Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File:                     tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier:          0U30RWeRuWCSZ5Nna1nlyBcP4lvaB6qDy/clmENck2I=
Subject key identifier:   25:49:1C:CB:04:59:5B:52:B8:90:C6:E6:46:5C:3A:2F:6E:DA:9C:17
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer:       /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial:       01962E61BEE9A820A0E4B317C16A9C6F229B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number:          07DD
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: KEs+Tu4lJH/atWRtixkSQLQwkFT9nsBVnaI0bQwjrrU=)
                          2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:be:e9:a8:20:a0:e4:b3:17:c1:6a:9c:6f:22:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=25491ccb04595b52b890c6e6465c3a2f6eda9c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:0d:e1:33:5f:65:02:d0:e4:97:58:b6:56:
                    67:55:52:1f:58:ae:4c:86:5e:0d:c3:86:49:83:ea:
                    aa:55:fd:e9:23:e5:bb:b2:f4:79:b9:db:72:e0:89:
                    6f:e7:9f:ab:5e:89:f0:a5:88:ef:64:be:e9:69:4e:
                    b6:d0:3b:cb:26:97:14:77:e4:76:f6:2f:2e:21:2c:
                    31:8f:e0:48:b6:b6:f9:fb:0f:a1:da:41:87:b7:8a:
                    6f:9a:a5:ea:df:c4:fd:55:59:6b:9b:d5:27:b4:30:
                    26:80:33:cc:61:15:55:f2:cd:fc:03:46:4a:74:1a:
                    bb:dc:94:8b:7d:b0:06:5c:f9:86:7f:5f:c2:9e:cb:
                    bf:e9:0e:71:ba:25:2f:22:c3:34:a6:e0:1b:fe:dc:
                    c2:97:06:19:3a:38:55:af:2c:74:7e:25:b0:39:67:
                    b9:28:41:b6:c9:4a:4b:12:fb:d1:4f:d4:f0:3e:e1:
                    8d:1f:bd:4a:e0:0b:01:23:b8:68:27:33:e3:f8:b6:
                    54:34:89:fe:59:e8:6f:4f:f5:9c:c6:ce:0a:98:d3:
                    fb:42:61:4c:02:82:80:52:d6:7f:65:ab:9f:31:b0:
                    30:2b:65:f6:89:0a:0a:1c:14:87:fe:86:82:85:c9:
                    7a:04:48:3e:5c:9f:3e:e7:e3:e1:13:90:84:bc:c8:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:1C:CB:04:59:5B:52:B8:90:C6:E6:46:5C:3A:2F:6E:DA:9C:17
            X509v3 Authority Key Identifier:
                keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:79:da:62:8c:0b:4f:05:b2:fc:27:da:c0:a1:ba:28:12:
         0a:2d:e9:b6:70:00:10:2c:f5:ca:c5:ea:b3:82:0c:52:ea:29:
         f8:2c:99:e3:9b:cb:84:82:4a:e1:17:ff:87:b2:55:f0:c5:af:
         1c:44:d2:e9:77:f7:a3:9c:82:8e:0f:28:b0:d8:86:4b:da:cf:
         84:2e:79:d8:af:05:9f:28:19:b7:78:a0:fd:83:40:47:42:f1:
         f7:a2:73:b5:65:b3:72:db:5b:ad:ba:e0:b6:04:cd:d9:1b:6a:
         cd:3f:69:0d:44:5d:26:1b:51:87:96:cd:a3:09:7d:c2:96:af:
         c7:fe:02:f9:24:1b:27:f4:f8:5d:11:84:2e:22:ab:76:19:63:
         99:9b:ec:cc:ba:b2:2f:e2:f2:51:ba:51:f9:a7:c3:fd:e6:7d:
         8c:c3:ac:ad:95:b8:cd:9e:35:02:f0:ab:ae:30:79:b9:17:a4:
         a6:ff:b2:5b:cf:93:e7:de:ac:b4:bf:a2:40:f7:1c:70:2a:87:
         4f:38:29:34:06:09:77:42:9f:75:de:80:04:ee:52:d8:44:90:
         b2:e9:69:0d:d3:7d:1f:e4:69:70:3c:6b:49:be:65:03:5f:47:
         aa:f8:aa:80:1a:5f:7d:11:26:ce:c1:cc:53:e1:1d:aa:8c:03:
         6d:0f:72:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb7pqCCg5LMXwWqcbyKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjUwNDEzMDkwMTE5WhcNMjUwNDE0MDkwMTE5WjAzMTEwLwYDVQQD
EygyNTQ5MWNjYjA0NTk1YjUyYjg5MGM2ZTY0NjVjM2EyZjZlZGE5YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4AN4TNfZQLQ5JdYtlZnVVIfWK5M
hl4Nw4ZJg+qqVf3pI+W7svR5udty4Ilv55+rXonwpYjvZL7paU620DvLJpcUd+R2
9i8uISwxj+BItrb5+w+h2kGHt4pvmqXq38T9VVlrm9UntDAmgDPMYRVV8s38A0ZK
dBq73JSLfbAGXPmGf1/Cnsu/6Q5xuiUvIsM0puAb/tzClwYZOjhVryx0fiWwOWe5
KEG2yUpLEvvRT9TwPuGNH71K4AsBI7hoJzPj+LZUNIn+WehvT/Wcxs4KmNP7QmFM
AoKAUtZ/ZaufMbAwK2X2iQoKHBSH/oaChcl6BEg+XJ8+5+PhE5CEvMi/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVJHMsEWVtSuJDG5kZcOi9u2pwXMB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4552mKM
C08Fsvwn2sChuigSCi3ptnAAECz1ysXqs4IMUuop+CyZ45vLhIJK4Rf/h7JV8MWv
HETS6Xf3o5yCjg8osNiGS9rPhC552K8FnygZt3ig/YNAR0Lx96JztWWzcttbrbrg
tgTN2RtqzT9pDURdJhtRh5bNowl9wpavx/4C+SQbJ/T4XRGELiKrdhljmZvszLqy
L+LyUbpR+afD/eZ9jMOsrZW4zZ41AvCrrjB5uRekpv+yW8+T596stL+iQPcccCqH
TzgpNAYJd0Kfdd6ABO5S2ESQsulpDdN9H+RpcDxrSb5lA19HqviqgBpffREmzsHM
U+EdqowDbQ9y4A==
-----END CERTIFICATE-----