Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File:                     55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier:          W/IM2idR1Vtj86nFmWMRIBOMS7LucRYhuPZ8ukFiw1s=
Subject key identifier:   13:2D:10:DD:2E:4E:41:67:0F:86:1F:C4:AE:C3:D9:25:73:3C:48:CA
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer:       /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial:       01962E997AD56705789132A29E3568527671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number:          0FE7
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: N3DmSbFwUl+2gliaN7XJ+y65Qmrjyiw7D7RJuU1vyzw=)
                          2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7a:d5:67:05:78:91:32:a2:9e:35:68:52:76:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=132d10dd2e4e41670f861fc4aec3d925733c48ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:e3:0d:ea:87:6d:a6:b3:dc:1c:92:13:5a:
                    16:9f:d8:2f:0c:b3:1b:fe:92:97:0d:46:f4:d2:e3:
                    f8:88:96:91:5f:fa:ef:9a:08:45:28:5b:a5:42:07:
                    43:32:03:09:09:ff:20:c6:56:db:71:ad:12:31:3e:
                    e9:f9:58:6e:6e:6e:71:50:99:ab:2a:20:37:d0:94:
                    8f:3d:7f:30:35:ba:0f:69:87:db:55:fc:aa:72:f4:
                    fd:48:2c:9e:63:91:3a:ba:0a:ae:19:c9:18:6a:aa:
                    a1:7c:d6:cf:bd:a0:4a:f0:0e:a7:88:1c:a7:aa:4a:
                    ab:5a:30:42:aa:ad:a5:95:e1:ce:92:b0:8c:95:77:
                    0e:53:9c:83:15:7a:8e:4f:42:4b:e8:99:cd:7f:60:
                    c3:57:ee:1d:38:76:52:79:f9:e4:79:9c:2d:7a:ab:
                    d8:ce:91:db:ac:36:39:b2:b6:53:01:e2:94:ff:92:
                    09:57:00:18:ea:05:55:b2:3f:b6:97:09:18:93:6b:
                    87:03:0d:11:ae:3b:6e:27:a1:a9:ba:d8:3f:89:86:
                    94:e2:81:4e:c0:ef:eb:b6:d7:31:e0:7f:61:95:29:
                    53:da:c6:97:c4:cb:ac:15:93:f1:19:d5:5b:34:40:
                    35:d9:78:c3:ea:da:88:a5:57:5f:6e:7d:fc:b5:c8:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:10:DD:2E:4E:41:67:0F:86:1F:C4:AE:C3:D9:25:73:3C:48:CA
            X509v3 Authority Key Identifier:
                keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:22:d5:23:c5:ed:e7:1c:b1:9f:c5:c2:2c:3c:2d:60:5e:9c:
         18:9b:77:5c:60:6d:dd:a2:80:57:3f:5c:f8:e2:d9:16:10:ba:
         64:5f:cb:67:01:33:5c:89:18:18:8f:58:8f:89:03:17:8f:26:
         e0:31:6b:90:37:ee:e0:95:db:e7:86:55:3f:4d:55:ec:85:b9:
         4d:87:21:0c:e7:94:a6:92:38:fe:c7:da:c6:72:99:fe:da:95:
         c6:27:27:93:15:e1:46:5d:b0:5e:c7:ef:c7:6b:bd:68:42:6e:
         c7:47:fa:84:2d:06:b0:fe:75:b3:4e:c7:6b:9f:0a:8b:01:47:
         e1:b5:fa:3d:f8:d2:67:21:e3:b4:9f:4b:46:ff:fe:d1:ff:28:
         fa:87:01:bb:b1:d1:b4:93:05:3e:7f:d3:a7:90:96:fe:4e:f0:
         d2:fe:f0:e6:46:9b:bd:d8:ad:25:03:e0:5c:ce:ba:63:95:5d:
         b5:79:a7:e3:0b:45:2c:30:35:59:7b:ba:f3:b9:a1:ea:07:92:
         94:bd:ca:cf:24:a2:10:ca:71:a7:22:8e:8d:18:7c:f8:e3:e8:
         25:ce:74:24:bc:e5:49:8b:ef:fb:6f:bf:f8:d2:2d:7b:00:1e:
         8a:26:04:0f:a4:ee:f5:c2:00:ad:86:78:f0:3b:39:84:d7:fe:
         35:2c:5a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXrVZwV4kTKinjVoUnZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjUwNDEzMTAwMjEyWhcNMjUwNDE0MTAwMjEyWjAzMTEwLwYDVQQD
EygxMzJkMTBkZDJlNGU0MTY3MGY4NjFmYzRhZWMzZDkyNTczM2M0OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym7jDeqHbaaz3BySE1oWn9gvDLMb
/pKXDUb00uP4iJaRX/rvmghFKFulQgdDMgMJCf8gxlbbca0SMT7p+Vhubm5xUJmr
KiA30JSPPX8wNboPaYfbVfyqcvT9SCyeY5E6ugquGckYaqqhfNbPvaBK8A6niByn
qkqrWjBCqq2lleHOkrCMlXcOU5yDFXqOT0JL6JnNf2DDV+4dOHZSefnkeZwteqvY
zpHbrDY5srZTAeKU/5IJVwAY6gVVsj+2lwkYk2uHAw0RrjtuJ6Gputg/iYaU4oFO
wO/rttcx4H9hlSlT2saXxMusFZPxGdVbNEA12XjD6tqIpVdfbn38tchRSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMtEN0uTkFnD4YfxK7D2SVzPEjKMB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICLVI8Xt
5xyxn8XCLDwtYF6cGJt3XGBt3aKAVz9c+OLZFhC6ZF/LZwEzXIkYGI9Yj4kDF48m
4DFrkDfu4JXb54ZVP01V7IW5TYchDOeUppI4/sfaxnKZ/tqVxicnkxXhRl2wXsfv
x2u9aEJux0f6hC0GsP51s07Ha58KiwFH4bX6PfjSZyHjtJ9LRv/+0f8o+ocBu7HR
tJMFPn/Tp5CW/k7w0v7w5kabvditJQPgXM66Y5VdtXmn4wtFLDA1WXu687mh6geS
lL3KzySiEMpxpyKOjRh8+OPoJc50JLzlSYvv+2+/+NItewAeiiYED6Tu9cIArYZ4
8Ds5hNf+NSxajg==
-----END CERTIFICATE-----