Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File:                     Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier:          +3OMnZWkoQ1T9osVdnyn+r3WIkJZ+LgtHLrNLGF0X34=
Subject key identifier:   5A:23:B7:F1:AF:64:04:20:30:14:A0:4F:3F:6C:5C:85:FB:6D:15:44
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer:       /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial:       01962E996F5B542E0AE405CC006A21887AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number:          01CA
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: YhMeKJvHvkK6D4RqCiaIdBLhV7zmTEN8qZ4JFSDv9CA=)
                          2: ZyPIESuaSWPIuQmq_le4sKOKISE.roa (hash: ZskQdIcp36rlr+2ORbgrG1PrwisAu9ueRcvHTkIY4YM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:5b:54:2e:0a:e4:05:cc:00:6a:21:88:7a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=5a23b7f1af6404203014a04f3f6c5c85fb6d1544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:e1:6d:5e:5d:f9:6b:78:27:b4:d5:2e:fd:
                    53:d0:5e:cb:24:1c:8b:19:8e:e9:a3:90:2f:ed:06:
                    d6:92:12:b7:59:41:33:58:ef:a6:57:5a:93:48:41:
                    5d:10:69:dd:48:7f:fb:95:41:3b:41:fe:d2:99:a0:
                    0c:ae:15:bd:a6:bb:67:f5:38:ee:35:a5:67:51:ed:
                    36:be:06:3f:ed:60:a0:29:23:02:9b:18:60:48:5b:
                    f3:3b:6a:86:ea:18:02:e5:06:84:61:f1:43:97:35:
                    9b:d9:3b:92:38:82:87:12:ab:18:36:ff:f9:ac:09:
                    21:43:3c:04:93:d2:43:a1:8d:77:5a:79:e4:92:9d:
                    7f:3a:40:7d:e3:69:8f:77:a2:9a:1c:08:21:f3:4b:
                    3a:c4:2f:65:08:70:99:96:03:5c:18:ea:61:80:fb:
                    f0:f1:f6:c7:c5:ec:ef:5d:25:46:2f:ed:87:b2:29:
                    75:15:78:0a:1b:20:8e:22:09:c3:ab:81:10:ba:c4:
                    06:75:69:a3:9e:0d:bf:28:6d:71:35:c1:da:04:d8:
                    37:23:16:fe:ea:51:99:b7:5c:4c:d2:ad:cf:8e:fc:
                    72:88:86:b9:f8:2f:fb:bb:8e:e3:1a:20:fd:04:65:
                    a5:56:e0:ba:78:e3:69:dc:2a:1c:fc:ff:ec:64:ba:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:23:B7:F1:AF:64:04:20:30:14:A0:4F:3F:6C:5C:85:FB:6D:15:44
            X509v3 Authority Key Identifier:
                keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a7:eb:04:08:fd:de:1c:f0:54:97:79:b2:7f:e5:7a:6d:36:
         8e:2d:cc:97:ab:f1:bb:a5:b6:24:08:c6:3d:16:ca:87:66:96:
         0e:e7:78:67:4b:26:40:9e:11:5f:fe:72:d3:09:fb:2b:bb:a8:
         89:5c:99:c1:62:71:28:86:92:0f:4a:14:18:67:b2:b6:72:f3:
         9d:61:8f:e3:8e:35:ef:08:3b:2a:00:cb:98:e7:3b:ee:ef:4a:
         47:78:0f:0f:ee:b1:81:b7:df:3f:91:a7:10:4f:4c:4f:34:61:
         32:d4:04:b5:35:7a:56:7c:13:fb:76:49:3f:21:ce:03:8a:c4:
         11:4d:78:b5:06:02:10:23:dd:68:0c:ad:cf:78:4c:73:c5:af:
         d7:a5:4f:b2:6f:52:16:23:ff:87:cf:8a:4f:b3:dc:0f:7b:d4:
         23:9c:00:a8:c5:02:ec:cf:ee:5b:2b:ec:17:b2:25:87:15:f0:
         71:9b:dc:33:48:c8:af:65:1c:41:83:09:62:30:3e:de:31:52:
         31:42:91:2c:35:10:fb:bc:a1:44:1c:58:5f:25:cd:dc:d1:81:
         40:c3:e6:9b:c2:1f:58:29:38:37:05:9f:af:6e:3a:74:90:5a:
         12:d9:28:78:70:73:af:e2:fa:58:9b:8a:a5:fc:24:a9:37:46:
         00:bd:b4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumW9bVC4K5AXMAGohiHqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOWRiYjQ2YTRlYjc2NDVkOTk0YTBlNGI5ODRmY2RhYzIw
NGE0ODQwHhcNMjUwNDEzMTAwMjA5WhcNMjUwNDE0MTAwMjA5WjAzMTEwLwYDVQQD
Eyg1YTIzYjdmMWFmNjQwNDIwMzAxNGEwNGYzZjZjNWM4NWZiNmQxNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPPhbV5d+Wt4J7TVLv1T0F7LJByL
GY7po5Av7QbWkhK3WUEzWO+mV1qTSEFdEGndSH/7lUE7Qf7SmaAMrhW9prtn9Tju
NaVnUe02vgY/7WCgKSMCmxhgSFvzO2qG6hgC5QaEYfFDlzWb2TuSOIKHEqsYNv/5
rAkhQzwEk9JDoY13Wnnkkp1/OkB942mPd6KaHAgh80s6xC9lCHCZlgNcGOphgPvw
8fbHxezvXSVGL+2Hsil1FXgKGyCOIgnDq4EQusQGdWmjng2/KG1xNcHaBNg3Ixb+
6lGZt1xM0q3PjvxyiIa5+C/7u47jGiD9BGWlVuC6eONp3Coc/P/sZLodMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFojt/GvZAQgMBSgTz9sXIX7bRVEMB8GA1UdIwQY
MBaAFDKdu0ak63ZF2ZSg5LmE/NrCBKSEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXAyN1JxVHJka1habEtEa3VZVDgyc0lFcElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMTcxYmUtOTY1My00MWQ4LWEzNDQt
ZmVjMTVhYjg0MTM1LzEvTXAyN1JxVHJka1habEtEa3VZVDgyc0lFcElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMTcxYmUtOTY1My00MWQ4LWEzNDQtZmVjMTVhYjg0MTM1
LzEvTXAyN1JxVHJka1habEtEa3VZVDgyc0lFcElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6frBAj9
3hzwVJd5sn/lem02ji3Ml6vxu6W2JAjGPRbKh2aWDud4Z0smQJ4RX/5y0wn7K7uo
iVyZwWJxKIaSD0oUGGeytnLznWGP44417wg7KgDLmOc77u9KR3gPD+6xgbffP5Gn
EE9MTzRhMtQEtTV6VnwT+3ZJPyHOA4rEEU14tQYCECPdaAytz3hMc8Wv16VPsm9S
FiP/h8+KT7PcD3vUI5wAqMUC7M/uWyvsF7IlhxXwcZvcM0jIr2UcQYMJYjA+3jFS
MUKRLDUQ+7yhRBxYXyXN3NGBQMPmm8IfWCk4NwWfr246dJBaEtkoeHBzr+L6WJuK
pfwkqTdGAL20kw==
-----END CERTIFICATE-----