Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File:                     1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier:          BQeWu7+GhwPwqE8w6yewDqVw1QF5gC9VRcJPm8kMkWE=
Subject key identifier:   01:32:7F:E8:5C:3A:AA:01:5A:F0:9A:FE:DD:20:C1:D8:46:31:DC:58
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer:       /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial:       01962ECF52E9A4DCCA0AC1D1EE7AEE463DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number:          0E21
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: yuMx4p8DgMtSt4jS7pDfghpyf4ben/Rr5Xo+3/pYgsk=)
                          2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:52:e9:a4:dc:ca:0a:c1:d1:ee:7a:ee:46:3d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=01327fe85c3aaa015af09afedd20c1d84631dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:90:f0:09:15:51:85:51:99:e1:dd:42:b5:
                    4d:e4:1e:c7:7e:53:bf:5e:67:6a:26:28:6b:73:30:
                    07:8f:27:37:60:3e:56:6e:ef:76:88:86:65:99:a3:
                    43:2d:0a:cf:76:db:e8:79:99:88:96:4c:a6:8a:bd:
                    5c:af:cb:ba:1c:9b:c2:31:44:4b:76:09:da:81:7e:
                    3c:39:73:0d:0e:e5:6b:16:20:4c:3b:f0:da:5c:17:
                    55:6e:1f:02:72:90:ae:c7:b1:92:19:c6:54:53:1c:
                    42:d9:7c:25:f8:57:01:40:d5:95:40:77:03:23:7a:
                    62:57:9b:4b:e6:51:91:0f:12:9a:ff:8f:16:9f:ba:
                    84:ee:6e:f3:00:cb:28:24:66:3c:12:8b:ce:18:5b:
                    d8:62:f4:63:24:a0:a2:a8:ed:00:14:20:c1:9a:92:
                    3b:59:26:94:41:42:bc:21:07:d7:7a:30:8b:d8:5a:
                    a5:05:df:30:fe:4e:3d:cb:4f:81:9a:5a:08:fb:5d:
                    bd:db:34:a5:d7:8c:1d:94:a7:99:a4:73:93:fe:47:
                    1a:e9:99:87:25:a2:0d:cb:91:41:a4:c3:df:ad:3e:
                    c5:7a:91:a8:b1:6a:3d:04:0f:a3:9a:4d:27:1b:fe:
                    58:5b:64:4a:f6:aa:7d:4a:c5:36:b5:67:6a:bf:70:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:7F:E8:5C:3A:AA:01:5A:F0:9A:FE:DD:20:C1:D8:46:31:DC:58
            X509v3 Authority Key Identifier:
                keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:66:86:fd:31:5f:43:da:8e:e7:53:00:69:e7:b9:89:3d:
         35:f2:e1:a6:16:91:86:ac:38:77:0d:e6:2c:da:a3:42:dd:a1:
         0e:12:04:aa:bf:e1:a6:76:8a:aa:ac:40:1b:57:27:21:5f:c1:
         f8:84:60:9d:81:c2:6a:5e:42:e5:17:62:4e:08:b9:cb:4a:b1:
         41:34:3c:ea:63:b7:22:84:23:bd:8b:f8:0c:c0:85:bf:e5:18:
         29:d4:8a:e8:43:30:02:a2:70:2d:8e:21:36:e7:5f:8c:d2:40:
         30:a2:b9:89:f0:83:9b:4a:ff:2e:56:af:86:83:dc:fb:e1:6b:
         0c:dc:0d:bf:c9:54:42:76:46:97:90:12:a0:13:58:58:c1:4c:
         3c:94:fb:7b:35:16:dc:80:d9:d7:12:8a:5b:a0:74:92:44:2e:
         ff:73:73:e8:86:f4:ad:31:f4:c2:b6:a8:e7:65:27:b0:56:c0:
         d0:dd:dc:ab:f3:39:3b:e9:ad:71:08:b0:6a:ec:1a:cd:a5:c7:
         d7:45:f7:25:03:3e:b1:3e:b3:32:66:66:05:58:ee:c9:b0:8d:
         83:60:f4:37:f7:a5:f4:25:e4:ea:a1:e9:f2:26:2f:16:f2:36:
         51:55:9b:56:b2:c4:e5:21:36:9e:84:b0:de:40:e5:e8:fd:58:
         77:ee:aa:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1LppNzKCsHR7nruRj2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2
ZjUxZjMwHhcNMjUwNDEzMTEwMTAxWhcNMjUwNDE0MTEwMTAxWjAzMTEwLwYDVQQD
EygwMTMyN2ZlODVjM2FhYTAxNWFmMDlhZmVkZDIwYzFkODQ2MzFkYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY2Q8AkVUYVRmeHdQrVN5B7HflO/
XmdqJihrczAHjyc3YD5Wbu92iIZlmaNDLQrPdtvoeZmIlkymir1cr8u6HJvCMURL
dgnagX48OXMNDuVrFiBMO/DaXBdVbh8CcpCux7GSGcZUUxxC2Xwl+FcBQNWVQHcD
I3piV5tL5lGRDxKa/48Wn7qE7m7zAMsoJGY8EovOGFvYYvRjJKCiqO0AFCDBmpI7
WSaUQUK8IQfXejCL2FqlBd8w/k49y0+BmloI+1292zSl14wdlKeZpHOT/kca6ZmH
JaINy5FBpMPfrT7FepGosWo9BA+jmk0nG/5YW2RK9qp9SsU2tWdqv3DftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEyf+hcOqoBWvCa/t0gwdhGMdxYMB8GA1UdIwQY
MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt
NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl
LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbNmhv0x
X0PajudTAGnnuYk9NfLhphaRhqw4dw3mLNqjQt2hDhIEqr/hpnaKqqxAG1cnIV/B
+IRgnYHCal5C5RdiTgi5y0qxQTQ86mO3IoQjvYv4DMCFv+UYKdSK6EMwAqJwLY4h
NudfjNJAMKK5ifCDm0r/LlavhoPc++FrDNwNv8lUQnZGl5ASoBNYWMFMPJT7ezUW
3IDZ1xKKW6B0kkQu/3Nz6Ib0rTH0wrao52UnsFbA0N3cq/M5O+mtcQiwauwazaXH
10X3JQM+sT6zMmZmBVjuybCNg2D0N/el9CXk6qHp8iYvFvI2UVWbVrLE5SE2noSw
3kDl6P1Yd+6qtw==
-----END CERTIFICATE-----