Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File:                     FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier:          0s688EqlvZnofg8Eav/DeGRwtusu12Rbi/Hu+Kktme4=
Subject key identifier:   77:0B:75:F5:96:5B:97:1D:57:0B:4E:FE:AC:FF:11:53:1D:E7:80:10
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer:       /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial:       01962E993C9A6B0D5AF0056F97EE1371D28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number:          126C
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: lZy7dWlkyIWkvPYgu1A1WaZM3+vtmyhvx0h7VDT14Yk=)
                          2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:9a:6b:0d:5a:f0:05:6f:97:ee:13:71:d2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=770b75f5965b971d570b4efeacff11531de78010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:57:73:a1:9d:13:16:92:9a:24:f9:bb:16:
                    30:b1:57:1b:9f:69:a1:20:31:b6:1e:79:c9:fd:ea:
                    2c:5b:ed:cb:54:cb:e8:27:b4:ed:27:b5:5c:03:58:
                    7d:1e:2c:87:ab:07:bc:5f:52:f7:f3:d5:44:1b:53:
                    29:6e:d4:7a:3c:e7:44:5e:13:06:e3:f0:15:41:98:
                    1a:02:69:e3:ce:03:29:4f:c7:86:15:5a:e9:7d:6a:
                    f9:03:83:db:cf:17:37:e8:a6:95:d0:a1:2d:70:53:
                    13:44:97:4a:65:50:bd:f4:de:04:ba:01:95:da:ae:
                    12:ac:11:c7:d5:f8:b0:18:a9:07:18:8f:eb:a8:91:
                    e1:38:eb:14:6c:22:31:06:4e:fd:41:ef:92:e5:39:
                    0f:6b:70:6e:a8:1d:3f:e8:77:5c:fd:fc:52:f4:7d:
                    71:ce:6d:21:f4:dd:6d:4b:d1:58:6e:cc:07:84:35:
                    8e:c3:07:fe:dc:2a:80:f8:54:34:ef:d6:78:60:9f:
                    6d:a4:ea:f8:6f:c8:59:07:f4:39:cc:dc:02:c5:3a:
                    65:9b:8d:ed:3d:cc:8a:72:1a:3c:a1:42:23:79:57:
                    1a:3f:d5:4f:5a:f4:03:5e:66:1a:66:63:d4:92:a2:
                    0e:58:f2:bd:f6:51:3c:0d:01:b7:2e:2b:ae:bd:dd:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:75:F5:96:5B:97:1D:57:0B:4E:FE:AC:FF:11:53:1D:E7:80:10
            X509v3 Authority Key Identifier:
                keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:6d:c7:88:59:1d:a3:f5:f1:a3:1a:22:88:a8:9b:03:22:
         99:55:2c:72:32:ce:db:1e:5f:6a:fc:b0:00:57:9d:a0:70:9b:
         f2:83:f1:9b:f6:65:55:26:be:32:4b:6a:48:17:57:75:a4:f0:
         cf:c5:7d:3e:cd:09:63:46:2d:b4:ca:b1:2c:f0:b1:5a:18:16:
         ec:18:d8:a3:86:e5:20:a0:19:b5:91:5c:d2:78:df:0e:8b:ac:
         91:37:af:78:d5:bd:6f:4b:aa:9a:fb:0d:f0:a8:53:6e:d1:42:
         0f:f4:52:07:fc:1e:62:1c:69:a7:08:b6:66:89:2d:99:83:af:
         77:c8:a7:0f:bb:55:50:a6:ec:22:b1:d7:3f:3a:8d:37:88:6e:
         cf:95:b3:bc:88:73:0f:aa:72:45:6c:14:c3:2b:27:ab:7d:2a:
         b1:c3:e2:ea:e0:fc:a1:71:85:66:e3:68:01:92:f2:00:c4:2f:
         ef:c6:fc:a8:99:3b:93:90:c7:86:9f:6e:e9:2b:8b:8e:b4:c0:
         c9:36:37:7e:54:85:cd:e8:9b:c6:c4:19:b8:02:3e:09:45:2a:
         11:df:22:9f:1a:a8:d5:47:29:62:78:1d:fb:3c:f4:ed:6b:ed:
         a0:f3:de:77:61:54:2b:a9:4c:8b:4c:22:5a:f9:56:30:df:e3:
         4d:d2:79:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTyaaw1a8AVvl+4TcdKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTBmYzE3MzgyZGQ2MDY2YTM4ZTQyM2JhZGIyZDhhMThk
MWMwNDUwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
Eyg3NzBiNzVmNTk2NWI5NzFkNTcwYjRlZmVhY2ZmMTE1MzFkZTc4MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPpXc6GdExaSmiT5uxYwsVcbn2mh
IDG2HnnJ/eosW+3LVMvoJ7TtJ7VcA1h9HiyHqwe8X1L389VEG1MpbtR6POdEXhMG
4/AVQZgaAmnjzgMpT8eGFVrpfWr5A4Pbzxc36KaV0KEtcFMTRJdKZVC99N4EugGV
2q4SrBHH1fiwGKkHGI/rqJHhOOsUbCIxBk79Qe+S5TkPa3BuqB0/6Hdc/fxS9H1x
zm0h9N1tS9FYbswHhDWOwwf+3CqA+FQ079Z4YJ9tpOr4b8hZB/Q5zNwCxTplm43t
PcyKcho8oUIjeVcaP9VPWvQDXmYaZmPUkqIOWPK99lE8DQG3Liuuvd2WHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcLdfWWW5cdVwtO/qz/EVMd54AQMB8GA1UdIwQY
MBaAFBSQ/Bc4LdYGajjkI7rbLYoY0cBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUt
NTU2Y2MyZTA3MWRjLzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUtNTU2Y2MyZTA3MWRj
LzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxptx4hZ
HaP18aMaIoiomwMimVUscjLO2x5favywAFedoHCb8oPxm/ZlVSa+MktqSBdXdaTw
z8V9Ps0JY0YttMqxLPCxWhgW7BjYo4blIKAZtZFc0njfDouskTeveNW9b0uqmvsN
8KhTbtFCD/RSB/weYhxppwi2ZoktmYOvd8inD7tVUKbsIrHXPzqNN4huz5WzvIhz
D6pyRWwUwysnq30qscPi6uD8oXGFZuNoAZLyAMQv78b8qJk7k5DHhp9u6SuLjrTA
yTY3flSFzeibxsQZuAI+CUUqEd8inxqo1UcpYngd+zz07WvtoPPed2FUK6lMi0wi
WvlWMN/jTdJ5GA==
-----END CERTIFICATE-----