Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File:                     1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier:          nvV2noQwgrREfkmdOnVfl0V9c/lqmatrmJJupD7zFbE=
Subject key identifier:   75:14:B5:8B:65:0A:92:EB:FC:CB:6E:CD:E9:EF:EA:F3:63:76:E6:83
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer:       /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial:       01962E2AF53B731FFF489C596D1A8C434604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number:          017D
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: oJN+BJXsDafzGAi9KGTG30ZCB1T0wnXDwYoDA8R49rU=)
                          2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:3b:73:1f:ff:48:9c:59:6d:1a:8c:43:46:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=7514b58b650a92ebfccb6ecde9efeaf36376e683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:51:7d:29:ff:3d:0f:92:49:7c:97:59:db:
                    e8:3c:d9:e1:8a:5a:9f:18:b9:d9:27:b7:ba:b2:2b:
                    ab:57:9b:b9:80:6d:c5:b3:28:76:00:58:e1:40:5f:
                    37:bf:7d:e2:62:5a:7f:7c:4b:46:c7:41:b6:ad:f2:
                    b0:0a:79:76:a3:61:ee:ce:da:c4:a3:4c:5c:f0:ba:
                    41:94:df:c2:75:2d:c3:69:44:3e:7d:41:f6:7a:68:
                    68:0a:25:d9:a3:33:b3:5f:13:97:44:79:c0:5a:d1:
                    f1:d7:c1:2b:71:cc:40:72:eb:b8:e6:f5:5d:76:9e:
                    4f:3e:b0:2d:de:59:f3:c3:e2:50:fe:6e:65:f1:a3:
                    81:4a:42:63:d4:21:88:bf:dd:3e:68:73:7e:4f:95:
                    ac:e6:67:a6:64:1f:f0:1c:bf:1a:1b:b0:8c:cc:f7:
                    cf:55:40:94:cf:41:06:3c:e8:34:0e:05:ca:8e:06:
                    03:d0:d5:de:8a:67:de:a4:0e:69:1d:1b:d6:2b:7e:
                    99:47:f7:6e:2c:de:99:5c:d2:02:ef:3c:64:04:b9:
                    4a:4c:75:ec:8e:2f:28:0e:56:03:96:75:37:48:9e:
                    49:ba:c5:f1:da:9c:e1:00:87:72:88:c5:4b:a2:50:
                    04:88:87:14:76:15:ed:e9:d7:b8:4d:40:5a:48:4d:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:14:B5:8B:65:0A:92:EB:FC:CB:6E:CD:E9:EF:EA:F3:63:76:E6:83
            X509v3 Authority Key Identifier:
                keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:de:4b:0c:dc:37:26:16:d4:73:0f:cf:60:2a:af:61:74:7b:
         af:82:4d:f6:2f:49:7c:61:0a:f1:1a:7e:77:7b:9e:ae:3b:2a:
         02:8f:76:47:3a:89:a6:94:39:98:2a:64:f7:d3:6a:23:9c:c4:
         a7:4c:e3:91:eb:33:a2:bc:0f:0c:00:b0:bf:6d:a2:89:f1:18:
         c1:3d:7d:fc:17:96:53:ff:1b:83:1c:38:2d:58:ec:7c:07:95:
         7a:9d:10:62:63:d8:7d:d3:1b:a5:65:ae:42:06:01:f5:dc:0c:
         63:ec:22:c4:1a:15:8e:74:a9:ea:06:68:42:24:9e:c9:6e:ba:
         70:46:72:62:08:6c:7f:92:6a:ce:aa:40:e8:09:b6:99:de:8c:
         f1:7d:35:5a:ad:d0:62:67:86:20:5e:33:7d:78:ff:8a:3f:02:
         fa:2d:a3:eb:0e:84:83:72:e4:66:e6:3a:f2:5e:6b:fe:25:4b:
         bc:31:55:1f:17:d7:3d:4c:5b:65:aa:9f:5e:28:1f:fe:1c:c5:
         f1:ef:18:9f:ee:9a:ce:c6:8d:f8:72:58:02:9b:a9:85:27:93:
         e7:db:94:8e:84:95:f7:11:d4:52:8a:e1:31:5a:ab:d5:76:cc:
         66:18:b8:60:b6:c7:72:c2:2d:f2:46:f6:97:e7:30:35:d2:12:
         96:2f:93:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvU7cx//SJxZbRqMQ0YEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5
NTU0NmQwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
Eyg3NTE0YjU4YjY1MGE5MmViZmNjYjZlY2RlOWVmZWFmMzYzNzZlNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXpRfSn/PQ+SSXyXWdvoPNnhilqf
GLnZJ7e6siurV5u5gG3Fsyh2AFjhQF83v33iYlp/fEtGx0G2rfKwCnl2o2HuztrE
o0xc8LpBlN/CdS3DaUQ+fUH2emhoCiXZozOzXxOXRHnAWtHx18ErccxAcuu45vVd
dp5PPrAt3lnzw+JQ/m5l8aOBSkJj1CGIv90+aHN+T5Ws5memZB/wHL8aG7CMzPfP
VUCUz0EGPOg0DgXKjgYD0NXeimfepA5pHRvWK36ZR/duLN6ZXNIC7zxkBLlKTHXs
ji8oDlYDlnU3SJ5JusXx2pzhAIdyiMVLolAEiIcUdhXt6de4TUBaSE12AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUUtYtlCpLr/Mtuzenv6vNjduaDMB8GA1UdIwQY
MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt
MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw
LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6d5LDNw3
JhbUcw/PYCqvYXR7r4JN9i9JfGEK8Rp+d3uerjsqAo92RzqJppQ5mCpk99NqI5zE
p0zjkeszorwPDACwv22iifEYwT19/BeWU/8bgxw4LVjsfAeVep0QYmPYfdMbpWWu
QgYB9dwMY+wixBoVjnSp6gZoQiSeyW66cEZyYghsf5JqzqpA6Am2md6M8X01Wq3Q
YmeGIF4zfXj/ij8C+i2j6w6Eg3LkZuY68l5r/iVLvDFVHxfXPUxbZaqfXigf/hzF
8e8Yn+6azsaN+HJYApuphSeT59uUjoSV9xHUUorhMVqr1XbMZhi4YLbHcsIt8kb2
l+cwNdISli+TXQ==
-----END CERTIFICATE-----