Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File:                     exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier:          JI86xWjXplNqfCs26jaswlGNo7G4otW9I7FFaIayFmw=
Subject key identifier:   92:5E:ED:77:09:A9:24:FD:85:9C:98:2A:C3:4B:87:85:32:65:86:CC
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer:       /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial:       01962F06900A9F0972C36FDFE58593D53341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number:          0A36
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: hvxFrf0iTHIn5T7Xbl1je+eXxboZdzsbCZuzDsOUrio=)
                          2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:0a:9f:09:72:c3:6f:df:e5:85:93:d5:33:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=925eed7709a924fd859c982ac34b8785326586cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:32:3b:61:37:a5:75:39:74:dd:f0:f9:3c:
                    ec:f4:65:8e:8a:f2:59:5a:5d:2b:e1:b8:db:44:89:
                    bf:1e:3a:a5:23:5b:67:60:d3:90:72:8a:03:87:f2:
                    f8:6f:b4:1c:f6:0a:ab:1a:33:06:99:9f:50:5c:50:
                    31:65:a3:5e:44:f8:a8:35:3e:eb:b0:7c:7c:8b:b0:
                    6e:d0:8e:0d:cb:32:81:02:06:b4:70:9e:2e:31:fa:
                    72:03:87:8d:d9:d8:06:9a:0b:4f:c3:d7:dc:1c:3f:
                    29:38:b9:9e:dd:9f:3a:16:d4:ca:b5:53:41:a1:54:
                    19:89:a2:2e:0b:06:a3:86:21:d6:87:29:0c:72:2d:
                    2f:51:19:b2:39:c3:d6:6c:8d:33:88:be:4f:da:9f:
                    6f:ef:f4:91:26:3b:a3:37:01:95:7c:07:ae:34:d2:
                    31:56:ec:71:0a:10:d0:7b:d6:1c:b4:27:18:c9:80:
                    3c:69:63:f6:4e:67:bc:c9:f2:af:b3:94:7d:6a:f4:
                    d9:bd:c3:0d:04:00:74:2b:35:eb:3f:82:1e:7a:99:
                    3e:bc:76:5b:c4:71:bf:91:20:5c:9e:80:e0:21:86:
                    a9:1a:38:be:b1:13:6d:74:df:17:23:50:9c:0b:75:
                    33:a1:19:99:61:35:10:b1:59:d8:da:51:e6:24:34:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5E:ED:77:09:A9:24:FD:85:9C:98:2A:C3:4B:87:85:32:65:86:CC
            X509v3 Authority Key Identifier:
                keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:95:e3:92:a0:c7:e6:30:bf:2e:c2:3c:91:fd:da:aa:77:
         c4:df:51:b4:c7:56:90:e8:a1:84:5f:3d:07:4c:42:73:d9:d9:
         18:eb:28:fc:8b:0d:63:cc:36:10:2a:ae:e6:02:48:f6:a3:b8:
         f5:79:22:a5:d8:ed:ba:aa:a8:a3:eb:41:2a:df:2e:f2:fa:c6:
         ae:b2:69:fc:2d:93:d0:f8:41:41:c5:ef:ba:50:f4:84:2e:11:
         93:af:f8:cb:f7:52:a8:ea:1d:c8:6e:9b:cc:9e:6e:8d:d5:f1:
         4a:d0:f0:72:be:64:c8:c2:aa:86:3e:a5:74:f7:96:a9:3f:3a:
         35:ba:23:48:d0:56:7b:18:8e:b6:26:c7:77:a7:86:02:f4:56:
         3b:95:59:51:24:3d:09:78:2d:4b:cb:65:3c:ce:0f:59:6c:38:
         f9:1a:b9:ab:f9:2e:27:8e:37:f5:e9:b2:43:2c:74:b2:61:f1:
         c9:c6:46:8d:1e:f4:cd:52:4d:bb:81:7a:7a:d1:0c:58:fa:a1:
         0e:54:af:1a:27:db:31:89:e7:e1:c4:0e:9c:9c:a7:48:a5:7d:
         aa:00:f2:70:93:4a:3f:68:42:97:1d:8a:c3:52:44:af:fc:98:
         72:8d:5d:72:8b:9d:b4:85:6c:e7:57:fd:dd:8a:25:32:fb:6f:
         84:a9:66:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpAKnwlyw2/f5YWT1TNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5
NGRjOTEwHhcNMjUwNDEzMTIwMTIxWhcNMjUwNDE0MTIwMTIxWjAzMTEwLwYDVQQD
Eyg5MjVlZWQ3NzA5YTkyNGZkODU5Yzk4MmFjMzRiODc4NTMyNjU4NmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBsyO2E3pXU5dN3w+Tzs9GWOivJZ
Wl0r4bjbRIm/HjqlI1tnYNOQcooDh/L4b7Qc9gqrGjMGmZ9QXFAxZaNeRPioNT7r
sHx8i7Bu0I4NyzKBAga0cJ4uMfpyA4eN2dgGmgtPw9fcHD8pOLme3Z86FtTKtVNB
oVQZiaIuCwajhiHWhykMci0vURmyOcPWbI0ziL5P2p9v7/SRJjujNwGVfAeuNNIx
VuxxChDQe9YctCcYyYA8aWP2Tme8yfKvs5R9avTZvcMNBAB0KzXrP4Ieepk+vHZb
xHG/kSBcnoDgIYapGji+sRNtdN8XI1CcC3UzoRmZYTUQsVnY2lHmJDQ5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJe7XcJqST9hZyYKsNLh4UyZYbMMB8GA1UdIwQY
MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt
MDliMTlkMjU1MjU0LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0
LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMCV45Kg
x+Ywvy7CPJH92qp3xN9RtMdWkOihhF89B0xCc9nZGOso/IsNY8w2ECqu5gJI9qO4
9Xkipdjtuqqoo+tBKt8u8vrGrrJp/C2T0PhBQcXvulD0hC4Rk6/4y/dSqOodyG6b
zJ5ujdXxStDwcr5kyMKqhj6ldPeWqT86NbojSNBWexiOtibHd6eGAvRWO5VZUSQ9
CXgtS8tlPM4PWWw4+Rq5q/kuJ4439emyQyx0smHxycZGjR70zVJNu4F6etEMWPqh
DlSvGifbMYnn4cQOnJynSKV9qgDycJNKP2hClx2Kw1JEr/yYco1dcoudtIVs51f9
3YolMvtvhKlm2w==
-----END CERTIFICATE-----