Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File:                     DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier:          gsHsILp8ixQ59mshpEKvvr1XSUuOzn+Dc6/DxL5bqYc=
Subject key identifier:   DF:29:3A:E0:65:73:91:2C:37:B0:8B:C2:F7:C3:CE:56:DC:D8:B9:26
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer:       /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial:       01962E997B51EF30F6732936687E68E8891C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number:          1429
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: /9gMMVEHWjuIaSCEqkSAABO+y2mKgV6TDPlC1t2ajE0=)
                          2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7b:51:ef:30:f6:73:29:36:68:7e:68:e8:89:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=df293ae06573912c37b08bc2f7c3ce56dcd8b926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:45:bc:dd:a1:17:de:7e:3e:68:15:1d:54:
                    e9:2b:87:a1:84:3d:43:73:9d:8a:59:90:96:ce:ea:
                    5d:02:12:0e:b9:67:49:16:71:ad:b1:1e:d8:c6:c4:
                    68:d1:e1:95:eb:a9:0f:be:f7:33:1e:dc:63:a9:95:
                    de:49:72:f9:2b:1e:24:71:7c:b5:d8:41:92:48:91:
                    46:97:79:25:4b:88:a8:f0:8f:d0:7d:6a:86:0a:21:
                    d0:0d:e9:2d:95:c8:81:d3:63:99:8a:2c:03:80:e9:
                    87:e5:02:b9:db:fc:ea:4e:30:7b:5a:de:03:10:ac:
                    0f:76:b2:b9:14:6e:70:db:92:fe:b9:15:ba:98:dd:
                    79:16:ad:b9:bf:f6:7a:15:d0:35:44:42:e2:aa:02:
                    33:35:f1:9f:06:da:1b:fb:04:d7:9a:fd:51:e2:a1:
                    9c:6b:fa:17:b7:eb:bb:73:34:c8:a5:4d:2e:64:41:
                    61:5f:b5:02:fc:8c:d6:65:e9:ff:ad:ee:1d:62:6d:
                    8e:b5:a3:77:2f:22:df:9d:49:71:92:0f:85:3c:83:
                    15:29:83:e2:02:01:99:5f:03:11:22:e1:a4:07:b5:
                    65:ce:de:f1:61:95:19:b6:b8:8a:d2:d2:7a:c5:e3:
                    c4:82:b2:75:5d:d1:f5:72:a0:81:bc:22:a3:75:e0:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:3A:E0:65:73:91:2C:37:B0:8B:C2:F7:C3:CE:56:DC:D8:B9:26
            X509v3 Authority Key Identifier:
                keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:4b:0d:2a:98:28:19:2d:be:d5:45:1d:34:f1:b8:93:b1:
         5c:3b:83:a7:11:5f:f3:5a:84:07:5f:e2:82:5f:ac:e2:52:d9:
         5d:7e:88:6f:7c:d1:b8:68:95:5c:bd:04:71:21:90:4f:8e:20:
         aa:78:63:a0:85:12:ac:44:95:85:bd:33:7f:94:03:ec:d0:2b:
         6c:f1:da:1c:d3:cf:ce:b3:a8:48:0c:8f:00:55:28:78:4d:b6:
         29:3f:89:31:2b:1d:7e:b7:2a:48:b1:c4:3f:3e:0e:d2:cb:83:
         af:62:ff:b3:31:0d:99:5f:69:d8:2f:68:e4:9e:4b:cb:20:cb:
         35:c7:62:c5:0b:91:c3:69:ea:05:33:a6:37:4c:a6:5b:7e:f7:
         38:5b:ce:f4:fe:ea:d7:8e:53:1e:93:f7:ed:4b:f2:99:46:d8:
         6b:21:2c:9f:ee:a5:28:5c:ea:6c:c3:60:98:4c:6b:b7:66:ce:
         1e:a6:57:52:d8:4d:a1:ca:50:c1:4f:1a:e4:69:63:fb:ed:de:
         cb:df:25:ee:24:e3:7a:37:7f:95:40:15:91:ce:f7:15:26:cf:
         9d:4a:80:c0:ea:17:34:ba:8b:87:3b:5c:53:da:3c:93:46:05:
         7f:24:3c:00:cc:12:2e:96:9b:53:76:30:37:fb:e3:08:47:b2:
         42:19:a5:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXtR7zD2cyk2aH5o6IkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5
MjIwNWMwHhcNMjUwNDEzMTAwMjEyWhcNMjUwNDE0MTAwMjEyWjAzMTEwLwYDVQQD
EyhkZjI5M2FlMDY1NzM5MTJjMzdiMDhiYzJmN2MzY2U1NmRjZDhiOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEdFvN2hF95+PmgVHVTpK4ehhD1D
c52KWZCWzupdAhIOuWdJFnGtsR7YxsRo0eGV66kPvvczHtxjqZXeSXL5Kx4kcXy1
2EGSSJFGl3klS4io8I/QfWqGCiHQDektlciB02OZiiwDgOmH5QK52/zqTjB7Wt4D
EKwPdrK5FG5w25L+uRW6mN15Fq25v/Z6FdA1RELiqgIzNfGfBtob+wTXmv1R4qGc
a/oXt+u7czTIpU0uZEFhX7UC/IzWZen/re4dYm2OtaN3LyLfnUlxkg+FPIMVKYPi
AgGZXwMRIuGkB7Vlzt7xYZUZtriK0tJ6xePEgrJ1XdH1cqCBvCKjdeAQxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8pOuBlc5EsN7CLwvfDzlbc2LkmMB8GA1UdIwQY
MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt
Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4
LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkotLDSqY
KBktvtVFHTTxuJOxXDuDpxFf81qEB1/igl+s4lLZXX6Ib3zRuGiVXL0EcSGQT44g
qnhjoIUSrESVhb0zf5QD7NArbPHaHNPPzrOoSAyPAFUoeE22KT+JMSsdfrcqSLHE
Pz4O0suDr2L/szENmV9p2C9o5J5LyyDLNcdixQuRw2nqBTOmN0ymW373OFvO9P7q
145THpP37UvymUbYayEsn+6lKFzqbMNgmExrt2bOHqZXUthNocpQwU8a5Glj++3e
y98l7iTjejd/lUAVkc73FSbPnUqAwOoXNLqLhztcU9o8k0YFfyQ8AMwSLpabU3Yw
N/vjCEeyQhmlwg==
-----END CERTIFICATE-----