Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File:                     U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier:          zs9BEYvFmDKcssGUUpv2lRLkJSZAhz1lDW1hpa3DYh0=
Subject key identifier:   E9:AD:9F:F0:10:97:AA:36:9D:1F:5D:4C:57:C0:A0:EC:AB:18:DC:49
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer:       /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial:       01962E999F348989384EFDCB3C5F7F9D0098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number:          03D0
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
                          2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: 2cuL2bCDTjHIPcFBfFtroR8jkIiZJeV1BMTOVkGeVyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9f:34:89:89:38:4e:fd:cb:3c:5f:7f:9d:00:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=e9ad9ff01097aa369d1f5d4c57c0a0ecab18dc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:49:47:22:3b:e4:eb:ec:e8:ba:0b:b7:91:
                    26:2e:1e:ad:44:38:7d:f5:cc:6a:c0:90:90:a3:91:
                    f5:53:b0:f6:92:7f:9a:49:b8:5f:37:59:c6:0f:42:
                    96:bc:e0:93:9c:d3:03:a1:ef:76:17:f8:24:b8:95:
                    76:26:7f:2c:cd:fe:f1:62:cf:00:ee:02:d6:60:79:
                    25:00:e1:25:68:6f:2e:98:dd:17:85:2b:9e:27:42:
                    3f:5a:75:f9:24:44:3a:80:ce:9c:fd:89:68:d4:17:
                    06:38:4f:1c:f3:e5:2c:a1:71:c8:37:84:bb:5f:63:
                    83:91:54:ff:ab:45:a2:34:95:ea:f8:24:c2:0c:04:
                    26:22:ff:8e:af:78:f5:dd:3d:f3:1c:48:5f:93:43:
                    5e:a9:4a:99:d5:74:af:9c:a3:ca:52:ee:9c:cf:40:
                    23:5a:aa:65:b1:6c:9c:93:2c:40:b3:26:da:10:dd:
                    a4:7e:92:f7:b8:8b:5a:ae:ff:1d:b3:6e:3a:d7:28:
                    d9:0a:ee:c8:71:97:43:5d:3e:c8:00:a9:fe:0e:df:
                    12:c8:de:2e:f8:12:f4:c1:1e:6f:c2:61:42:45:0b:
                    71:2a:fb:9e:a0:c1:a7:12:c2:10:c2:c7:89:d1:c2:
                    49:58:23:8d:e9:d6:f4:9c:76:37:38:18:fd:92:05:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:9F:F0:10:97:AA:36:9D:1F:5D:4C:57:C0:A0:EC:AB:18:DC:49
            X509v3 Authority Key Identifier:
                keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:c4:9c:4a:d3:6c:41:8a:b3:04:fd:fe:1c:5e:63:06:aa:
         0c:f7:ef:bf:31:68:3e:d2:9c:da:b3:b9:85:61:bf:3b:92:67:
         f9:d7:09:94:97:5d:65:1d:27:3e:36:86:c9:13:38:97:be:3a:
         79:0b:df:64:ce:c6:b4:ed:ea:0b:59:3d:ae:2d:9d:5e:f3:63:
         d0:2d:6d:9f:d4:a2:d0:6d:85:92:81:13:3e:98:be:68:ca:da:
         b9:e3:62:42:a2:2b:61:77:1b:95:25:54:3e:9c:87:27:f0:51:
         5c:6c:12:24:9e:26:8b:04:28:44:74:5a:06:6a:2b:d0:aa:3e:
         6b:d0:f4:ff:18:23:66:30:41:06:fe:18:06:d0:29:1a:10:4a:
         1d:62:ed:df:1f:fa:4c:7a:47:af:9e:28:bf:d0:b4:94:31:9f:
         bd:a4:42:bd:ce:a8:83:9c:5e:b9:8f:dc:43:b5:47:8d:bb:59:
         8f:9c:f4:18:98:5d:e7:d2:79:10:4d:21:08:0c:ee:a3:34:90:
         52:5d:a0:b0:a4:95:18:80:b6:21:e9:fd:37:1e:ac:dc:00:8b:
         1e:fc:64:19:45:94:09:e3:36:0f:18:a3:1f:db:d6:a2:16:28:
         ab:23:40:68:9d:f5:47:ec:68:4b:ce:d3:86:0c:7d:9f:82:a6:
         9b:1c:c4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZ80iYk4Tv3LPF9/nQCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4
MTUxNTcwHhcNMjUwNDEzMTAwMjIxWhcNMjUwNDE0MTAwMjIxWjAzMTEwLwYDVQQD
EyhlOWFkOWZmMDEwOTdhYTM2OWQxZjVkNGM1N2MwYTBlY2FiMThkYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZdJRyI75Ovs6LoLt5EmLh6tRDh9
9cxqwJCQo5H1U7D2kn+aSbhfN1nGD0KWvOCTnNMDoe92F/gkuJV2Jn8szf7xYs8A
7gLWYHklAOElaG8umN0XhSueJ0I/WnX5JEQ6gM6c/Ylo1BcGOE8c8+UsoXHIN4S7
X2ODkVT/q0WiNJXq+CTCDAQmIv+Or3j13T3zHEhfk0NeqUqZ1XSvnKPKUu6cz0Aj
WqplsWyckyxAsybaEN2kfpL3uItarv8ds2461yjZCu7IcZdDXT7IAKn+Dt8SyN4u
+BL0wR5vwmFCRQtxKvueoMGnEsIQwseJ0cJJWCON6db0nHY3OBj9kgXO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmtn/AQl6o2nR9dTFfAoOyrGNxJMB8GA1UdIwQY
MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt
MzM4ODE0NjdhYzVlLzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl
LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHzEnErT
bEGKswT9/hxeYwaqDPfvvzFoPtKc2rO5hWG/O5Jn+dcJlJddZR0nPjaGyRM4l746
eQvfZM7GtO3qC1k9ri2dXvNj0C1tn9Si0G2FkoETPpi+aMraueNiQqIrYXcblSVU
PpyHJ/BRXGwSJJ4miwQoRHRaBmor0Ko+a9D0/xgjZjBBBv4YBtApGhBKHWLt3x/6
THpHr54ov9C0lDGfvaRCvc6og5xeuY/cQ7VHjbtZj5z0GJhd59J5EE0hCAzuozSQ
Ul2gsKSVGIC2Ien9Nx6s3ACLHvxkGUWUCeM2DxijH9vWohYoqyNAaJ31R+xoS87T
hgx9n4KmmxzEYQ==
-----END CERTIFICATE-----