Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          Irv240e4E/sYlfkqgqT9nJn9PltCSz9OkQlIAPs44iI=
Subject key identifier:   0F:09:D6:02:AF:97:F3:93:2C:3F:74:D1:FC:0D:98:8D:28:D9:71:4B
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       01962DF3A0F408C3406F7A6E315E45E40B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          0942
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: gVQSDEBOMBzj5HxprzzcqW14FwG870O4rImJ2W9eBsk=)
                          2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a0:f4:08:c3:40:6f:7a:6e:31:5e:45:e4:0b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=0f09d602af97f3932c3f74d1fc0d988d28d9714b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:fb:9f:13:b9:d9:7b:dd:6d:c1:03:fe:c9:
                    ab:80:9b:0b:47:35:e4:af:1e:c1:67:cb:12:91:38:
                    62:65:fa:40:23:fc:4e:82:74:56:1d:24:31:fc:b7:
                    d9:0c:63:06:f6:1d:cf:26:e4:e4:e9:b9:b5:7f:64:
                    28:24:35:63:7d:46:66:ef:73:e8:10:57:69:5f:7e:
                    ca:62:4e:f7:47:49:9a:58:64:77:27:19:3b:46:fd:
                    f5:50:a6:22:0a:79:b8:2a:7a:76:bb:9f:61:52:9a:
                    d4:bd:54:81:11:ae:4b:33:2b:1f:44:08:56:78:a4:
                    ce:80:a2:e9:3c:4c:1b:30:1e:ae:1f:aa:6b:c2:c6:
                    6e:0b:bb:9b:7f:83:68:a4:c4:0a:47:b4:61:b2:92:
                    a0:c8:de:2b:89:da:47:f7:7f:c0:b1:31:78:58:99:
                    aa:91:be:67:ca:82:3a:04:de:cc:a8:09:74:02:e4:
                    ac:a4:f6:2a:0f:f8:4f:04:2f:12:45:62:90:3a:d7:
                    c5:e8:27:2e:69:b3:88:84:f5:aa:9c:b3:d3:a8:e9:
                    78:86:b2:c5:c7:d3:bb:ef:7d:09:07:0f:0f:68:c5:
                    9d:8b:93:58:55:26:60:09:16:e7:4d:e7:d8:00:2f:
                    8d:40:ff:4e:ab:2d:0d:2c:7e:dc:6f:d2:cd:65:f3:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:D6:02:AF:97:F3:93:2C:3F:74:D1:FC:0D:98:8D:28:D9:71:4B
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6a:cf:ca:37:ca:54:a7:8e:ed:9a:0f:b5:ad:c5:d6:64:84:
         21:43:67:b0:3b:c0:df:55:ec:af:35:ce:9b:b8:b9:cf:3e:25:
         89:df:91:dc:d5:bf:56:47:c7:dc:fb:be:b6:e2:69:eb:92:4c:
         79:8d:17:2d:ad:cf:0f:31:2b:a2:46:c7:bf:b5:54:4b:61:21:
         ff:06:01:5c:90:a8:fb:dd:6a:71:d4:be:b2:92:35:4e:78:08:
         22:20:f0:a6:7c:0e:aa:3b:67:f1:cf:11:b6:19:86:3e:7d:1e:
         e5:0c:ec:3f:09:61:d1:b4:cf:15:f4:40:e8:53:5f:b6:02:77:
         3f:44:a0:a4:42:2b:55:bd:22:96:a4:71:65:09:01:30:57:99:
         2c:2e:79:6d:f4:da:60:05:76:e8:45:3d:6c:a8:c2:82:cc:4e:
         6b:cc:3e:aa:44:fb:f0:73:ff:54:10:f2:4f:98:11:f8:7b:59:
         22:65:94:80:24:11:54:78:a7:76:52:43:d6:a8:87:c4:c7:b1:
         99:e9:5b:98:30:81:f2:19:fa:03:7d:45:40:7c:14:fe:45:7f:
         c7:08:5f:9d:75:55:7a:19:a8:8f:19:09:a1:ed:98:6c:30:6d:
         51:d4:c7:16:3f:d6:1f:c6:32:91:50:90:bf:a9:ad:a7:57:81:
         6e:fb:f3:19
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYt86D0CMNAb3puMV5F5AuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjUwNDEzMDcwMTAzWhcNMjUwNDE0MDcwMTAzWjAzMTEwLwYDVQQD
EygwZjA5ZDYwMmFmOTdmMzkzMmMzZjc0ZDFmYzBkOTg4ZDI4ZDk3MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVP7nxO52XvdbcED/smrgJsLRzXk
rx7BZ8sSkThiZfpAI/xOgnRWHSQx/LfZDGMG9h3PJuTk6bm1f2QoJDVjfUZm73Po
EFdpX37KYk73R0maWGR3Jxk7Rv31UKYiCnm4Knp2u59hUprUvVSBEa5LMysfRAhW
eKTOgKLpPEwbMB6uH6prwsZuC7ubf4NopMQKR7RhspKgyN4ridpH93/AsTF4WJmq
kb5nyoI6BN7MqAl0AuSspPYqD/hPBC8SRWKQOtfF6CcuabOIhPWqnLPTqOl4hrLF
x9O7730JBw8PaMWdi5NYVSZgCRbnTefYAC+NQP9Oqy0NLH7cb9LNZfN7UwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA8J1gKvl/OTLD900fwNmI0o2XFLMB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw
NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2rP
yjfKVKeO7ZoPta3F1mSEIUNnsDvA31XsrzXOm7i5zz4lid+R3NW/VkfH3Pu+tuJp
65JMeY0XLa3PDzErokbHv7VUS2Eh/wYBXJCo+91qcdS+spI1TngIIiDwpnwOqjtn
8c8RthmGPn0e5QzsPwlh0bTPFfRA6FNftgJ3P0SgpEIrVb0ilqRxZQkBMFeZLC55
bfTaYAV26EU9bKjCgsxOa8w+qkT78HP/VBDyT5gR+HtZImWUgCQRVHindlJD1qiH
xMexmelbmDCB8hn6A31FQHwU/kV/xwhfnXVVehmojxkJoe2YbDBtUdTHFj/WH8Yy
kVCQv6mtp1eBbvvzGQ==
-----END CERTIFICATE-----