Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          k6TURxOAT9LmqrVOePl8MrD8io1kVsTqIBcOr/CAbwA=
Subject key identifier:   B6:24:DF:67:BF:B8:AC:39:7F:FC:D8:56:FB:F0:38:0C:13:5B:8F:A6
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       01962F3D32220CAEB47390D2E12B0E060150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1519
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: dpBK1y+e5RsPencUplSgi8F7FDgnSlCqATDT1RqLCNs=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:32:22:0c:ae:b4:73:90:d2:e1:2b:0e:06:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=b624df67bfb8ac397ffcd856fbf0380c135b8fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:3d:7d:c0:cf:89:e4:22:26:11:9e:7c:5a:
                    4e:da:62:69:15:b9:02:e6:63:72:92:ab:d3:de:1b:
                    32:18:d4:3b:44:d3:33:9e:7f:93:42:b5:72:c1:6b:
                    8b:76:6a:b9:66:2e:02:3f:41:0b:fa:1d:b4:b7:cd:
                    46:5e:b8:6b:9c:19:b4:52:a4:a4:82:5d:dd:2e:54:
                    30:f0:53:35:60:55:ef:f0:e5:40:bb:b9:a8:45:a1:
                    fa:6c:ed:5f:1a:23:f4:fc:0a:65:64:26:43:87:fb:
                    56:4e:3d:6d:ab:de:b4:ad:64:11:47:ee:e0:cc:c2:
                    01:9c:c0:f4:29:13:ac:97:0b:3f:ed:b4:c6:eb:0f:
                    be:d8:99:99:8e:88:d6:5b:6d:71:2d:69:b4:97:43:
                    3d:a7:04:77:29:0e:db:3d:1b:4d:f1:e9:38:2d:41:
                    e6:fb:35:ec:57:96:0c:87:a7:ca:d8:ef:73:79:13:
                    d1:d5:e0:1f:f1:b4:60:96:b4:bd:04:bd:a3:28:52:
                    dd:61:0b:41:b4:0c:3d:3d:6d:49:f3:81:7d:0d:db:
                    33:8c:67:92:05:b1:76:de:dc:2d:90:e3:35:12:5f:
                    b1:ce:88:37:e4:09:b5:4e:e9:35:ae:5d:41:25:86:
                    7b:b9:ea:f7:ed:66:ca:44:c1:b3:4e:54:cf:d8:32:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:DF:67:BF:B8:AC:39:7F:FC:D8:56:FB:F0:38:0C:13:5B:8F:A6
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:b6:77:fe:fb:c4:df:21:5d:0e:94:cb:52:bc:68:d4:7c:
         d8:32:7d:86:58:ae:56:f0:8b:ce:bc:dd:1d:59:ab:7a:7d:6f:
         12:52:e3:41:16:6e:db:e8:6c:2e:7e:b7:e8:68:87:7b:2d:5e:
         8b:a6:c9:81:3f:1f:8b:d6:6b:aa:e0:41:b3:0d:4f:6d:b4:3a:
         fb:2e:13:96:40:c9:a6:cf:2b:da:b1:c8:69:b3:74:74:01:d7:
         33:50:23:62:6a:8d:61:88:39:3d:30:e7:c4:9e:6a:82:4c:5a:
         43:f3:e0:b8:61:79:95:3c:db:b8:e9:c4:0a:d5:7f:78:3a:d8:
         7d:d4:58:dc:0e:2b:54:8d:05:60:56:22:c4:ad:2e:0a:8d:7c:
         8b:fb:5e:eb:c2:4c:df:b1:2c:2e:d0:60:4e:39:24:08:58:bc:
         b8:7f:31:a0:77:6e:41:b6:9b:83:58:35:d7:3b:35:85:31:d9:
         22:36:ce:60:43:da:93:e6:4d:8a:17:ca:76:5f:04:03:05:7e:
         d8:eb:eb:7c:2f:3d:d6:28:e3:d7:da:62:8b:33:d6:2e:3c:23:
         d3:7d:81:95:af:e5:44:28:95:85:44:ad:81:0b:ea:0b:dc:78:
         68:f3:fb:63:5d:6b:c9:1b:21:b5:66:2f:ca:56:6f:24:ee:c1:
         83:02:78:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTIiDK60c5DS4SsOBgFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy
NWM0NDkwHhcNMjUwNDEzMTMwMTAxWhcNMjUwNDE0MTMwMTAxWjAzMTEwLwYDVQQD
EyhiNjI0ZGY2N2JmYjhhYzM5N2ZmY2Q4NTZmYmYwMzgwYzEzNWI4ZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m89fcDPieQiJhGefFpO2mJpFbkC
5mNykqvT3hsyGNQ7RNMznn+TQrVywWuLdmq5Zi4CP0EL+h20t81GXrhrnBm0UqSk
gl3dLlQw8FM1YFXv8OVAu7moRaH6bO1fGiP0/AplZCZDh/tWTj1tq960rWQRR+7g
zMIBnMD0KROslws/7bTG6w++2JmZjojWW21xLWm0l0M9pwR3KQ7bPRtN8ek4LUHm
+zXsV5YMh6fK2O9zeRPR1eAf8bRglrS9BL2jKFLdYQtBtAw9PW1J84F9DdszjGeS
BbF23twtkOM1El+xzog35Am1Tuk1rl1BJYZ7uer37WbKRMGzTlTP2DINUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYk32e/uKw5f/zYVvvwOAwTW4+mMB8GA1UdIwQY
MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt
Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz
LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJti2d/77
xN8hXQ6Uy1K8aNR82DJ9hliuVvCLzrzdHVmren1vElLjQRZu2+hsLn636GiHey1e
i6bJgT8fi9ZrquBBsw1PbbQ6+y4TlkDJps8r2rHIabN0dAHXM1AjYmqNYYg5PTDn
xJ5qgkxaQ/PguGF5lTzbuOnECtV/eDrYfdRY3A4rVI0FYFYixK0uCo18i/te68JM
37EsLtBgTjkkCFi8uH8xoHduQbabg1g11zs1hTHZIjbOYEPak+ZNihfKdl8EAwV+
2OvrfC891ijj19piizPWLjwj032Bla/lRCiVhUStgQvqC9x4aPP7Y11ryRshtWYv
ylZvJO7BgwJ4ow==
-----END CERTIFICATE-----