Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File:                     Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier:          SZ0AIv9HV675N/HMEZ0a1zRowX8QENrFQhiu7UJtbAk=
Subject key identifier:   76:8F:12:E8:51:DF:29:DC:19:E2:3C:7F:0B:5E:D3:46:D6:3F:89:40
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer:       /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial:       01962E98AFAD7F61644AA6A4533AA963C2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number:          01DD
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: Aq45pNbWIYjPNtbz3rggEGoe65qwBJL3rpA+R3iifAo=)
                          2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:ad:7f:61:64:4a:a6:a4:53:3a:a9:63:c2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=768f12e851df29dc19e23c7f0b5ed346d63f8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:f0:1a:ec:1e:0c:25:ea:d6:fd:fd:2b:77:
                    96:6f:39:b3:fc:69:eb:41:13:2f:f9:a5:a9:ec:8c:
                    82:81:9c:78:1b:38:71:95:0b:71:a6:8f:e9:87:a9:
                    37:3f:fc:b9:a9:a5:af:89:f8:af:ad:7f:92:80:c6:
                    70:75:ee:f8:dc:5d:b6:04:8c:f7:47:cd:dc:3c:c9:
                    01:96:51:99:0d:dc:59:cb:34:8d:2b:3a:32:01:0d:
                    77:ba:1c:3b:7c:ff:d9:ff:71:ef:e4:f8:6d:9b:51:
                    b4:10:51:80:1e:4a:73:40:8e:76:98:9f:17:52:37:
                    2f:a8:d8:0d:53:8d:ab:44:e7:a0:56:67:ae:e2:83:
                    95:25:72:00:64:63:6d:45:24:26:ef:d1:f0:8a:c1:
                    3f:3d:cc:8e:57:23:99:64:00:77:7a:5d:3a:2e:9f:
                    fb:f9:ba:4b:3f:7a:d9:31:63:81:79:dc:a2:cc:78:
                    97:c1:b3:b5:43:30:b7:af:fe:08:90:f8:fb:81:5b:
                    82:fe:98:39:c4:bc:45:24:70:ed:3d:02:d3:55:78:
                    44:4c:3e:1e:48:25:bb:17:4d:25:74:98:40:16:9c:
                    42:b6:76:5b:73:cc:d1:20:1f:19:0b:f7:19:bd:01:
                    0b:58:f1:d5:ef:41:d2:91:bd:23:18:51:b6:82:79:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:12:E8:51:DF:29:DC:19:E2:3C:7F:0B:5E:D3:46:D6:3F:89:40
            X509v3 Authority Key Identifier:
                keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:a4:07:2b:18:6d:c6:2f:ca:0b:59:03:26:0a:3c:11:ef:
         dc:d3:ef:c2:10:8a:26:04:ae:be:fa:92:81:4e:29:fc:a8:2d:
         4d:7a:58:c8:f5:92:24:33:e3:b9:28:c4:33:67:70:4b:48:0f:
         91:b8:a2:f9:bf:c1:53:1b:72:07:38:67:e1:87:3c:b6:06:0a:
         91:02:a8:1d:93:3a:fc:97:4b:80:87:3a:89:13:13:ea:8d:22:
         d8:ce:59:a9:f9:75:1c:02:64:51:2b:38:02:44:c8:4f:21:69:
         ed:48:8b:8f:55:2a:35:40:f6:b2:86:02:93:63:43:86:4a:5b:
         53:f4:79:db:02:c2:2f:8d:e9:a7:67:2c:4f:d3:0e:b5:6a:2b:
         42:fc:51:36:64:e7:74:e2:ea:7e:39:af:b3:6f:ff:41:53:35:
         02:6a:85:02:90:27:be:76:3a:f4:84:5e:5c:fc:63:10:1b:26:
         e3:ee:d7:a8:42:04:17:ff:cd:4f:d7:b7:a3:3b:bb:85:b0:08:
         57:87:c6:e3:cf:b5:65:05:3b:03:68:ff:42:21:ad:d2:e0:3b:
         87:e8:b6:ca:3e:71:92:66:91:cf:96:d0:5c:9a:6e:e1:b0:83:
         a2:a0:bd:62:88:0f:28:c1:a5:63:79:6e:45:0d:93:36:a2:bc:
         61:14:a5:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumK+tf2FkSqakUzqpY8KuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4
NDdiYjIwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
Eyg3NjhmMTJlODUxZGYyOWRjMTllMjNjN2YwYjVlZDM0NmQ2M2Y4OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fzwGuweDCXq1v39K3eWbzmz/Gnr
QRMv+aWp7IyCgZx4GzhxlQtxpo/ph6k3P/y5qaWvifivrX+SgMZwde743F22BIz3
R83cPMkBllGZDdxZyzSNKzoyAQ13uhw7fP/Z/3Hv5Phtm1G0EFGAHkpzQI52mJ8X
UjcvqNgNU42rROegVmeu4oOVJXIAZGNtRSQm79HwisE/PcyOVyOZZAB3el06Lp/7
+bpLP3rZMWOBedyizHiXwbO1QzC3r/4IkPj7gVuC/pg5xLxFJHDtPQLTVXhETD4e
SCW7F00ldJhAFpxCtnZbc8zRIB8ZC/cZvQELWPHV70HSkb0jGFG2gnlzDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaPEuhR3yncGeI8fwte00bWP4lAMB8GA1UdIwQY
MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt
MzczNzRlMzk2YzdkLzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk
LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaCkBysY
bcYvygtZAyYKPBHv3NPvwhCKJgSuvvqSgU4p/KgtTXpYyPWSJDPjuSjEM2dwS0gP
kbii+b/BUxtyBzhn4Yc8tgYKkQKoHZM6/JdLgIc6iRMT6o0i2M5Zqfl1HAJkUSs4
AkTITyFp7UiLj1UqNUD2soYCk2NDhkpbU/R52wLCL43pp2csT9MOtWorQvxRNmTn
dOLqfjmvs2//QVM1AmqFApAnvnY69IReXPxjEBsm4+7XqEIEF//NT9e3ozu7hbAI
V4fG48+1ZQU7A2j/QiGt0uA7h+i2yj5xkmaRz5bQXJpu4bCDoqC9YogPKMGlY3lu
RQ2TNqK8YRSlEQ==
-----END CERTIFICATE-----