Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File:                     Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier:          SCTR2jQKQVOTezgMe7wSO8s+iYc3YDUD3/ABNwdQk0U=
Subject key identifier:   72:83:09:97:D8:AF:4E:34:E8:CB:B8:8E:45:BB:8C:92:C3:A7:E7:D1
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer:       /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial:       01962ECFA70082C24A77DD467D830D548924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number:          053B
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: db2aSEl5NiGFavAdk7aarA+0FUKiFvDsCwbdXtmrcGs=)
                          2: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (hash: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:00:82:c2:4a:77:dd:46:7d:83:0d:54:89:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ed275c5a738888d580695edd36715959447921
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=72830997d8af4e34e8cbb88e45bb8c92c3a7e7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:72:82:b2:89:52:66:ab:b9:b3:24:ca:c3:
                    0e:2f:19:be:f1:0e:27:18:71:f3:18:0d:d0:4e:e5:
                    7b:4b:7b:a7:43:2b:5f:cb:be:d4:16:24:d0:69:2a:
                    61:12:f0:e5:b6:be:48:b2:0e:f5:e2:2e:33:40:93:
                    3c:1a:c4:ac:a1:27:92:a1:b7:ee:b3:ca:01:f4:5b:
                    42:89:db:0c:3d:cd:e7:a4:f4:9a:22:b5:d0:f0:61:
                    40:5d:d4:48:32:10:e8:e2:58:3d:e6:5d:b5:e4:0a:
                    b3:ad:5f:1c:84:9f:0a:7f:9c:ed:09:ba:f6:9b:be:
                    40:68:a9:83:8c:96:96:00:8f:1b:e9:6d:1f:c8:fa:
                    3f:cd:8c:42:a3:13:80:97:cd:a6:26:13:d5:b5:b1:
                    bb:e9:22:19:6e:6f:f7:cc:38:82:ab:ba:f8:09:25:
                    e9:39:05:3b:5a:1f:ec:6b:e2:17:48:f7:75:89:55:
                    95:f5:6b:2a:22:71:5c:60:4a:1b:9b:9f:59:50:53:
                    65:00:28:36:f3:e2:0f:9a:a5:78:57:74:66:3c:e9:
                    53:4b:84:bf:25:89:24:11:f1:e7:d2:24:dd:79:e6:
                    73:1a:f3:1b:c7:21:2c:69:b8:39:40:51:be:38:39:
                    f7:20:06:ae:6d:5f:b4:d8:05:a6:18:a0:a3:5a:b8:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:09:97:D8:AF:4E:34:E8:CB:B8:8E:45:BB:8C:92:C3:A7:E7:D1
            X509v3 Authority Key Identifier:
                keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:b7:9f:a6:33:a9:38:1e:71:db:a2:a3:fd:fc:b6:ac:4d:
         e3:65:56:d7:05:0d:7d:39:42:5e:2b:73:00:66:e3:89:81:af:
         39:20:62:b1:76:16:e0:a0:7e:f6:12:a6:9e:b0:14:da:37:14:
         0e:f9:26:7d:62:b5:b3:3b:af:12:28:05:19:40:81:81:51:63:
         dd:7e:31:b6:6c:ef:0c:ff:43:fd:a2:e8:ca:31:0b:03:18:32:
         b1:b0:80:c8:57:cd:fd:b6:ed:d8:9c:4f:97:14:9f:eb:e9:8c:
         85:ba:be:39:27:ae:78:21:1f:c7:00:a6:07:1a:0d:5f:9c:6a:
         f6:0c:41:dc:c9:f9:a3:9b:b3:b2:e3:18:63:c2:0b:21:bf:96:
         ff:48:0c:10:35:58:14:f0:b3:3d:fe:7e:69:60:5c:00:89:6b:
         41:ba:f2:93:44:47:2f:46:bd:f6:4a:b3:80:e8:16:ec:24:4b:
         58:ce:c7:4c:87:0b:87:bb:3c:a0:32:1a:d3:d4:d9:5d:8b:e2:
         33:9f:78:f4:a4:d5:1f:d3:2a:f7:43:19:d1:ea:70:a1:4f:06:
         01:fa:cc:56:41:97:ca:57:36:cb:1b:38:ec:52:6b:64:56:25:
         05:9c:9d:46:f4:50:c0:03:99:7a:56:e9:86:25:20:5f:50:5b:
         18:fa:d7:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6cAgsJKd91GfYMNVIkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWQyNzVjNWE3Mzg4ODhkNTgwNjk1ZWRkMzY3MTU5NTk0
NDc5MjEwHhcNMjUwNDEzMTEwMTIyWhcNMjUwNDE0MTEwMTIyWjAzMTEwLwYDVQQD
Eyg3MjgzMDk5N2Q4YWY0ZTM0ZThjYmI4OGU0NWJiOGM5MmMzYTdlN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U1ygrKJUmarubMkysMOLxm+8Q4n
GHHzGA3QTuV7S3unQytfy77UFiTQaSphEvDltr5Isg714i4zQJM8GsSsoSeSobfu
s8oB9FtCidsMPc3npPSaIrXQ8GFAXdRIMhDo4lg95l215AqzrV8chJ8Kf5ztCbr2
m75AaKmDjJaWAI8b6W0fyPo/zYxCoxOAl82mJhPVtbG76SIZbm/3zDiCq7r4CSXp
OQU7Wh/sa+IXSPd1iVWV9WsqInFcYEobm59ZUFNlACg28+IPmqV4V3RmPOlTS4S/
JYkkEfHn0iTdeeZzGvMbxyEsabg5QFG+ODn3IAaubV+02AWmGKCjWrht4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKDCZfYr0406Mu4jkW7jJLDp+fRMB8GA1UdIwQY
MBaAFEbtJ1xac4iI1YBpXt02cVlZRHkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2Ut
M2Y4ZTdmMTAzODk5LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2UtM2Y4ZTdmMTAzODk5
LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0u3n6Yz
qTgecduio/38tqxN42VW1wUNfTlCXitzAGbjiYGvOSBisXYW4KB+9hKmnrAU2jcU
DvkmfWK1szuvEigFGUCBgVFj3X4xtmzvDP9D/aLoyjELAxgysbCAyFfN/bbt2JxP
lxSf6+mMhbq+OSeueCEfxwCmBxoNX5xq9gxB3Mn5o5uzsuMYY8ILIb+W/0gMEDVY
FPCzPf5+aWBcAIlrQbryk0RHL0a99kqzgOgW7CRLWM7HTIcLh7s8oDIa09TZXYvi
M5949KTVH9Mq90MZ0epwoU8GAfrMVkGXylc2yxs47FJrZFYlBZydRvRQwAOZelbp
hiUgX1BbGPrXJA==
-----END CERTIFICATE-----