Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
File:                     2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft (raw, json)
Hash identifier:          DkAngMUGVUVfVCPx9DnzB11uALYBpZ892LwpDAtZ+NU=
Subject key identifier:   A6:17:4B:01:2A:50:01:EF:C0:85:74:58:FF:A3:52:57:64:52:CE:03
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Certificate issuer:       /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial:       01962F74CD2079A5894429D09AE2B8E62E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
Manifest number:          0DFB
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl (hash: j7U4LwotR4XlvnUAvYKyUqq1q+jmoCxHnwo3N8Xrah4=)
                          2: fvccoh-XRGUydolEQwVKUg__llM.roa (hash: MESTegxG3uX73jrknXUqcZY7a9Gll4oI6clWX78ISS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:20:79:a5:89:44:29:d0:9a:e2:b8:e6:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=a6174b012a5001efc0857458ffa352576452ce03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:5d:66:1c:63:1f:a6:45:7e:7f:0b:f1:81:
                    18:e9:76:9c:39:2b:42:09:9b:c8:04:cb:4c:87:19:
                    17:f9:8d:1e:67:e9:33:3f:fa:90:1a:95:8a:5a:e3:
                    fc:cd:31:fe:7b:ad:e2:d5:a8:40:63:c1:16:05:b4:
                    fd:e5:e6:31:4e:82:c3:1d:1a:60:49:fe:55:72:3d:
                    18:43:b4:4c:22:4f:c0:54:f5:fd:c3:5f:eb:3e:b9:
                    f5:c0:eb:f4:65:b5:31:7c:d5:a7:1a:47:13:90:55:
                    80:cc:ad:72:7c:61:a2:7d:a6:5e:92:f0:84:41:3c:
                    3a:f3:9b:dc:1c:61:ad:d2:4d:69:a9:3f:23:d4:95:
                    9a:b9:11:ed:2e:39:2a:ef:9b:cf:28:23:92:23:68:
                    6b:e2:cd:47:c1:3c:b1:42:ab:36:82:9f:8b:e4:db:
                    28:a9:40:e8:20:0b:6e:e8:90:8d:fd:e6:83:c9:2a:
                    f3:88:2c:c7:4e:67:fa:63:be:9f:7c:70:d3:b7:13:
                    9f:32:fe:6a:49:45:e0:b0:0d:ed:86:c0:07:47:85:
                    e7:be:98:66:e7:e2:b8:c7:28:c6:1d:bb:87:ab:87:
                    c4:2c:df:30:f6:27:07:d3:a9:8f:bc:23:d2:37:74:
                    01:b0:e4:48:cf:c3:f5:4b:39:b4:24:60:4a:7b:3d:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:4B:01:2A:50:01:EF:C0:85:74:58:FF:A3:52:57:64:52:CE:03
            X509v3 Authority Key Identifier:
                keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:9d:fd:59:09:ed:51:1a:10:54:ef:ba:18:41:63:84:04:
         a8:cc:bc:11:2d:a1:34:10:91:b6:ea:e8:52:9c:9b:57:d5:d6:
         89:5d:8f:9b:46:54:6a:6b:a8:53:23:bb:a4:b3:90:7b:7a:a4:
         42:df:37:ed:08:77:8e:e6:04:fd:db:1d:82:37:37:24:5c:83:
         f9:ff:c9:86:0f:8e:ae:65:5a:c9:57:f5:8f:95:3d:d7:44:0d:
         31:ef:96:88:b3:23:23:f2:be:8e:82:eb:68:7e:73:30:78:fc:
         35:2e:a8:a5:d0:20:1e:d1:f2:21:fc:b3:35:1c:0a:66:ff:64:
         68:32:20:df:d0:b0:91:40:0f:af:89:79:30:42:8e:a1:29:0d:
         85:56:42:30:5c:b2:ee:d9:3c:05:bf:4a:f6:d1:01:cf:20:84:
         74:30:88:48:69:14:80:dc:b0:1e:d1:ac:e0:7b:b7:84:0b:e3:
         d3:71:39:dc:cb:15:f7:6f:6f:78:53:6d:84:af:7c:90:7b:a0:
         fa:ab:ce:83:88:48:e2:6c:67:1c:d1:c0:a1:3d:34:e6:63:dc:
         c9:24:05:b3:4b:51:54:80:0a:7d:8c:ed:77:19:94:a2:44:c2:
         28:98:5c:c5:e8:12:f7:55:66:50:79:fe:ae:28:cb:f5:a0:6b:
         a2:3d:44:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdM0geaWJRCnQmuK45i4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTBkMDRiZjU3ZmE0ODY4ZTY5OTk3YzgzYjNhZDc3MWZk
NTBhOWQwHhcNMjUwNDEzMTQwMTQ1WhcNMjUwNDE0MTQwMTQ1WjAzMTEwLwYDVQQD
EyhhNjE3NGIwMTJhNTAwMWVmYzA4NTc0NThmZmEzNTI1NzY0NTJjZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnJdZhxjH6ZFfn8L8YEY6XacOStC
CZvIBMtMhxkX+Y0eZ+kzP/qQGpWKWuP8zTH+e63i1ahAY8EWBbT95eYxToLDHRpg
Sf5Vcj0YQ7RMIk/AVPX9w1/rPrn1wOv0ZbUxfNWnGkcTkFWAzK1yfGGifaZekvCE
QTw685vcHGGt0k1pqT8j1JWauRHtLjkq75vPKCOSI2hr4s1HwTyxQqs2gp+L5Nso
qUDoIAtu6JCN/eaDySrziCzHTmf6Y76ffHDTtxOfMv5qSUXgsA3thsAHR4Xnvphm
5+K4xyjGHbuHq4fELN8w9icH06mPvCPSN3QBsORIz8P1Szm0JGBKez2GeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYXSwEqUAHvwIV0WP+jUldkUs4DMB8GA1UdIwQY
MBaAFNqQ0Ev1f6SGjmmZfIOzrXcf1QqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgt
NTFhZDljMzgyYThkLzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgtNTFhZDljMzgyYThk
LzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk6d/VkJ
7VEaEFTvuhhBY4QEqMy8ES2hNBCRturoUpybV9XWiV2Pm0ZUamuoUyO7pLOQe3qk
Qt837Qh3juYE/dsdgjc3JFyD+f/Jhg+OrmVayVf1j5U910QNMe+WiLMjI/K+joLr
aH5zMHj8NS6opdAgHtHyIfyzNRwKZv9kaDIg39CwkUAPr4l5MEKOoSkNhVZCMFyy
7tk8Bb9K9tEBzyCEdDCISGkUgNywHtGs4Hu3hAvj03E53MsV929veFNthK98kHug
+qvOg4hI4mxnHNHAoT005mPcySQFs0tRVIAKfYztdxmUokTCKJhcxegS91VmUHn+
rijL9aBroj1ECA==
-----END CERTIFICATE-----