Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File:                     2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier:          JVYyOEtDc3Zq7jMTfsUyoKgiMfovMipp7hIF5jb5MWA=
Subject key identifier:   70:E8:BA:F5:20:38:49:1E:4F:7F:F7:45:A7:B8:D1:D4:7D:5B:00:EF
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer:       /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial:       01962E2AF1DFFD7BED5CF9FEF1D31F92507D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number:          0691
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
                          2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: z46+goRbKk5y/F8ucd8NXwxsj4uzs+KM1aw7fv7VSUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:df:fd:7b:ed:5c:f9:fe:f1:d3:1f:92:50:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=70e8baf52038491e4f7ff745a7b8d1d47d5b00ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:17:04:83:67:e7:9d:c0:66:43:d6:75:50:
                    93:4b:9a:7c:17:2e:98:c6:fe:42:e1:72:04:9a:ed:
                    fa:71:0a:e7:eb:79:b2:b3:35:17:c4:ab:15:87:73:
                    8d:bd:20:fb:5a:cf:ba:ae:eb:15:ea:f6:ba:74:ac:
                    40:7c:3b:2c:9a:26:e5:2b:84:df:4f:30:e6:cd:7d:
                    0f:b3:c1:c2:86:56:59:1b:f1:b7:4b:ad:f8:9a:84:
                    c6:d7:57:de:97:52:0b:02:1f:6c:ef:81:bc:e3:14:
                    ab:b5:34:5c:c8:cd:44:ff:1e:4d:a3:07:fb:28:a8:
                    d2:98:16:41:f6:4c:f0:35:5d:91:1a:b6:75:82:ad:
                    3c:9f:19:37:fc:b3:43:3f:72:64:a4:86:1e:72:20:
                    95:31:dd:4d:08:a4:b0:72:7f:88:8b:11:63:a2:4c:
                    e4:63:11:e0:61:c9:34:87:6b:4a:8a:90:9c:aa:ec:
                    e9:36:0e:63:c6:6b:f2:b0:cb:18:10:b9:bf:ae:2b:
                    0c:3a:fb:3a:b3:db:97:73:31:b5:0f:b8:4c:a2:29:
                    24:8c:98:fc:68:5a:6d:a3:bb:0e:57:6c:bb:8c:d4:
                    00:19:7f:74:52:bf:38:5b:8f:37:d2:1d:a1:13:9f:
                    8d:fb:35:10:08:e4:2d:c2:92:d6:8d:bc:46:90:c8:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:BA:F5:20:38:49:1E:4F:7F:F7:45:A7:B8:D1:D4:7D:5B:00:EF
            X509v3 Authority Key Identifier:
                keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:82:81:7b:3b:ce:4b:b1:a2:81:e4:15:57:36:b4:66:6e:
         8e:00:c2:c9:cf:ab:09:9c:9a:93:1c:35:de:77:c4:2d:c9:c0:
         30:ef:b5:08:07:41:1c:d6:38:88:1f:e9:5b:03:c7:4e:ac:af:
         69:08:76:8f:36:e2:7a:9b:99:f3:8a:9f:8e:30:72:ad:da:0c:
         95:2d:30:3d:36:23:cd:d8:66:ea:d1:5e:f0:33:5f:94:a5:99:
         8b:fe:cf:8d:6d:e8:fd:77:89:43:41:bd:c5:95:df:dc:87:0a:
         a0:23:0b:0c:43:e2:bf:d4:38:f6:62:55:05:b2:1e:9f:87:59:
         8a:69:8a:1f:4a:b8:7d:25:55:ba:52:3d:bc:02:0b:ab:2f:64:
         c6:9a:0c:17:84:da:c7:65:f9:24:d1:22:1a:fe:dc:f1:d4:cd:
         d8:62:18:12:9d:7c:0a:49:ca:3a:07:44:9f:30:96:51:c3:64:
         4d:eb:78:8b:5b:5f:1b:f2:55:bb:d2:14:65:96:d7:bf:41:bc:
         f0:55:d9:8e:38:00:12:52:6c:17:74:a5:20:46:87:f4:c1:22:
         bc:25:4f:8d:66:d3:20:f1:0e:81:9e:eb:67:8d:cd:70:68:8b:
         47:94:e3:2f:64:fd:1a:c6:7a:18:27:b8:fe:89:e4:e7:12:39:
         95:cd:15:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvHf/XvtXPn+8dMfklB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl
YjA0ZGYwHhcNMjUwNDEzMDgwMTI4WhcNMjUwNDE0MDgwMTI4WjAzMTEwLwYDVQQD
Eyg3MGU4YmFmNTIwMzg0OTFlNGY3ZmY3NDVhN2I4ZDFkNDdkNWIwMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsMXBINn553AZkPWdVCTS5p8Fy6Y
xv5C4XIEmu36cQrn63myszUXxKsVh3ONvSD7Ws+6rusV6va6dKxAfDssmiblK4Tf
TzDmzX0Ps8HChlZZG/G3S634moTG11fel1ILAh9s74G84xSrtTRcyM1E/x5Nowf7
KKjSmBZB9kzwNV2RGrZ1gq08nxk3/LNDP3JkpIYeciCVMd1NCKSwcn+IixFjokzk
YxHgYck0h2tKipCcquzpNg5jxmvysMsYELm/risMOvs6s9uXczG1D7hMoikkjJj8
aFpto7sOV2y7jNQAGX90Ur84W4830h2hE5+N+zUQCOQtwpLWjbxGkMjtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDouvUgOEkeT3/3Rae40dR9WwDvMB8GA1UdIwQY
MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt
NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli
LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVGCgXs7
zkuxooHkFVc2tGZujgDCyc+rCZyakxw13nfELcnAMO+1CAdBHNY4iB/pWwPHTqyv
aQh2jzbiepuZ84qfjjByrdoMlS0wPTYjzdhm6tFe8DNflKWZi/7PjW3o/XeJQ0G9
xZXf3IcKoCMLDEPiv9Q49mJVBbIen4dZimmKH0q4fSVVulI9vAILqy9kxpoMF4Ta
x2X5JNEiGv7c8dTN2GIYEp18CknKOgdEnzCWUcNkTet4i1tfG/JVu9IUZZbXv0G8
8FXZjjgAElJsF3SlIEaH9MEivCVPjWbTIPEOgZ7rZ43NcGiLR5TjL2T9GsZ6GCe4
/onk5xI5lc0VgA==
-----END CERTIFICATE-----