Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File:                     i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier:          HCTxP+B9TN16MjHzciNMzcZgsHlZLY/CsCuWWCzfAJk=
Subject key identifier:   AD:4E:01:4C:A8:62:6E:97:01:D2:CD:CC:33:65:6A:FF:55:A2:95:E1
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer:       /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial:       01962F065E9B86D5F7B5D8F252CB070D39B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
                          2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: QgWSnTmI8ceSDdQn/JHR+m63YUTNJwutGJYdREQFEcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:9b:86:d5:f7:b5:d8:f2:52:cb:07:0d:39:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=ad4e014ca8626e9701d2cdcc33656aff55a295e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:bb:0c:06:a4:d0:87:57:70:a5:71:93:17:
                    cc:bf:23:b7:ef:56:98:b7:31:e3:cc:ff:59:5d:df:
                    c0:bb:a4:a6:37:61:68:d1:37:88:95:f5:a8:fa:5f:
                    f1:09:d5:36:0b:00:c8:ea:66:21:40:a5:7a:a3:07:
                    e0:9a:be:68:8d:45:44:cd:99:8a:2c:12:31:2e:b2:
                    30:03:aa:ed:cc:d6:16:5b:08:8b:f8:5f:99:f1:a9:
                    b7:38:1c:d8:cb:56:61:e1:89:aa:2d:b0:c7:89:86:
                    63:cc:4e:a3:22:3e:2a:87:23:30:84:b1:02:34:b8:
                    80:53:58:3a:32:a4:3d:3e:34:1a:24:01:ad:6c:76:
                    04:50:2f:b9:d8:55:13:8e:7a:97:14:fe:5a:69:81:
                    05:7a:46:c5:f7:e5:5f:c5:40:12:84:4e:5f:c0:a5:
                    50:6d:25:89:96:47:db:37:fd:64:71:d0:8f:9f:16:
                    4d:ab:c0:41:d7:28:eb:3b:53:98:7b:10:ab:ff:62:
                    41:95:78:f5:bf:45:bb:5d:03:5a:84:73:cb:63:4f:
                    a6:23:3b:7e:27:1a:3c:5a:a8:57:6b:32:f1:0a:6b:
                    32:d1:26:e2:ec:8b:3b:64:b3:7e:5f:a6:09:3f:11:
                    b1:03:f8:4a:8a:e4:39:b4:92:d4:e7:a1:73:78:1b:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4E:01:4C:A8:62:6E:97:01:D2:CD:CC:33:65:6A:FF:55:A2:95:E1
            X509v3 Authority Key Identifier:
                keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:24:c5:d5:74:3a:cd:ef:60:4a:21:9f:aa:ab:bd:b2:66:
         d8:df:64:e6:7c:8d:03:62:48:8e:fc:a5:f9:55:34:a9:9c:74:
         df:96:41:d2:9e:fc:3f:7d:c3:40:d3:86:b6:f0:6d:2e:54:a3:
         d5:db:20:60:ad:c2:9a:12:78:5e:6a:5a:e0:e3:69:95:50:4a:
         d8:f8:e9:e9:b3:38:cf:90:ed:86:64:ce:c9:bb:be:50:96:01:
         82:90:c3:09:c1:ae:df:ad:50:94:99:9d:70:4f:5d:89:e0:55:
         c5:3a:e9:c5:c0:02:65:da:aa:45:a3:f0:b5:a2:f1:a8:4a:61:
         2f:36:11:22:c3:ec:76:03:7d:4f:86:57:de:8c:b3:d0:a5:88:
         ab:08:64:40:7a:1b:4a:7b:69:79:4d:9a:5e:c3:40:2b:39:52:
         21:45:16:00:eb:4f:82:2e:9a:a4:84:bc:cb:be:ad:7c:eb:fa:
         9f:31:f0:50:5c:45:a1:33:39:0d:33:2b:2b:81:71:73:e1:01:
         24:32:ba:3a:05:fa:1e:3a:99:0f:29:23:a5:d1:5f:98:f8:33:
         87:61:0a:6d:48:12:59:fb:ec:f5:4d:7d:29:8a:54:ac:aa:88:
         7a:8f:f5:37:71:71:85:61:f2:d0:08:e7:39:0f:b5:20:29:3f:
         3a:cb:f5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBl6bhtX3tdjyUssHDTmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWYyNTgyODM1MTdkZjE5ODU5Mzg4ZTEzYmFkMWFlMDI2
OGE1ZmIwHhcNMjUwNDEzMTIwMTA4WhcNMjUwNDE0MTIwMTA4WjAzMTEwLwYDVQQD
EyhhZDRlMDE0Y2E4NjI2ZTk3MDFkMmNkY2MzMzY1NmFmZjU1YTI5NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLm7DAak0IdXcKVxkxfMvyO371aY
tzHjzP9ZXd/Au6SmN2Fo0TeIlfWo+l/xCdU2CwDI6mYhQKV6owfgmr5ojUVEzZmK
LBIxLrIwA6rtzNYWWwiL+F+Z8am3OBzYy1Zh4YmqLbDHiYZjzE6jIj4qhyMwhLEC
NLiAU1g6MqQ9PjQaJAGtbHYEUC+52FUTjnqXFP5aaYEFekbF9+VfxUAShE5fwKVQ
bSWJlkfbN/1kcdCPnxZNq8BB1yjrO1OYexCr/2JBlXj1v0W7XQNahHPLY0+mIzt+
Jxo8WqhXazLxCmsy0Sbi7Is7ZLN+X6YJPxGxA/hKiuQ5tJLU56FzeBvA1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1OAUyoYm6XAdLNzDNlav9VopXhMB8GA1UdIwQY
MBaAFIufJYKDUX3xmFk4jhO60a4CaKX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGIt
OGY1ZTk5N2FiMWI1LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGItOGY1ZTk5N2FiMWI1
LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYMkxdV0
Os3vYEohn6qrvbJm2N9k5nyNA2JIjvyl+VU0qZx035ZB0p78P33DQNOGtvBtLlSj
1dsgYK3CmhJ4Xmpa4ONplVBK2Pjp6bM4z5DthmTOybu+UJYBgpDDCcGu361QlJmd
cE9dieBVxTrpxcACZdqqRaPwtaLxqEphLzYRIsPsdgN9T4ZX3oyz0KWIqwhkQHob
SntpeU2aXsNAKzlSIUUWAOtPgi6apIS8y76tfOv6nzHwUFxFoTM5DTMrK4Fxc+EB
JDK6OgX6HjqZDykjpdFfmPgzh2EKbUgSWfvs9U19KYpUrKqIeo/1N3FxhWHy0Ajn
OQ+1ICk/Osv1DQ==
-----END CERTIFICATE-----