Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File:                     Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier:          tkGgqhrw37wV9eSA9jVpEdswg3/1AhRHbcW/gkYTt4E=
Subject key identifier:   92:44:56:C4:B8:05:14:6D:BF:7B:6C:ED:0E:B1:8C:1E:DE:DF:A5:26
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer:       /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial:       01962E2B151BA3FD41C7E9CDA35919E3E8BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number:          01A5
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
                          2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: GoQRE2qFryHwJ1XVJjpin4E4et6ULOxQsIZxAsZ3K2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:1b:a3:fd:41:c7:e9:cd:a3:59:19:e3:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=924456c4b805146dbf7b6ced0eb18c1ededfa526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:42:05:6c:4d:7a:6b:ae:49:f4:6d:b1:59:
                    a9:1c:3c:b2:2d:f1:87:08:f5:67:f8:55:cd:a3:30:
                    ca:ec:76:54:60:3e:bd:6c:29:8d:c7:2a:bb:65:11:
                    e8:76:79:39:de:69:08:37:25:8b:5a:87:80:61:c5:
                    6c:81:02:a8:be:24:21:64:bc:83:9f:0f:be:40:e1:
                    9f:88:e1:80:6a:5f:c4:6f:5a:3c:d0:2d:a2:44:65:
                    df:da:5a:95:fb:bf:0e:b2:67:08:ab:35:0b:9b:94:
                    04:ae:a3:9b:18:4d:aa:ac:38:2f:6e:54:75:c1:db:
                    88:6b:ca:db:bc:d0:15:c8:58:ea:ae:a5:29:64:ea:
                    91:35:6e:23:03:77:8d:64:0e:ae:28:44:ce:db:4e:
                    01:ce:ad:4c:4d:9f:ce:be:1c:10:fe:e3:66:c2:7a:
                    04:26:4b:c9:31:05:45:f3:d8:2e:a8:1e:46:e1:5c:
                    2a:9d:14:da:06:1d:94:b2:fa:9c:36:3a:00:02:f2:
                    56:f1:9b:ea:b9:50:34:c8:16:88:06:a5:7b:b2:52:
                    45:71:96:f3:06:2e:f7:d0:54:c4:c5:d0:05:04:ef:
                    10:5a:61:ff:72:55:74:c5:72:09:ed:10:de:ff:75:
                    b4:29:29:fa:3b:46:71:47:eb:1d:20:8b:f9:d6:7f:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:44:56:C4:B8:05:14:6D:BF:7B:6C:ED:0E:B1:8C:1E:DE:DF:A5:26
            X509v3 Authority Key Identifier:
                keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:52:94:47:c7:b3:35:6a:2f:81:1a:2a:b3:b3:c1:14:d4:
         e6:c2:ad:fc:15:58:22:b9:c8:e3:ce:7d:0f:3b:48:df:39:dc:
         b7:15:eb:bb:be:32:92:08:98:89:53:90:81:81:ea:8a:fe:f0:
         e6:c2:2e:bb:48:9d:2b:ea:95:9e:2c:7a:50:9c:d5:49:6b:0a:
         9f:99:88:b4:9d:a8:c4:04:cd:a4:98:74:fb:b6:a1:8e:f9:83:
         c1:ee:68:e1:2e:ac:3d:7a:ea:f0:10:69:20:00:c8:7a:ad:bf:
         82:7e:1b:64:cd:30:6c:ba:40:5a:ac:84:f5:80:11:76:f9:2b:
         8a:f9:ae:39:f4:32:fc:1b:b6:55:94:58:0f:65:32:35:3b:b8:
         52:01:f9:c2:c1:77:37:56:ee:8d:49:d4:71:b9:c0:29:46:1e:
         8b:f5:85:c1:68:29:67:ad:da:93:d1:ea:62:6e:37:b1:56:33:
         8c:86:5a:c5:81:bc:03:07:c6:f6:2d:25:6c:38:ed:64:1d:32:
         51:e3:82:31:de:0b:d3:64:95:fa:5f:5f:82:18:a8:ec:ac:65:
         8b:9c:e6:54:f2:21:0e:c1:42:28:4a:2a:a4:97:20:29:17:e0:
         a1:27:62:8f:2d:4f:0d:09:79:60:39:b8:a5:75:6a:4b:0e:de:
         e9:8d:13:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxUbo/1Bx+nNo1kZ4+i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOWY1MmZkNTUwNjkyYmU3ZWVjMTkyZmMzZWQyMzI3ZjVh
MmY5YWIwHhcNMjUwNDEzMDgwMTM3WhcNMjUwNDE0MDgwMTM3WjAzMTEwLwYDVQQD
Eyg5MjQ0NTZjNGI4MDUxNDZkYmY3YjZjZWQwZWIxOGMxZWRlZGZhNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhtCBWxNemuuSfRtsVmpHDyyLfGH
CPVn+FXNozDK7HZUYD69bCmNxyq7ZRHodnk53mkINyWLWoeAYcVsgQKoviQhZLyD
nw++QOGfiOGAal/Eb1o80C2iRGXf2lqV+78OsmcIqzULm5QErqObGE2qrDgvblR1
wduIa8rbvNAVyFjqrqUpZOqRNW4jA3eNZA6uKETO204Bzq1MTZ/OvhwQ/uNmwnoE
JkvJMQVF89guqB5G4VwqnRTaBh2UsvqcNjoAAvJW8ZvquVA0yBaIBqV7slJFcZbz
Bi730FTExdAFBO8QWmH/clV0xXIJ7RDe/3W0KSn6O0ZxR+sdIIv51n+YAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJEVsS4BRRtv3ts7Q6xjB7e36UmMB8GA1UdIwQY
MBaAFE6fUv1VBpK+fuwZL8PtIyf1ovmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kNmJhOGQtMTUwZS00NTBlLTg0OWMt
ZjM4ZmEwZTcxZDk5LzEvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kNmJhOGQtMTUwZS00NTBlLTg0OWMtZjM4ZmEwZTcxZDk5
LzEvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq05SlEfH
szVqL4EaKrOzwRTU5sKt/BVYIrnI4859DztI3znctxXru74ykgiYiVOQgYHqiv7w
5sIuu0idK+qVnix6UJzVSWsKn5mItJ2oxATNpJh0+7ahjvmDwe5o4S6sPXrq8BBp
IADIeq2/gn4bZM0wbLpAWqyE9YARdvkrivmuOfQy/Bu2VZRYD2UyNTu4UgH5wsF3
N1bujUnUcbnAKUYei/WFwWgpZ63ak9HqYm43sVYzjIZaxYG8AwfG9i0lbDjtZB0y
UeOCMd4L02SV+l9fghio7Kxli5zmVPIhDsFCKEoqpJcgKRfgoSdijy1PDQl5YDm4
pXVqSw7e6Y0TxA==
-----END CERTIFICATE-----