Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File:                     stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier:          0fhP3Mt5kt0NRaTwp02Ofg01rEC1bCTDehS74G8q8uY=
Subject key identifier:   63:8A:CC:8B:5F:26:C0:1E:78:EA:2A:0B:DD:CE:4E:70:98:29:59:93
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer:       /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial:       01962F3DE3130721E4FD4BB1A1C490FF9D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number:          14B6
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=)
                          2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: oIcYp2ORH9YJsJYtn3FMpDgdtiI1R9MxlKDeXgQiB5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e3:13:07:21:e4:fd:4b:b1:a1:c4:90:ff:9d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=638acc8b5f26c01e78ea2a0bddce4e7098295993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:00:9f:0f:f1:c1:5b:50:fd:8e:2d:f1:0d:
                    8d:6f:84:7a:9c:a3:b9:4d:ef:d5:93:56:e1:5f:9e:
                    a0:82:63:9d:81:31:b9:a7:51:93:66:3f:24:88:4b:
                    ed:76:1a:55:ef:58:0e:ef:f0:7c:78:2f:b0:69:d7:
                    0c:5c:7f:a0:2a:dd:5e:bf:58:ce:93:9a:f2:78:cb:
                    cb:09:96:1b:39:a6:0d:82:83:7a:ca:53:76:ef:b4:
                    e6:6e:e9:e9:a0:f4:66:7a:e3:c8:ea:97:bd:55:8a:
                    78:25:1e:a9:da:2e:d9:e7:25:68:e8:48:53:e4:7f:
                    f9:7e:5b:c5:76:19:d7:94:2a:27:09:77:c2:4a:3b:
                    5f:5a:c6:44:06:f6:ef:03:a3:a4:a4:fa:f9:28:d1:
                    c0:35:2b:5b:92:72:fb:85:ff:e0:7c:99:fd:b9:06:
                    c3:e6:4b:ea:de:68:f1:ec:48:06:8e:9c:40:41:4e:
                    4c:8d:b8:e5:4e:bf:a8:35:da:18:b5:5b:e2:f4:7d:
                    1d:fb:32:07:fe:cf:3e:50:6b:ef:5f:26:90:cb:d1:
                    e0:a4:3c:c5:44:2e:d4:dd:66:56:ed:4a:46:3a:08:
                    e3:5e:08:1d:b7:b0:30:ec:51:4b:1b:ff:a9:08:72:
                    c3:d1:15:cb:8f:40:64:8f:1a:88:1d:16:27:ec:ba:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:CC:8B:5F:26:C0:1E:78:EA:2A:0B:DD:CE:4E:70:98:29:59:93
            X509v3 Authority Key Identifier:
                keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:6e:9c:94:04:6b:d9:a7:64:72:04:45:a9:49:8f:59:01:
         64:9a:7f:c0:d4:1e:b8:3e:ba:73:ed:68:9b:49:09:41:93:45:
         d3:e7:da:b6:ad:fa:7f:62:f9:9c:18:6f:c8:15:e0:36:f2:fd:
         74:60:08:58:35:6c:1f:41:fa:75:81:c4:74:50:63:82:9f:65:
         af:76:5e:a2:3f:6d:a8:6c:94:82:12:d2:2c:6e:43:dd:b4:b6:
         f4:75:d3:2b:20:34:e8:80:c8:33:a8:55:9e:17:e9:de:f0:6b:
         f0:5f:84:b9:f5:3c:b0:48:68:ca:94:ae:93:36:db:3b:cf:c2:
         01:ec:ff:46:96:24:d7:23:a2:80:b1:e9:08:5d:50:7b:f2:bd:
         98:58:7c:36:b8:1f:7c:bc:ea:6a:75:2c:f7:a5:a5:e9:bd:d3:
         b9:5b:47:96:8d:38:33:04:f8:dc:67:fb:6c:a9:28:ce:16:b1:
         78:57:53:1a:7d:28:67:fc:41:0f:d2:1d:26:7f:7c:ae:e5:23:
         5d:6a:fb:58:6d:6d:4e:b0:07:87:95:44:3f:8a:dc:ac:94:b2:
         a8:ce:11:59:25:09:37:8d:d8:f6:8f:fc:19:14:a9:33:38:31:
         71:93:d8:9d:82:e2:6c:ab:bc:f9:20:67:e1:8e:8a:c4:aa:b4:
         f6:78:07:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeMTByHk/UuxocSQ/501MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGIyYmZjZjU5ZDk5Y2E3MDgzMzcwOGZkMzAwMzJmMjNm
ZWY0ODUwHhcNMjUwNDEzMTMwMTQ3WhcNMjUwNDE0MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg2MzhhY2M4YjVmMjZjMDFlNzhlYTJhMGJkZGNlNGU3MDk4Mjk1OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxywAnw/xwVtQ/Y4t8Q2Nb4R6nKO5
Te/Vk1bhX56ggmOdgTG5p1GTZj8kiEvtdhpV71gO7/B8eC+wadcMXH+gKt1ev1jO
k5ryeMvLCZYbOaYNgoN6ylN277TmbunpoPRmeuPI6pe9VYp4JR6p2i7Z5yVo6EhT
5H/5flvFdhnXlConCXfCSjtfWsZEBvbvA6OkpPr5KNHANStbknL7hf/gfJn9uQbD
5kvq3mjx7EgGjpxAQU5MjbjlTr+oNdoYtVvi9H0d+zIH/s8+UGvvXyaQy9HgpDzF
RC7U3WZW7UpGOgjjXggdt7Aw7FFLG/+pCHLD0RXLj0BkjxqIHRYn7LqZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOKzItfJsAeeOoqC93OTnCYKVmTMB8GA1UdIwQY
MBaAFLLbK/z1nZnKcIM3CP0wAy8j/vSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzkt
NzM0OTk0YzUyYzFmLzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzktNzM0OTk0YzUyYzFm
LzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7BunJQE
a9mnZHIERalJj1kBZJp/wNQeuD66c+1om0kJQZNF0+fatq36f2L5nBhvyBXgNvL9
dGAIWDVsH0H6dYHEdFBjgp9lr3Zeoj9tqGyUghLSLG5D3bS29HXTKyA06IDIM6hV
nhfp3vBr8F+EufU8sEhoypSukzbbO8/CAez/RpYk1yOigLHpCF1Qe/K9mFh8Nrgf
fLzqanUs96Wl6b3TuVtHlo04MwT43Gf7bKkozhaxeFdTGn0oZ/xBD9IdJn98ruUj
XWr7WG1tTrAHh5VEP4rcrJSyqM4RWSUJN43Y9o/8GRSpMzgxcZPYnYLibKu8+SBn
4Y6KxKq09ngHYw==
-----END CERTIFICATE-----