Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
File:                     Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft (raw, json)
Hash identifier:          zyiYSf1NEwi8pbCQwuXx/p6On61tLbn+LloyyUxMOSE=
Subject key identifier:   A0:5B:85:5B:A1:74:5E:76:28:04:04:9B:D0:3A:C3:11:9F:82:0C:DD
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Certificate issuer:       /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial:       01962ECF4F17EDF0B1BF241835E8CD1BFDD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl (hash: 3MF7Kgbiy6pHRaEqNk+SlOayEIjS3jVE2vtjmKnWxlY=)
                          2: mN2qB1BO4S5r9HWkXJU36eJQAJo.roa (hash: CEQM9W3lMs7LPoWAqhYjN1IkeHCfM/C5tJypbGgHYt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:17:ed:f0:b1:bf:24:18:35:e8:cd:1b:fd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=a05b855ba1745e762804049bd03ac3119f820cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:fc:42:aa:95:5d:5c:8d:31:c0:5f:7e:5c:
                    71:86:4c:7a:53:46:4a:1c:09:c9:47:53:ef:cb:6f:
                    59:0a:41:29:fe:e9:ef:14:b1:bf:13:6c:c5:c7:6c:
                    b4:85:1e:d8:fc:53:2c:28:3e:6d:b4:6f:b4:fe:66:
                    81:82:dc:39:a4:31:81:6f:22:a5:d5:8c:8b:37:55:
                    e1:b6:21:6a:8c:69:4b:19:a8:ec:46:6b:d4:95:01:
                    9c:62:d9:6f:53:e4:20:f6:f1:16:de:9b:ff:c7:22:
                    2f:ac:82:b6:1c:19:28:d4:47:e6:6b:b5:d7:4a:b9:
                    3c:77:7c:6a:87:27:2a:45:89:53:12:02:eb:7d:d5:
                    3c:53:42:c2:a1:cd:a1:64:75:01:25:3d:48:8a:d7:
                    7a:8d:60:f6:0a:ee:43:c1:23:b3:36:60:9f:b9:fd:
                    b7:e1:da:45:ad:08:5f:ca:bb:43:0e:bc:8d:cc:f1:
                    83:17:db:e0:1c:3b:89:0c:4f:3e:e0:34:eb:69:98:
                    ff:09:fc:01:ca:e9:c0:4a:33:b2:c8:5c:a4:26:db:
                    5d:17:57:ec:dd:dc:c6:30:c1:a4:27:e1:97:ba:39:
                    69:05:80:d3:91:87:a4:34:c4:09:1e:a1:8e:b7:26:
                    83:4c:34:f8:ef:50:e8:36:80:c4:27:ea:2f:7a:6b:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5B:85:5B:A1:74:5E:76:28:04:04:9B:D0:3A:C3:11:9F:82:0C:DD
            X509v3 Authority Key Identifier:
                keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ec:88:82:b4:ec:b6:53:f1:0e:3d:68:34:f0:fe:de:a0:4a:
         5e:ca:84:87:a9:fe:54:76:4f:85:f4:38:86:00:75:26:82:82:
         c8:8f:cc:03:f1:94:16:ce:54:fa:34:a6:2a:1b:a4:01:40:e1:
         e6:03:68:e5:cc:fa:69:e7:ce:65:4a:bb:f9:55:ed:24:0e:d1:
         15:dd:ef:1e:df:eb:ee:96:f3:77:b6:66:18:a5:5c:94:1b:cc:
         b4:59:73:5f:bb:3f:a3:81:08:5a:8d:e0:64:fa:23:2a:ec:c2:
         e3:6e:30:a2:c2:47:13:f4:68:55:6b:0a:65:8c:f2:73:22:ae:
         bb:34:5c:df:49:9e:79:c3:a4:01:ae:9d:96:06:99:6a:88:c5:
         f6:de:d9:97:0c:d0:10:ae:dd:30:97:fe:79:95:99:f9:fb:4b:
         ff:8f:09:57:fb:eb:1b:61:79:8e:95:6d:e6:16:65:0d:04:ae:
         89:8d:57:4d:d1:5a:2f:3a:69:d4:10:1e:d8:a0:6b:04:fa:91:
         38:1f:39:c4:1b:3e:6b:9f:f3:c5:92:ff:e2:92:a3:81:00:fe:
         cd:6d:0a:94:fe:a8:be:22:b9:1d:d1:c1:e6:6e:a1:cb:9e:2c:
         ed:43:4b:e8:af:1e:b2:36:5d:4c:f3:ae:46:bb:6a:97:0c:d5:
         e1:d9:7a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz08X7fCxvyQYNejNG/3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMWQyMGJlNzdlMTIyMzIzMjNjMTQyMmZiNTE5OGZlYTAw
ODYwMzQwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EyhhMDViODU1YmExNzQ1ZTc2MjgwNDA0OWJkMDNhYzMxMTlmODIwY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgP8QqqVXVyNMcBfflxxhkx6U0ZK
HAnJR1Pvy29ZCkEp/unvFLG/E2zFx2y0hR7Y/FMsKD5ttG+0/maBgtw5pDGBbyKl
1YyLN1XhtiFqjGlLGajsRmvUlQGcYtlvU+Qg9vEW3pv/xyIvrIK2HBko1Efma7XX
Srk8d3xqhycqRYlTEgLrfdU8U0LCoc2hZHUBJT1Iitd6jWD2Cu5DwSOzNmCfuf23
4dpFrQhfyrtDDryNzPGDF9vgHDuJDE8+4DTraZj/CfwByunASjOyyFykJttdF1fs
3dzGMMGkJ+GXujlpBYDTkYekNMQJHqGOtyaDTDT471DoNoDEJ+ovemsh7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBbhVuhdF52KAQEm9A6wxGfggzdMB8GA1UdIwQY
MBaAFEodIL534SIyMjwUIvtRmP6gCGA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjct
ZWQyODg1MWVjYjc2LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjctZWQyODg1MWVjYjc2
LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOyIgrTs
tlPxDj1oNPD+3qBKXsqEh6n+VHZPhfQ4hgB1JoKCyI/MA/GUFs5U+jSmKhukAUDh
5gNo5cz6aefOZUq7+VXtJA7RFd3vHt/r7pbzd7ZmGKVclBvMtFlzX7s/o4EIWo3g
ZPojKuzC424wosJHE/RoVWsKZYzycyKuuzRc30meecOkAa6dlgaZaojF9t7ZlwzQ
EK7dMJf+eZWZ+ftL/48JV/vrG2F5jpVt5hZlDQSuiY1XTdFaLzpp1BAe2KBrBPqR
OB85xBs+a5/zxZL/4pKjgQD+zW0KlP6oviK5HdHB5m6hy54s7UNL6K8esjZdTPOu
RrtqlwzV4dl61A==
-----END CERTIFICATE-----