Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File:                     LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier:          OWOTkvzPeZyqZgKh9SfZVKe+UcIcdAC+BqJd7Hipe0c=
Subject key identifier:   B6:11:FB:01:43:01:C7:EA:0D:7B:27:F8:9E:D7:25:4E:05:2D:0E:45
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer:       /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial:       01962E98EB52038D7A20EDB411116CDEB4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number:          10BB
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: vP/02lP3jEaOEv0dOeRno2AHXFZKXgIs0YtI57kl/Ms=)
                          2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:52:03:8d:7a:20:ed:b4:11:11:6c:de:b4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=b611fb014301c7ea0d7b27f89ed7254e052d0e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:4c:39:31:80:45:b7:64:1e:ca:f6:e5:dd:
                    cd:35:32:f2:d0:33:c8:af:a8:a3:8f:29:47:1b:0b:
                    a3:5f:e7:be:42:b4:63:66:40:6f:dc:17:bd:a6:fa:
                    8b:10:6a:c9:87:7c:93:56:76:dc:cd:ce:58:3d:13:
                    4f:70:95:67:94:71:13:03:3b:22:52:1b:c4:5b:92:
                    90:2d:64:3b:6b:1b:35:8c:53:24:87:ba:72:f4:7a:
                    49:7a:5a:31:ef:dd:f9:18:cf:5b:c5:b7:95:5d:b1:
                    a5:b7:c6:dd:9a:b9:68:37:fd:84:05:ee:e3:c0:4f:
                    9a:39:88:7a:35:92:44:59:d0:5d:65:17:31:04:09:
                    10:f4:82:fb:50:75:b5:fa:35:5e:05:46:ff:49:c3:
                    37:6c:a9:5f:c3:75:a8:e8:54:f2:9f:a8:77:d7:10:
                    e8:50:de:13:a4:c1:30:b1:9b:1c:1d:99:3f:2f:16:
                    bf:60:44:14:6b:a4:a2:11:a5:d1:fa:a9:34:0d:df:
                    31:05:b4:63:56:a0:2a:eb:3f:a5:05:e5:11:03:c1:
                    df:67:e5:35:9c:64:83:0b:3c:7e:6f:7f:1b:24:67:
                    e4:aa:61:26:d6:14:c1:fe:75:23:1e:7c:eb:ad:d2:
                    7b:4b:58:e2:7c:61:2b:bb:c9:7b:4a:67:58:21:16:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:11:FB:01:43:01:C7:EA:0D:7B:27:F8:9E:D7:25:4E:05:2D:0E:45
            X509v3 Authority Key Identifier:
                keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:69:15:b3:e9:e2:65:34:81:3d:ad:47:88:eb:3e:70:0f:
         82:62:7a:38:89:01:00:5f:cc:79:cf:6b:17:34:bf:b4:66:f3:
         ed:8a:0e:71:71:fb:e3:37:b7:96:80:c1:6f:67:4b:ba:60:d6:
         ee:b8:33:e6:1d:8c:5b:80:6f:8f:ba:fb:ce:64:d7:77:8e:a8:
         8f:c6:1c:8b:c8:6a:d8:c6:68:57:c8:99:78:66:e1:00:91:8d:
         5c:26:55:66:67:43:40:e3:56:b9:8b:b4:4d:87:fa:7b:96:79:
         6a:4e:f1:67:df:26:05:e5:96:16:44:14:bb:44:53:26:50:e7:
         f6:70:7e:b1:c1:1b:7f:10:18:65:c3:83:53:b0:56:6b:f2:c8:
         65:a5:86:2a:8c:5d:ca:1e:a6:f4:ad:0e:5f:f9:e5:52:9d:da:
         7b:99:63:9f:9b:7d:a5:45:8d:6d:2b:e1:3e:60:c5:12:70:e2:
         b0:a8:8f:01:e1:e5:9e:23:c2:a3:50:03:d2:b2:b1:03:db:b5:
         67:9d:77:6a:8b:56:0a:6f:cb:44:af:51:b7:87:26:f5:ff:5d:
         c9:0a:ab:1d:e2:0e:ad:52:a9:f6:8f:08:24:ff:a9:19:06:f2:
         c0:58:49:10:d7:03:4c:14:36:b2:33:93:26:48:0e:96:42:e5:
         ad:08:02:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOtSA416IO20ERFs3rTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjUwNDEzMTAwMTM1WhcNMjUwNDE0MTAwMTM1WjAzMTEwLwYDVQQD
EyhiNjExZmIwMTQzMDFjN2VhMGQ3YjI3Zjg5ZWQ3MjU0ZTA1MmQwZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttNMOTGARbdkHsr25d3NNTLy0DPI
r6ijjylHGwujX+e+QrRjZkBv3Be9pvqLEGrJh3yTVnbczc5YPRNPcJVnlHETAzsi
UhvEW5KQLWQ7axs1jFMkh7py9HpJelox7935GM9bxbeVXbGlt8bdmrloN/2EBe7j
wE+aOYh6NZJEWdBdZRcxBAkQ9IL7UHW1+jVeBUb/ScM3bKlfw3Wo6FTyn6h31xDo
UN4TpMEwsZscHZk/Lxa/YEQUa6SiEaXR+qk0Dd8xBbRjVqAq6z+lBeURA8HfZ+U1
nGSDCzx+b38bJGfkqmEm1hTB/nUjHnzrrdJ7S1jifGEru8l7SmdYIRZYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYR+wFDAcfqDXsn+J7XJU4FLQ5FMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd25pFbPp
4mU0gT2tR4jrPnAPgmJ6OIkBAF/Mec9rFzS/tGbz7YoOcXH74ze3loDBb2dLumDW
7rgz5h2MW4Bvj7r7zmTXd46oj8Yci8hq2MZoV8iZeGbhAJGNXCZVZmdDQONWuYu0
TYf6e5Z5ak7xZ98mBeWWFkQUu0RTJlDn9nB+scEbfxAYZcODU7BWa/LIZaWGKoxd
yh6m9K0OX/nlUp3ae5ljn5t9pUWNbSvhPmDFEnDisKiPAeHlniPCo1AD0rKxA9u1
Z513aotWCm/LRK9Rt4cm9f9dyQqrHeIOrVKp9o8IJP+pGQbywFhJENcDTBQ2sjOT
JkgOlkLlrQgCHQ==
-----END CERTIFICATE-----