Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File:                     I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier:          tvsjZGtN5ahZm9o6frleqK1FD04S31GIFG/0YGiadys=
Subject key identifier:   C9:59:1C:21:5E:2A:F6:05:A8:B0:5E:89:90:2B:D7:85:CC:89:81:03
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer:       /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial:       01962F3D61468B932C17AEAAB52F7A082283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number:          ED
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: JUsww+wqGSLjIIlzQLE5F1Lfnr3Nzm1ilU7mSgj1KTQ=)
                          2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
                          3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:61:46:8b:93:2c:17:ae:aa:b5:2f:7a:08:22:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=c9591c215e2af605a8b05e89902bd785cc898103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:e7:e2:bc:57:28:34:8b:be:a7:a8:31:e1:
                    af:1c:83:1b:37:30:5a:08:03:ff:8b:17:83:e8:bf:
                    87:f8:f6:04:5e:3e:f1:14:47:27:2d:2c:95:5f:99:
                    ff:04:40:26:12:fb:fc:8a:82:ef:a8:83:5d:bc:52:
                    6b:67:15:e0:e5:5d:e3:e5:a5:af:53:71:e8:5f:d8:
                    9e:9e:6f:15:28:1e:b2:96:6d:bb:28:0c:ab:55:9b:
                    52:cc:70:6c:54:9a:25:72:8e:89:f6:4f:40:58:49:
                    8b:81:4a:1a:b9:11:a0:c9:cc:8a:ae:b9:83:22:0a:
                    08:67:36:2a:5b:69:4d:31:d5:bf:d7:4f:53:03:38:
                    2b:ab:1a:77:df:6b:a5:68:bc:e5:ab:c1:71:a0:84:
                    ad:18:9f:1d:90:81:9e:af:c7:ec:a0:0a:e1:78:b5:
                    c4:b0:1b:a0:b1:5b:78:b9:c0:85:63:2f:0f:6c:3f:
                    88:e3:8d:48:a7:0d:c9:7c:e3:cc:d7:22:f7:f0:32:
                    8a:b9:06:57:29:2b:2e:17:02:71:9f:2f:d2:6d:03:
                    62:9d:99:03:3d:e4:a2:09:df:f1:1f:76:03:49:6d:
                    40:5e:11:cd:ac:82:72:30:d9:32:06:93:81:12:fc:
                    6f:88:5f:fb:de:fc:61:fe:10:4d:c4:6f:bf:f8:e9:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:1C:21:5E:2A:F6:05:A8:B0:5E:89:90:2B:D7:85:CC:89:81:03
            X509v3 Authority Key Identifier:
                keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4c:fe:50:91:87:eb:42:6c:26:0d:ae:8c:63:48:47:fb:50:
         f2:63:50:2e:cc:81:95:88:85:01:e7:5d:ff:b4:96:74:a7:36:
         fa:2c:16:fb:81:0a:6b:23:d7:5e:c1:9e:a5:4d:46:68:55:35:
         32:dd:72:94:3e:45:5f:42:5d:6b:75:d5:df:8f:b9:1e:23:e9:
         c8:8d:a7:37:dd:8f:eb:af:17:e7:70:b3:64:76:6d:a3:c6:b6:
         de:75:2f:96:48:9d:89:71:b0:ab:84:d7:97:dd:c4:85:94:b0:
         d4:e9:e0:43:7d:30:f8:bc:ca:0d:2e:63:27:8a:2f:c9:b6:bd:
         cd:8c:0f:c1:8d:2e:e2:17:d1:66:58:a5:79:ca:e6:16:44:57:
         51:eb:e1:f0:17:90:75:3e:c8:82:9c:90:cb:bc:e5:04:79:e5:
         44:d6:2c:9f:62:a4:3d:8d:9b:f6:54:5c:0b:4c:b8:11:4c:6a:
         a8:13:9b:56:66:3f:45:79:22:ed:ef:64:28:04:d6:59:62:4a:
         2e:52:9d:f1:d0:8f:34:2b:1c:11:86:cc:74:2e:60:f7:8e:bd:
         e8:a5:d8:04:07:a7:78:00:d3:27:a9:65:ce:7a:db:c0:6b:e1:
         63:36:d1:7c:2f:ad:9b:bd:d1:86:27:dd:69:a5:25:45:a9:50:
         0c:43:ce:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWFGi5MsF66qtS96CCKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjA3MTA1OTU1Yzc2NGE4MTNmZDk1MjRhN2U0MWI5NDBj
NTY4MzIwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
EyhjOTU5MWMyMTVlMmFmNjA1YThiMDVlODk5MDJiZDc4NWNjODk4MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOnn4rxXKDSLvqeoMeGvHIMbNzBa
CAP/ixeD6L+H+PYEXj7xFEcnLSyVX5n/BEAmEvv8ioLvqINdvFJrZxXg5V3j5aWv
U3HoX9ienm8VKB6ylm27KAyrVZtSzHBsVJolco6J9k9AWEmLgUoauRGgycyKrrmD
IgoIZzYqW2lNMdW/109TAzgrqxp332ulaLzlq8FxoIStGJ8dkIGer8fsoArheLXE
sBugsVt4ucCFYy8PbD+I441Ipw3JfOPM1yL38DKKuQZXKSsuFwJxny/SbQNinZkD
PeSiCd/xH3YDSW1AXhHNrIJyMNkyBpOBEvxviF/73vxh/hBNxG+/+OmjJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlZHCFeKvYFqLBeiZAr14XMiYEDMB8GA1UdIwQY
MBaAFCNgcQWVXHZKgT/ZUkp+QblAxWgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTkt
NDg0NzBmNjlkNzlkLzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTktNDg0NzBmNjlkNzlk
LzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkz+UJGH
60JsJg2ujGNIR/tQ8mNQLsyBlYiFAedd/7SWdKc2+iwW+4EKayPXXsGepU1GaFU1
Mt1ylD5FX0Jda3XV34+5HiPpyI2nN92P668X53CzZHZto8a23nUvlkidiXGwq4TX
l93EhZSw1OngQ30w+LzKDS5jJ4ovyba9zYwPwY0u4hfRZlilecrmFkRXUevh8BeQ
dT7IgpyQy7zlBHnlRNYsn2KkPY2b9lRcC0y4EUxqqBObVmY/RXki7e9kKATWWWJK
LlKd8dCPNCscEYbMdC5g94696KXYBAeneADTJ6llznrbwGvhYzbRfC+tm73Rhifd
aaUlRalQDEPOkw==
-----END CERTIFICATE-----