Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File:                     _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier:          w2HS047RCDmG+SDT/+4vY85Vgw60hDDz+WubI51ioSw=
Subject key identifier:   59:FA:D9:BA:4C:39:D8:C0:FC:5B:CE:42:02:2A:15:A7:9D:40:09:C3
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer:       /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial:       01962F742B089DEC0DD9FFC6DD7F75D0ACE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: XG3odpz16Cm4lfg8ZsZY3WQznFIxfvjZPtChFa+IVGs=)
                          2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:08:9d:ec:0d:d9:ff:c6:dd:7f:75:d0:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=59fad9ba4c39d8c0fc5bce42022a15a79d4009c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:17:7e:e6:d4:f2:59:63:8a:fa:87:e6:37:
                    bd:4f:fc:6c:b4:ee:f7:d9:eb:21:e5:9b:6f:e1:f3:
                    e7:25:93:05:f0:f8:0d:89:7b:14:07:a8:e9:09:e6:
                    d3:61:6a:9c:f1:6a:31:09:54:60:4b:0b:b2:66:48:
                    c4:ce:4c:29:85:22:a1:60:55:0a:98:1a:c3:ad:db:
                    d2:94:43:96:43:0b:37:4e:66:67:d5:95:e3:50:94:
                    e6:0e:7b:06:ce:a2:42:c9:e2:f7:d0:5a:a2:3c:ac:
                    8d:0a:1f:8b:ef:9b:de:4e:ce:63:24:16:43:ed:e1:
                    39:af:d1:66:39:23:94:d2:da:53:0a:82:bb:e3:46:
                    86:04:ef:46:d3:e0:4c:5f:d5:d7:6c:21:48:7d:85:
                    17:7b:a6:2f:e2:38:99:89:ea:12:ab:1c:07:eb:74:
                    12:cf:d3:25:c3:e6:00:db:30:af:aa:42:3c:af:39:
                    9e:02:b5:59:66:a1:2e:93:5d:37:2e:e0:04:5f:e5:
                    e4:8a:0c:44:70:aa:42:4b:0c:f3:35:14:ce:b2:9f:
                    cc:53:b5:40:99:7f:ea:1d:dd:e3:d5:6e:90:79:02:
                    33:b1:2b:db:69:ab:77:eb:c8:34:f6:7e:84:25:d5:
                    dc:03:f7:95:e1:6a:b0:14:b3:b6:9f:ff:9b:77:3c:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:D9:BA:4C:39:D8:C0:FC:5B:CE:42:02:2A:15:A7:9D:40:09:C3
            X509v3 Authority Key Identifier:
                keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fb:0d:52:e8:c6:aa:17:86:b5:76:2c:42:7a:38:ef:dd:24:
         b5:52:f6:23:cc:83:74:f7:bd:c1:54:08:5e:65:11:4a:92:34:
         01:5b:0b:6f:a8:7c:81:b6:07:97:a0:2c:ef:04:2b:bb:e5:9b:
         15:d3:2d:85:4f:21:15:96:c9:47:26:b3:f0:4a:b0:11:1a:d5:
         96:0b:74:a4:38:24:52:29:3f:d9:d5:d4:ed:0d:bd:28:78:bb:
         48:0c:6c:95:ed:7d:a7:bc:f9:c0:a2:05:18:f3:c0:c9:b8:f4:
         b8:65:65:3a:0f:80:5e:e4:18:c1:0f:ac:91:91:4f:8a:e0:78:
         de:71:2f:6e:12:d0:c8:8d:25:aa:00:c3:9b:f1:13:03:ff:94:
         a6:67:8c:20:a0:c8:95:4e:5c:20:df:0c:5b:df:bf:c3:32:73:
         78:e9:9b:11:4f:c1:31:0c:71:f1:ee:6c:f9:1e:a1:d3:2c:ee:
         13:fd:19:5c:35:9c:e2:51:07:ec:70:4a:20:a4:f1:11:94:3b:
         ce:c4:c0:19:b9:22:60:04:1d:a5:d9:3a:08:1f:81:29:08:c8:
         fa:87:83:01:d5:94:aa:7a:8b:02:8d:b5:b9:75:94:80:96:fc:
         ed:9a:f4:0f:74:45:e6:ad:b0:d4:63:79:cc:1a:c9:eb:29:bb:
         71:9b:63:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCsInewN2f/G3X910KzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl
YTlmODgwHhcNMjUwNDEzMTQwMTA0WhcNMjUwNDE0MTQwMTA0WjAzMTEwLwYDVQQD
Eyg1OWZhZDliYTRjMzlkOGMwZmM1YmNlNDIwMjJhMTVhNzlkNDAwOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfsXfubU8lljivqH5je9T/xstO73
2esh5Ztv4fPnJZMF8PgNiXsUB6jpCebTYWqc8WoxCVRgSwuyZkjEzkwphSKhYFUK
mBrDrdvSlEOWQws3TmZn1ZXjUJTmDnsGzqJCyeL30FqiPKyNCh+L75veTs5jJBZD
7eE5r9FmOSOU0tpTCoK740aGBO9G0+BMX9XXbCFIfYUXe6Yv4jiZieoSqxwH63QS
z9Mlw+YA2zCvqkI8rzmeArVZZqEuk103LuAEX+XkigxEcKpCSwzzNRTOsp/MU7VA
mX/qHd3j1W6QeQIzsSvbaat368g09n6EJdXcA/eV4WqwFLO2n/+bdzzD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn62bpMOdjA/FvOQgIqFaedQAnDMB8GA1UdIwQY
MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt
NTMxMjY2ZGYzMmMwLzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw
LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPsNUujG
qheGtXYsQno4790ktVL2I8yDdPe9wVQIXmURSpI0AVsLb6h8gbYHl6As7wQru+Wb
FdMthU8hFZbJRyaz8EqwERrVlgt0pDgkUik/2dXU7Q29KHi7SAxsle19p7z5wKIF
GPPAybj0uGVlOg+AXuQYwQ+skZFPiuB43nEvbhLQyI0lqgDDm/ETA/+UpmeMIKDI
lU5cIN8MW9+/wzJzeOmbEU/BMQxx8e5s+R6h0yzuE/0ZXDWc4lEH7HBKIKTxEZQ7
zsTAGbkiYAQdpdk6CB+BKQjI+oeDAdWUqnqLAo21uXWUgJb87Zr0D3RF5q2w1GN5
zBrJ6ym7cZtjHw==
-----END CERTIFICATE-----