqgxw
ahui1uy7Z48kWugX/guSLoONfpPW+m+JIN5a+5rVCyXezDa0yptDpH5STJt1wN2r
oHNZUvEpNGNoWkUXYEe7VcTUT4MUpXGfyMSNfkIjnTNELbiq0dmJ31Yk7S2YRyIS
RdvwAOXdIcZfFMGKC8V0Q2b0aO06NpkSHUZX9ABt7Gge6prw9DAwbxNf1QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF1W0lan8QhmbIqJB2vpYQrnFBRjMB8GA1UdIwQY
MBaAFPrX4UomJWAZHGZXaZjpxpuJw8E2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10ZmhTaVlsWUJrY1psZHBtT25HbTRuRHdUWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZTY2NTZiLTgwYzgtNDM1ZS1iYzFk
LWQ2ZTcxNTUyM2YzOS8xLzEtdGZoU2lZbFlCa2NabGRwbU9uR200bkR3VFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlhL2U2NjU2Yi04MGM4LTQzNWUtYmMxZC1kNmU3MTU1MjNm
MzkvMS8xLXRmaFNpWWxZQmtjWmxkcG1PbkdtNG5Ed1RZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFihO
xuEBdN0fFH19m6pA25aZxBK/uptJ1bAY0rfXIdni++zVvvhi6Paa/E9/x7cWcrej
/Ex8n5tAMogOHg/s+6jK3yw4g9AqJ42mYcGmRov3la8Rrh9Bgm0b3xXcr7cNf36H
X26ZT/ti6WZUR6pE0GwAQgMrjxYk1ZSiXo6ReFZmKe4aTFOgZcoIcjwY7EOSwMy7
lYo2oPj6/Cp0RNhMwGZ/YXvI/cPILOaOtQz5iU9aoGynuKlhYnyKgR3Vc6ZuyPYh
MZGu0A+h3QKT3lEQfmscq+q5w+MVcB2UmmyjSLKHj7mbJ0QOpDqdDDZ4UwnPFZgh
4pembJG2ulBKKmK70Q==
-----END CERTIFICATE-----