Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File:                     stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier:          sonuFR97nCvn3x47K7CmYLrtd2N94wcQuMW388TgsAw=
Subject key identifier:   E3:80:FC:D8:7C:80:2E:8E:ED:84:10:2D:C7:DA:F8:49:AE:D5:9D:A2
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer:       /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial:       01962F7452595D4691C076BB82BF2EA375F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number:          0A13
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
                          2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: nNn3Lga2U74K43q64CXwWnu/nR2+VYyMqfzXHEFUZiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:59:5d:46:91:c0:76:bb:82:bf:2e:a3:75:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=e380fcd87c802e8eed84102dc7daf849aed59da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:4e:f3:f4:6a:8b:61:01:0e:95:2f:5d:6e:
                    34:29:44:19:b8:4b:93:6c:c7:81:5c:f3:de:1d:2b:
                    62:dc:50:f6:e1:33:80:a8:ff:91:76:8a:2e:31:6e:
                    21:5d:f4:4e:c6:98:7d:38:ac:e6:04:76:3c:16:a7:
                    c8:9d:58:d3:6a:6f:ea:3c:f6:9c:8e:78:40:ac:45:
                    62:1b:d0:20:1a:e1:d8:7c:92:9e:cb:d1:d7:f5:ab:
                    0c:c6:06:85:c6:64:ac:99:b6:75:4e:77:9e:5e:45:
                    db:bd:62:3a:8b:a2:e1:e9:03:77:0f:09:46:8c:36:
                    c5:01:7c:ef:87:e8:2e:08:9c:58:d2:b6:77:ee:c4:
                    e7:4c:08:6c:0c:4c:c0:88:56:6e:64:b2:b5:c8:90:
                    82:88:18:9b:41:c7:ae:31:55:28:24:a3:0f:b7:fd:
                    84:24:5a:b3:d2:26:1f:d9:b2:89:96:89:15:f8:08:
                    dc:2b:7e:31:34:5b:87:8b:c4:a8:77:02:1d:72:1f:
                    76:2d:a1:6a:84:17:0b:61:f9:9a:31:cb:23:d3:25:
                    87:de:56:a9:a8:05:ee:00:cf:1f:4f:38:24:6e:d5:
                    79:60:f1:33:18:e7:83:0d:e6:b1:6e:48:13:f7:26:
                    f0:82:92:ce:5d:99:75:91:6a:18:3f:21:60:c6:df:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:FC:D8:7C:80:2E:8E:ED:84:10:2D:C7:DA:F8:49:AE:D5:9D:A2
            X509v3 Authority Key Identifier:
                keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:a4:c0:df:5c:02:c0:8e:97:a9:be:59:e3:a8:8e:de:bd:
         cc:13:3e:ec:4d:38:a1:da:30:af:9b:26:e5:d3:96:b5:82:1a:
         b4:c1:57:69:87:52:1c:2d:49:a3:d5:bd:ac:11:85:23:34:86:
         50:f8:05:4d:67:d4:f8:4d:ea:c5:cc:d9:a5:ae:87:a3:e2:c7:
         05:38:c3:45:16:eb:32:a2:c0:ee:32:b3:e7:e9:1d:47:95:e9:
         b4:af:dd:31:ee:ed:28:bc:ca:c4:ef:f2:d8:df:0f:1d:1e:f9:
         f6:6b:0d:d9:33:a2:fb:84:35:ff:48:4f:20:08:ec:b7:95:7c:
         74:37:dc:0c:c7:cf:32:85:9d:1d:06:63:b3:c6:93:d8:5e:4d:
         2a:01:2a:1e:74:33:e2:7f:f7:6f:d6:1c:8b:b6:ce:d8:60:30:
         13:9e:a7:29:9b:e3:10:46:81:85:be:c5:3e:64:f4:1f:98:b8:
         02:a3:fb:af:36:49:e9:f7:60:86:6d:05:84:fc:87:26:66:89:
         94:51:47:43:79:47:5f:2c:5a:98:1f:9a:75:7b:a2:1a:42:de:
         e5:57:39:7a:37:72:88:04:2c:59:b9:8d:29:c1:06:c9:93:27:
         3d:44:d9:7c:b4:44:0c:47:25:25:68:72:e0:9f:15:a7:d9:cb:
         8d:60:70:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFJZXUaRwHa7gr8uo3X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0
ZDg0NDAwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
EyhlMzgwZmNkODdjODAyZThlZWQ4NDEwMmRjN2RhZjg0OWFlZDU5ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4BO8/Rqi2EBDpUvXW40KUQZuEuT
bMeBXPPeHSti3FD24TOAqP+RdoouMW4hXfROxph9OKzmBHY8FqfInVjTam/qPPac
jnhArEViG9AgGuHYfJKey9HX9asMxgaFxmSsmbZ1TneeXkXbvWI6i6Lh6QN3DwlG
jDbFAXzvh+guCJxY0rZ37sTnTAhsDEzAiFZuZLK1yJCCiBibQceuMVUoJKMPt/2E
JFqz0iYf2bKJlokV+AjcK34xNFuHi8SodwIdch92LaFqhBcLYfmaMcsj0yWH3lap
qAXuAM8fTzgkbtV5YPEzGOeDDeaxbkgT9ybwgpLOXZl1kWoYPyFgxt9RnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOA/Nh8gC6O7YQQLcfa+Emu1Z2iMB8GA1UdIwQY
MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt
NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj
LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFW2kwN9c
AsCOl6m+WeOojt69zBM+7E04odowr5sm5dOWtYIatMFXaYdSHC1Jo9W9rBGFIzSG
UPgFTWfU+E3qxczZpa6Ho+LHBTjDRRbrMqLA7jKz5+kdR5XptK/dMe7tKLzKxO/y
2N8PHR759msN2TOi+4Q1/0hPIAjst5V8dDfcDMfPMoWdHQZjs8aT2F5NKgEqHnQz
4n/3b9Yci7bO2GAwE56nKZvjEEaBhb7FPmT0H5i4AqP7rzZJ6fdghm0FhPyHJmaJ
lFFHQ3lHXyxamB+adXuiGkLe5Vc5ejdyiAQsWbmNKcEGyZMnPUTZfLREDEclJWhy
4J8Vp9nLjWBwIg==
-----END CERTIFICATE-----