Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File:                     0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier:          kdrfQ0+jp5as9qfIEVCVRnPSveLku9xMVzRl0oESX54=
Subject key identifier:   07:C8:1A:53:93:F1:59:4A:5F:50:4A:92:44:EB:A5:7D:74:02:25:D2
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer:       /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial:       01962ECF8D546D8DD6EEA8ECA54BD0B48318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: rYqhkkN9xz7IMFHIWfVGfm/iXvROU4m4VyIV1RYBtYI=)
                          2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8d:54:6d:8d:d6:ee:a8:ec:a5:4b:d0:b4:83:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=07c81a5393f1594a5f504a9244eba57d740225d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:02:5d:51:28:48:0f:29:80:4b:3a:6a:1d:
                    28:a0:83:c1:e2:38:cf:44:43:19:d9:e6:1d:68:c7:
                    0f:19:e3:03:29:f5:b9:c4:0e:12:0b:7a:b3:e0:85:
                    a0:be:33:ca:cc:34:3e:88:b9:ef:cb:1a:0e:96:2e:
                    9b:ad:83:77:f7:e2:34:f4:ef:74:99:9e:b8:61:36:
                    d3:0c:2c:8d:24:55:57:63:d3:bf:00:61:42:3e:9e:
                    c2:3c:3d:6f:35:bf:71:f3:93:0b:52:59:2b:d2:8d:
                    0e:dc:9a:7a:f7:df:44:4e:45:c0:1f:dc:76:64:24:
                    a6:95:38:44:af:72:a8:92:28:3d:6c:1b:9f:a4:56:
                    f7:58:6c:9b:5d:fc:53:0b:03:08:89:7b:0f:72:05:
                    20:23:9a:45:bd:e2:74:32:c8:8c:a1:4d:d5:2f:5f:
                    0c:40:33:6f:32:46:73:de:68:6a:7f:82:b9:17:a4:
                    3f:41:60:59:60:eb:30:22:3e:1f:a0:7a:d9:38:7d:
                    c6:c1:b2:dc:5a:93:25:b8:37:59:4c:b7:f9:da:ff:
                    df:58:62:eb:d2:a6:02:b3:d7:97:45:02:0a:4c:6a:
                    48:6e:c7:6e:82:c8:cd:60:bc:98:3d:ff:e4:95:06:
                    95:f3:69:0e:77:b2:a7:29:c7:09:d1:39:ba:28:af:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C8:1A:53:93:F1:59:4A:5F:50:4A:92:44:EB:A5:7D:74:02:25:D2
            X509v3 Authority Key Identifier:
                keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:38:83:3d:c3:2a:61:97:3a:9c:bb:83:af:5e:76:9d:8a:5b:
         11:84:15:44:4c:9c:cf:d2:5d:77:c5:6a:87:5c:99:68:dc:12:
         5a:45:77:1a:36:c5:49:8f:8e:e3:60:79:68:dc:29:8a:13:57:
         aa:5d:58:c8:21:85:3f:a3:98:db:0b:1f:f3:db:34:b3:24:8b:
         cb:2e:a0:38:c0:1b:96:e0:5b:07:31:0e:bb:11:ac:af:7f:0c:
         49:1d:cb:f6:27:6a:26:21:a1:ff:e7:fb:cd:f9:ae:ee:b3:8e:
         9a:5e:c2:49:e6:7c:2e:d3:39:53:a8:62:fc:20:95:ff:a9:5c:
         45:de:b0:98:d4:3b:2e:b0:6f:75:a3:7f:77:34:f3:15:a2:e3:
         b2:58:d0:f7:10:ab:51:3c:9d:91:bf:4d:74:3b:aa:20:37:72:
         45:88:f2:4f:94:a7:91:ea:d7:69:a6:5b:f9:67:76:4d:6a:88:
         85:94:9e:33:20:97:f9:24:a9:2f:e7:8d:67:bb:d0:a9:84:13:
         48:56:3e:20:07:17:5d:8b:c9:38:ea:32:0d:05:ca:11:6d:fa:
         88:55:02:96:55:50:f9:92:80:ad:96:aa:ae:72:cd:64:5c:8f:
         9c:61:f9:06:d5:be:be:e4:9d:4a:c0:b4:6e:41:3a:ee:d7:83:
         bb:f5:75:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz41UbY3W7qjspUvQtIMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh
MzNhMjEwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
EygwN2M4MWE1MzkzZjE1OTRhNWY1MDRhOTI0NGViYTU3ZDc0MDIyNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/gCXVEoSA8pgEs6ah0ooIPB4jjP
REMZ2eYdaMcPGeMDKfW5xA4SC3qz4IWgvjPKzDQ+iLnvyxoOli6brYN39+I09O90
mZ64YTbTDCyNJFVXY9O/AGFCPp7CPD1vNb9x85MLUlkr0o0O3Jp6999ETkXAH9x2
ZCSmlThEr3Kokig9bBufpFb3WGybXfxTCwMIiXsPcgUgI5pFveJ0MsiMoU3VL18M
QDNvMkZz3mhqf4K5F6Q/QWBZYOswIj4foHrZOH3GwbLcWpMluDdZTLf52v/fWGLr
0qYCs9eXRQIKTGpIbsdugsjNYLyYPf/klQaV82kOd7KnKccJ0Tm6KK9G1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfIGlOT8VlKX1BKkkTrpX10AiXSMB8GA1UdIwQY
MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt
OWJkNWQ1MTM4MDU5LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5
LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTiDPcMq
YZc6nLuDr152nYpbEYQVREycz9Jdd8Vqh1yZaNwSWkV3GjbFSY+O42B5aNwpihNX
ql1YyCGFP6OY2wsf89s0sySLyy6gOMAbluBbBzEOuxGsr38MSR3L9idqJiGh/+f7
zfmu7rOOml7CSeZ8LtM5U6hi/CCV/6lcRd6wmNQ7LrBvdaN/dzTzFaLjsljQ9xCr
UTydkb9NdDuqIDdyRYjyT5SnkerXaaZb+Wd2TWqIhZSeMyCX+SSpL+eNZ7vQqYQT
SFY+IAcXXYvJOOoyDQXKEW36iFUCllVQ+ZKArZaqrnLNZFyPnGH5BtW+vuSdSsC0
bkE67teDu/V1qQ==
-----END CERTIFICATE-----