Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File:                     A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier:          Mpc95g9SbcCf9lWM9bWY6lyX/h/W9Xzk0Zx2xhhNFI8=
Subject key identifier:   C1:C8:0F:A0:E7:77:A2:73:67:95:49:25:37:EE:0C:9F:3C:CB:B6:87
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer:       /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial:       01962F06C947C47FDAD6510AEF71D9C22C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: xsiPXRPgh4hNmY1QqZgm9v7eR9Pq9oD0G6CuChHcYxc=)
                          2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:47:c4:7f:da:d6:51:0a:ef:71:d9:c2:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=c1c80fa0e777a2736795492537ee0c9f3ccbb687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:2a:3f:a5:3e:f1:db:19:12:d7:29:f9:81:
                    e8:23:b3:74:f0:f4:57:7e:0a:6b:53:c4:7d:3c:eb:
                    62:37:59:9d:45:39:8c:c7:2e:1e:78:08:e3:54:df:
                    b8:08:47:ff:ba:96:ba:11:32:77:3f:74:a2:d6:4e:
                    7c:3d:f6:ef:c3:ea:ac:fa:56:fa:ce:69:3d:2b:a6:
                    11:83:27:bd:be:55:7c:80:ea:fa:d8:08:eb:99:16:
                    55:56:8c:bb:a0:39:89:39:31:ea:57:29:57:da:a4:
                    a5:89:39:3d:54:84:3b:1e:74:55:d4:b6:4b:2c:ef:
                    6e:31:9f:26:86:c3:58:b4:77:a7:87:e3:0c:5d:a2:
                    30:25:3b:15:77:9e:43:36:74:66:a1:c7:0e:23:eb:
                    70:44:28:e2:78:fd:41:4f:f3:14:97:3c:e4:94:0b:
                    79:8d:b1:17:50:35:39:11:e4:72:2f:94:b7:91:7f:
                    a5:2e:15:36:06:53:7a:69:d4:c6:de:60:2b:c5:ed:
                    b5:5a:b7:b5:aa:ea:05:9c:1a:dd:1a:75:34:a3:c1:
                    90:f0:6a:f3:78:40:6f:59:14:0c:0b:71:01:0c:03:
                    f1:f7:e7:b3:9b:ce:f9:8c:44:3a:4d:ed:b9:0c:1e:
                    10:3c:d2:1e:ab:06:90:f4:da:a2:d1:f3:61:f9:d9:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C8:0F:A0:E7:77:A2:73:67:95:49:25:37:EE:0C:9F:3C:CB:B6:87
            X509v3 Authority Key Identifier:
                keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:6b:e2:a4:62:35:f9:f7:90:af:7f:34:24:44:d1:2b:33:
         03:e6:3b:4d:ff:1e:97:20:52:9f:b9:1e:c4:37:1d:e4:4e:30:
         b8:f7:a7:a4:68:dd:65:36:14:17:d1:3e:b5:79:71:e3:36:98:
         0b:20:9d:23:12:60:fa:f1:60:f8:1a:78:e8:1c:84:d6:5d:fd:
         44:76:80:85:bc:86:b5:3b:6a:b1:9d:90:bd:97:ab:ff:4e:0e:
         bb:73:cc:fb:0f:80:33:4f:17:65:df:cb:c5:dc:fb:8a:d7:69:
         d7:22:76:a2:e1:00:93:35:13:b9:0e:d3:6f:2e:78:14:ee:17:
         bf:2e:61:da:cc:9a:ed:54:e8:99:19:fa:63:f0:10:23:6d:88:
         06:cb:77:71:d1:53:bf:82:b2:a5:d2:e4:38:9a:c0:e6:30:0c:
         b7:38:87:55:99:47:c3:fc:4d:16:88:bd:39:80:61:3e:68:f1:
         dc:a2:fd:7b:f2:1e:92:a6:a1:66:0a:88:e9:0a:a1:35:ef:3c:
         2a:b9:2d:6e:c7:50:11:f6:09:58:7f:cf:1a:38:f8:5a:6d:8a:
         54:99:d7:72:9d:ae:91:e1:63:f5:07:53:d8:5b:dc:d4:78:31:
         71:82:f5:37:f0:c9:cd:bd:99:9d:c6:9d:79:a6:27:4d:0f:18:
         b9:f2:e7:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBslHxH/a1lEK73HZwiwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNWU1Mjg1ZGVkYzM1YWI2MzUyNzA0OGIzNjZlZTU1Mzgw
NmNlMDQwHhcNMjUwNDEzMTIwMTM1WhcNMjUwNDE0MTIwMTM1WjAzMTEwLwYDVQQD
EyhjMWM4MGZhMGU3NzdhMjczNjc5NTQ5MjUzN2VlMGM5ZjNjY2JiNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsqP6U+8dsZEtcp+YHoI7N08PRX
fgprU8R9POtiN1mdRTmMxy4eeAjjVN+4CEf/upa6ETJ3P3Si1k58Pfbvw+qs+lb6
zmk9K6YRgye9vlV8gOr62AjrmRZVVoy7oDmJOTHqVylX2qSliTk9VIQ7HnRV1LZL
LO9uMZ8mhsNYtHenh+MMXaIwJTsVd55DNnRmoccOI+twRCjieP1BT/MUlzzklAt5
jbEXUDU5EeRyL5S3kX+lLhU2BlN6adTG3mArxe21Wre1quoFnBrdGnU0o8GQ8Grz
eEBvWRQMC3EBDAPx9+ezm875jEQ6Te25DB4QPNIeqwaQ9Nqi0fNh+dmYrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHID6Dnd6JzZ5VJJTfuDJ88y7aHMB8GA1UdIwQY
MBaAFANeUoXe3DWrY1JwSLNm7lU4Bs4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmIt
MmMyNzA3NzM2ZmRiLzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmItMmMyNzA3NzM2ZmRi
LzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdadr4qRi
Nfn3kK9/NCRE0SszA+Y7Tf8elyBSn7kexDcd5E4wuPenpGjdZTYUF9E+tXlx4zaY
CyCdIxJg+vFg+Bp46ByE1l39RHaAhbyGtTtqsZ2QvZer/04Ou3PM+w+AM08XZd/L
xdz7itdp1yJ2ouEAkzUTuQ7Tby54FO4Xvy5h2sya7VTomRn6Y/AQI22IBst3cdFT
v4KypdLkOJrA5jAMtziHVZlHw/xNFoi9OYBhPmjx3KL9e/IekqahZgqI6QqhNe88
KrktbsdQEfYJWH/PGjj4Wm2KVJnXcp2ukeFj9QdT2Fvc1HgxcYL1N/DJzb2Zncad
eaYnTQ8YufLngQ==
-----END CERTIFICATE-----