Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
File:                     IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft (raw, json)
Hash identifier:          8K8mrEFAM8VAEGbl+HStY4FpO91kpSHvh1nWWlsyfbU=
Subject key identifier:   5E:95:48:97:F7:A2:76:35:D2:C5:EB:F8:3B:3F:1B:CA:5A:8C:4F:87
Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Certificate issuer:       /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Certificate serial:       01962DF43E5DA8A7F3BB1482B37A7B535E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
Manifest number:          07E4
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl (hash: FtVNOLtnZmHvZL9HZ45Bb01qY4t1IQlxPi8X4FS5LuU=)
                          2: NfqHOhcJXcqSfQpuNgytLU6Q0gw.roa (hash: fdvl8Vjh1i6SnoxQG77IPFWNq1tbBXhWcHGwbwfOV50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:5d:a8:a7:f3:bb:14:82:b3:7a:7b:53:5e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=5e954897f7a27635d2c5ebf83b3f1bca5a8c4f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:dd:c4:4f:74:d6:f4:2a:c4:ed:12:aa:b0:
                    0f:56:66:fb:32:cf:12:ae:b0:2d:08:c6:bc:8b:50:
                    59:b8:59:85:a8:7a:95:fb:30:d9:78:29:ac:12:5c:
                    ef:63:56:54:ee:81:05:d6:49:17:b1:69:99:91:3f:
                    f0:0b:f4:f5:ca:ba:4d:56:f2:82:fb:e7:62:43:0e:
                    ad:69:14:5e:49:2b:13:3c:4b:ac:a3:af:ad:83:9e:
                    48:df:9e:88:5d:32:f7:5d:cc:d4:48:ee:4e:c3:cd:
                    5e:30:62:17:8d:3b:58:bf:da:59:d0:55:67:ba:48:
                    1b:4d:ec:11:c1:43:72:0b:1f:f5:29:44:4e:45:ed:
                    6a:e2:fc:e4:09:2e:20:59:1a:83:a2:21:58:2c:b8:
                    be:98:a4:4c:fd:ba:fe:6c:b3:56:d0:36:b1:0a:12:
                    da:51:3c:e9:ec:a4:29:05:2a:aa:ed:22:11:16:ae:
                    a6:a4:f8:57:1e:a1:a3:99:2c:f8:b5:47:86:c8:cb:
                    68:f3:f7:cf:ce:5b:de:36:6c:06:51:aa:c9:a6:f8:
                    96:e8:0d:57:8b:28:70:7b:02:01:63:b8:ab:99:be:
                    ba:74:0d:48:93:7d:c9:df:10:13:58:ba:78:78:9b:
                    45:29:2b:41:e1:a5:85:cf:8f:8e:3d:10:50:46:0a:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:95:48:97:F7:A2:76:35:D2:C5:EB:F8:3B:3F:1B:CA:5A:8C:4F:87
            X509v3 Authority Key Identifier:
                keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:c9:f1:9c:15:79:a3:17:0d:5f:36:c6:8b:0e:db:ad:91:
         d0:10:ac:a7:2c:30:20:d7:93:13:b2:fb:08:f2:e1:3b:3c:ff:
         87:e0:1e:0c:8d:dc:bb:36:5e:b2:32:56:c7:04:a9:a2:82:27:
         42:44:38:71:59:00:e8:da:2e:a9:88:cf:be:67:b5:54:7b:d3:
         be:0b:cc:8b:05:1b:95:63:cc:5a:89:27:85:3d:90:66:f1:c5:
         c4:67:7e:5a:ce:52:47:d8:2c:7a:09:74:2a:d6:fb:78:69:df:
         e3:60:d7:d8:91:6a:37:fb:38:d4:82:39:d4:96:28:0e:0f:9e:
         b4:0e:c3:89:68:63:08:eb:1d:8e:50:2b:7c:0e:53:ee:57:3e:
         0d:55:8e:b2:31:ed:51:17:d9:57:0e:38:c0:3c:4e:b5:ff:7b:
         2f:40:de:f6:10:8c:b5:8f:65:83:d0:b4:e7:33:cb:3d:cc:45:
         71:30:85:ad:ee:1a:3f:af:bf:f7:14:80:0a:a4:44:b2:f8:8c:
         f7:e8:77:03:f6:a1:49:86:95:d5:63:33:8c:85:97:5b:fb:e9:
         9d:a4:e1:62:d8:8a:91:36:a0:88:72:17:ee:21:6f:ca:31:66:
         74:64:c6:5c:38:b2:f3:db:21:7d:e8:39:ea:95:59:b8:ac:c3:
         0b:d3:a5:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D5dqKfzuxSCs3p7U16SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTMwZTlkMDllMmZmOGMzODQxMzYxNTU4OWE1ZjIwNmU3
ZjNlYTkwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg1ZTk1NDg5N2Y3YTI3NjM1ZDJjNWViZjgzYjNmMWJjYTVhOGM0Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YHdxE901vQqxO0SqrAPVmb7Ms8S
rrAtCMa8i1BZuFmFqHqV+zDZeCmsElzvY1ZU7oEF1kkXsWmZkT/wC/T1yrpNVvKC
++diQw6taRReSSsTPEuso6+tg55I356IXTL3XczUSO5Ow81eMGIXjTtYv9pZ0FVn
ukgbTewRwUNyCx/1KURORe1q4vzkCS4gWRqDoiFYLLi+mKRM/br+bLNW0DaxChLa
UTzp7KQpBSqq7SIRFq6mpPhXHqGjmSz4tUeGyMto8/fPzlveNmwGUarJpviW6A1X
iyhwewIBY7irmb66dA1Ik33J3xATWLp4eJtFKStB4aWFz4+OPRBQRgo61QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6VSJf3onY10sXr+Ds/G8pajE+HMB8GA1UdIwQY
MBaAFCFTDp0J4v+MOEE2FViaXyBufz6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mMmRhZDMtYTZlNi00Yjc3LTgzNDIt
NjI0ZjRjMTQxZjJjLzEvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mMmRhZDMtYTZlNi00Yjc3LTgzNDItNjI0ZjRjMTQxZjJj
LzEvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJnJ8ZwV
eaMXDV82xosO262R0BCspywwINeTE7L7CPLhOzz/h+AeDI3cuzZesjJWxwSpooIn
QkQ4cVkA6NouqYjPvme1VHvTvgvMiwUblWPMWoknhT2QZvHFxGd+Ws5SR9gsegl0
Ktb7eGnf42DX2JFqN/s41II51JYoDg+etA7DiWhjCOsdjlArfA5T7lc+DVWOsjHt
URfZVw44wDxOtf97L0De9hCMtY9lg9C05zPLPcxFcTCFre4aP6+/9xSACqREsviM
9+h3A/ahSYaV1WMzjIWXW/vpnaThYtiKkTagiHIX7iFvyjFmdGTGXDiy89shfeg5
6pVZuKzDC9OlmQ==
-----END CERTIFICATE-----