Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File:                     67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier:          BrMRUXxFzf8YBa9j+dEeO2929N/XKNHK8W0wEnCkdcA=
Subject key identifier:   A3:17:2D:26:D6:3F:F4:F9:99:39:FA:ED:DC:D5:61:E8:F6:5E:DD:EC
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer:       /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial:       01962F3D9CDD72B74CD21F0C8CFDAF661BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number:          0E
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: Gtf2cqFX6TQm8LAhs68HKlIBk2GVb5hKXGImbK/jxqI=)
                          2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:dd:72:b7:4c:d2:1f:0c:8c:fd:af:66:1b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=a3172d26d63ff4f99939faeddcd561e8f65eddec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:4e:4a:98:3a:50:9b:44:3c:42:9a:e1:4a:
                    89:75:7c:8e:e1:68:b2:07:82:3f:95:dc:e4:7a:5f:
                    cf:a6:47:72:d5:67:f8:3f:51:7e:bc:6f:99:5e:48:
                    a8:3e:1f:b2:6e:6b:41:51:56:41:53:d0:ae:30:93:
                    1e:52:19:3d:e3:b7:32:8e:e5:d9:ac:c1:80:ef:e7:
                    a2:b4:a3:45:ca:22:00:cc:ff:ee:03:4a:87:f8:5a:
                    f1:fc:c5:ab:da:56:c9:4d:eb:f7:57:69:6a:c7:e5:
                    d4:f0:b4:72:4e:81:bb:29:4b:af:b0:5a:68:ee:05:
                    7a:21:ae:3b:39:1f:52:db:31:8c:ce:49:0e:f0:45:
                    84:cf:d9:9e:68:45:b5:7d:e0:0f:e2:b1:a2:08:73:
                    8e:e2:8e:ed:51:f9:d6:1d:47:18:2c:36:d8:ab:23:
                    8a:6e:9c:0e:ee:e9:c7:0e:a2:34:ce:25:98:e9:95:
                    7b:fc:df:2a:2e:e4:62:2a:e9:1c:08:07:d6:0a:9c:
                    96:51:b4:cd:7a:dd:95:40:f8:be:c1:68:04:25:43:
                    1a:fa:b0:61:ec:eb:12:56:94:69:57:69:99:2b:b4:
                    d0:0a:28:0e:2a:fe:69:41:39:db:bf:84:20:f8:e4:
                    0d:ae:bf:11:e9:cc:4e:0f:18:0c:8c:f0:8e:7d:dd:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:17:2D:26:D6:3F:F4:F9:99:39:FA:ED:DC:D5:61:E8:F6:5E:DD:EC
            X509v3 Authority Key Identifier:
                keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:6b:41:75:37:7c:f2:f9:8d:55:73:6e:d9:f4:74:f7:51:
         e4:2d:35:23:7e:3d:34:0f:72:7b:05:16:c6:b8:6c:a1:3c:80:
         ff:13:87:35:73:82:36:70:a7:4f:2b:27:db:ba:17:09:35:19:
         5b:d6:d4:11:ba:f6:81:91:4f:69:62:37:77:39:9f:75:eb:e4:
         00:50:35:e4:46:11:c6:b9:6d:ea:a7:a1:24:dd:3b:29:d5:56:
         2f:58:40:4d:64:a3:54:9e:da:a3:74:c8:47:fc:76:ec:f7:0b:
         89:0c:d1:e5:f5:fc:63:02:26:41:a4:56:71:3e:d4:ec:50:69:
         01:6e:8e:5e:f4:60:81:97:98:23:b9:90:14:c5:04:a7:4f:05:
         95:36:c7:5f:6f:22:c4:eb:07:9c:e3:bf:4f:ce:a3:96:fa:31:
         50:fe:61:0c:56:31:3e:d6:a3:5b:67:dc:8c:e0:a0:35:46:1d:
         09:94:96:b8:09:fe:e8:8e:b8:3a:e7:82:8c:49:db:9a:0a:8b:
         37:53:59:bc:5a:cd:87:8f:2d:99:74:ac:a9:2c:9d:fa:9f:a2:
         51:0a:cd:92:53:26:e0:5d:f7:d2:91:1c:8b:89:36:c7:0b:ce:
         6e:f7:a4:f3:e3:15:4c:ff:5d:98:91:56:f0:be:73:11:fb:f6:
         09:b1:84:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZzdcrdM0h8MjP2vZhvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1
YzRlZGYwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
EyhhMzE3MmQyNmQ2M2ZmNGY5OTkzOWZhZWRkY2Q1NjFlOGY2NWVkZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosVOSpg6UJtEPEKa4UqJdXyO4Wiy
B4I/ldzkel/Ppkdy1Wf4P1F+vG+ZXkioPh+ybmtBUVZBU9CuMJMeUhk947cyjuXZ
rMGA7+eitKNFyiIAzP/uA0qH+Frx/MWr2lbJTev3V2lqx+XU8LRyToG7KUuvsFpo
7gV6Ia47OR9S2zGMzkkO8EWEz9meaEW1feAP4rGiCHOO4o7tUfnWHUcYLDbYqyOK
bpwO7unHDqI0ziWY6ZV7/N8qLuRiKukcCAfWCpyWUbTNet2VQPi+wWgEJUMa+rBh
7OsSVpRpV2mZK7TQCigOKv5pQTnbv4Qg+OQNrr8R6cxODxgMjPCOfd0COQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMXLSbWP/T5mTn67dzVYej2Xt3sMB8GA1UdIwQY
MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt
MGQyZTQyMDU2ODZmLzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm
LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/JrQXU3
fPL5jVVzbtn0dPdR5C01I349NA9yewUWxrhsoTyA/xOHNXOCNnCnTysn27oXCTUZ
W9bUEbr2gZFPaWI3dzmfdevkAFA15EYRxrlt6qehJN07KdVWL1hATWSjVJ7ao3TI
R/x27PcLiQzR5fX8YwImQaRWcT7U7FBpAW6OXvRggZeYI7mQFMUEp08FlTbHX28i
xOsHnOO/T86jlvoxUP5hDFYxPtajW2fcjOCgNUYdCZSWuAn+6I64OueCjEnbmgqL
N1NZvFrNh48tmXSsqSyd+p+iUQrNklMm4F330pEci4k2xwvObvek8+MVTP9dmJFW
8L5zEfv2CbGEpQ==
-----END CERTIFICATE-----