Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File:                     F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier:          9wbz+e23EQ/o7Xt24eecA6c27JgaX6wB48n/KNQPkNY=
Subject key identifier:   4C:19:27:21:F8:FA:5F:22:0C:17:9A:66:1B:D7:C5:E9:33:69:22:53
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer:       /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial:       01962FAB9751317C04D4C228636CE2F47E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number:          0262
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: 4AgPDUP2x2zrXTLr3Uh5hN6Ywk4WUMZLkpc5ASPYaMk=)
                          2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:51:31:7c:04:d4:c2:28:63:6c:e2:f4:7e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=4c192721f8fa5f220c179a661bd7c5e933692253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:3c:72:9c:3e:e2:2f:a1:21:d7:12:34:6f:
                    5f:c1:56:03:18:54:87:1e:2f:9b:fc:1b:13:5d:fb:
                    bb:06:ab:95:73:5e:26:ab:f7:79:6d:87:32:4a:87:
                    72:cc:96:74:65:dd:e1:b2:20:6d:e5:67:10:e0:ac:
                    fe:89:71:09:55:de:1d:ba:c2:c6:c9:09:67:98:fe:
                    4d:89:d1:69:ce:a4:2c:17:3d:63:01:c8:fd:d5:de:
                    d7:b1:00:55:61:f1:99:b4:71:91:2b:96:15:df:13:
                    21:e5:82:78:84:39:67:00:1a:a8:cf:65:a0:eb:45:
                    01:24:06:3f:9a:62:e6:a7:2e:52:2e:f4:cc:1a:70:
                    82:59:8e:a4:1f:27:ea:99:71:0b:f5:a0:4e:bd:8f:
                    5e:bb:11:3b:7c:11:86:6b:f7:3b:45:b4:38:d1:46:
                    9f:d7:5e:1d:41:77:1d:19:d8:c9:b0:13:e6:b5:08:
                    70:01:e7:7e:f1:fb:b2:2b:7f:3c:b6:81:92:dc:a5:
                    1a:d6:fc:0d:17:2b:f0:1c:2b:44:8a:0c:8f:e1:b0:
                    e3:d4:b6:f1:3d:57:0d:90:bc:8c:b8:0e:c3:e4:5f:
                    eb:3b:48:58:34:49:df:a8:99:0a:57:d0:a4:c8:58:
                    90:ba:11:c7:f9:10:4b:f4:68:58:07:56:74:c5:c0:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:19:27:21:F8:FA:5F:22:0C:17:9A:66:1B:D7:C5:E9:33:69:22:53
            X509v3 Authority Key Identifier:
                keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:18:97:31:8c:92:a7:9a:34:41:9a:75:38:e6:a1:ed:d7:85:
         80:bf:91:1d:73:47:b1:88:86:28:b9:86:31:87:af:72:4b:ae:
         7c:7f:ff:e6:7a:b1:5a:8a:7c:47:a8:8e:ec:97:25:0a:ef:6c:
         98:ed:92:0f:93:b9:3f:a5:da:da:84:be:9d:b5:e3:13:f4:7a:
         4d:25:2d:d9:77:6e:58:32:e7:c7:61:1e:13:5c:16:13:57:46:
         e1:b7:0c:6b:18:1c:09:b1:d9:f9:57:3a:63:99:2e:be:2d:b0:
         07:71:0f:32:0c:ef:9b:3a:d8:15:a4:f8:1e:e2:aa:4f:8d:d9:
         fc:22:1b:f6:82:fc:c6:9d:d2:15:20:93:61:9d:2e:c4:62:d2:
         03:ff:cf:f9:2a:87:86:a1:1d:dd:2f:cc:e2:6c:e7:98:53:ec:
         4f:b9:33:d1:cf:c4:01:4e:ad:09:d6:38:82:1c:5c:93:fc:3a:
         ad:0b:7d:b7:95:17:87:ab:3f:60:50:ad:5d:a0:3f:c9:49:b0:
         77:00:dc:c7:44:af:c5:91:be:5d:39:1c:36:1d:a6:52:44:30:
         71:a2:01:a3:47:9d:8a:4b:45:be:99:6c:44:4b:5e:0b:17:da:
         9d:fa:cb:3c:f5:8b:f1:41:79:18:5c:3e:fb:10:c6:f8:a8:0b:
         52:7c:25:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5dRMXwE1MIoY2zi9H5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3
ZTY5ZTAwHhcNMjUwNDEzMTUwMTM2WhcNMjUwNDE0MTUwMTM2WjAzMTEwLwYDVQQD
Eyg0YzE5MjcyMWY4ZmE1ZjIyMGMxNzlhNjYxYmQ3YzVlOTMzNjkyMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1A8cpw+4i+hIdcSNG9fwVYDGFSH
Hi+b/BsTXfu7BquVc14mq/d5bYcySodyzJZ0Zd3hsiBt5WcQ4Kz+iXEJVd4dusLG
yQlnmP5NidFpzqQsFz1jAcj91d7XsQBVYfGZtHGRK5YV3xMh5YJ4hDlnABqoz2Wg
60UBJAY/mmLmpy5SLvTMGnCCWY6kHyfqmXEL9aBOvY9euxE7fBGGa/c7RbQ40Uaf
114dQXcdGdjJsBPmtQhwAed+8fuyK388toGS3KUa1vwNFyvwHCtEigyP4bDj1Lbx
PVcNkLyMuA7D5F/rO0hYNEnfqJkKV9CkyFiQuhHH+RBL9GhYB1Z0xcALuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwZJyH4+l8iDBeaZhvXxekzaSJTMB8GA1UdIwQY
MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt
MDliOTkwNWQ0MWRiLzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi
LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBiXMYyS
p5o0QZp1OOah7deFgL+RHXNHsYiGKLmGMYevckuufH//5nqxWop8R6iO7JclCu9s
mO2SD5O5P6Xa2oS+nbXjE/R6TSUt2XduWDLnx2EeE1wWE1dG4bcMaxgcCbHZ+Vc6
Y5kuvi2wB3EPMgzvmzrYFaT4HuKqT43Z/CIb9oL8xp3SFSCTYZ0uxGLSA//P+SqH
hqEd3S/M4mznmFPsT7kz0c/EAU6tCdY4ghxck/w6rQt9t5UXh6s/YFCtXaA/yUmw
dwDcx0SvxZG+XTkcNh2mUkQwcaIBo0ediktFvplsREteCxfanfrLPPWL8UF5GFw+
+xDG+KgLUnwlew==
-----END CERTIFICATE-----