Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File:                     CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier:          cbkcrV4qlidc6I2ojaAkWGn9ur/XqMJfWZ2038DQEuQ=
Subject key identifier:   05:3B:CF:0D:9D:46:E4:1D:4B:E9:00:8E:65:8D:88:C7:40:4E:04:6A
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer:       /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial:       01962FAB7FFF3AA4D4E3350DD001EE4CCCE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number:          11B0
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: swhYazIiMfa4XoQ9vDm91/xGwiMnbGvw2Sn/WVIODsQ=)
                          2: K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa (hash: +E0IiIySxfBfIZxXi+3jzbpb+rQYgtEbnhfMPIDheqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:ff:3a:a4:d4:e3:35:0d:d0:01:ee:4c:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=053bcf0d9d46e41d4be9008e658d88c7404e046a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:bc:54:34:c2:c0:ef:8a:2a:3b:eb:5f:15:
                    32:89:d5:78:99:51:c8:01:82:ba:bd:39:a3:23:f6:
                    d4:51:b1:de:ac:17:f6:15:6e:7b:49:30:1b:78:7a:
                    66:78:14:49:4b:d8:35:6b:13:0c:21:71:02:26:b9:
                    32:e7:16:45:39:e4:7e:9b:be:3a:0a:50:76:5c:80:
                    c0:c9:55:5a:41:42:70:fb:38:20:46:25:e6:84:e4:
                    72:0b:42:4e:85:b1:de:8a:d6:a2:21:9c:19:2f:6d:
                    a6:94:79:c8:03:93:31:b8:d4:b5:e8:57:52:14:93:
                    65:fd:35:83:14:29:07:45:35:59:0c:33:a4:9c:78:
                    dd:d6:64:02:cd:dc:fd:85:e2:ad:8a:e1:98:81:5b:
                    6c:aa:da:69:54:19:3f:5d:9f:fb:8a:e5:4e:da:02:
                    52:c3:e3:5e:6b:01:32:aa:67:e6:bd:1a:e0:46:7d:
                    6c:cc:f8:a8:dd:c8:d3:ae:ef:55:c7:e6:9a:56:71:
                    96:b6:f4:93:b5:c1:17:78:0c:94:7f:98:04:4a:e9:
                    19:3e:59:5b:2f:38:ba:94:d7:a7:2c:c0:e4:0a:5e:
                    fa:b8:e1:78:8f:ba:f0:6b:3c:11:ef:62:58:80:35:
                    6b:f4:16:a1:69:cf:d6:76:9f:f4:a7:73:93:c0:d5:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3B:CF:0D:9D:46:E4:1D:4B:E9:00:8E:65:8D:88:C7:40:4E:04:6A
            X509v3 Authority Key Identifier:
                keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:de:2e:29:ad:31:91:31:83:a8:4a:26:4e:10:00:34:68:
         6e:87:c6:6c:af:03:3e:78:15:b9:aa:04:c7:bf:7e:fb:47:dc:
         83:7e:2f:db:4e:ba:e2:42:2b:da:19:50:7f:61:7f:28:a1:5b:
         16:b1:ff:7b:69:bf:b3:6c:84:15:15:ff:a5:79:f4:ad:ff:2f:
         31:e8:1f:85:4d:62:f9:32:e0:b9:33:7b:ae:a1:53:f0:47:ff:
         42:6a:34:6c:1b:ef:68:ea:62:4d:39:f1:9c:94:b5:95:42:5b:
         a8:29:f8:80:b8:8d:b7:f4:c3:5d:a2:0b:03:02:1d:73:35:59:
         a1:d3:83:dc:96:b7:3d:9f:7b:11:82:e5:08:5d:77:51:00:1e:
         af:d6:dd:fd:41:01:28:12:fc:4e:ee:5e:6f:34:32:aa:58:17:
         b7:98:07:63:9a:eb:60:06:3d:3b:28:19:58:0f:58:2f:92:88:
         58:54:0f:a9:c0:4d:b9:84:09:04:c4:3c:fe:3a:75:3a:4a:45:
         8a:b8:e0:a6:09:bf:75:77:7a:ed:d5:ed:e9:c1:9c:f6:d4:41:
         0b:7e:56:eb:6c:99:18:f3:30:7b:37:d6:d8:d5:57:a4:f2:07:
         e2:56:a1:99:a2:6f:d4:5b:93:de:b6:a9:a3:9d:2f:54:84:9d:
         aa:c5:74:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3//OqTU4zUN0AHuTMzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj
MDljNTAwHhcNMjUwNDEzMTUwMTMwWhcNMjUwNDE0MTUwMTMwWjAzMTEwLwYDVQQD
EygwNTNiY2YwZDlkNDZlNDFkNGJlOTAwOGU2NThkODhjNzQwNGUwNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QO8VDTCwO+KKjvrXxUyidV4mVHI
AYK6vTmjI/bUUbHerBf2FW57STAbeHpmeBRJS9g1axMMIXECJrky5xZFOeR+m746
ClB2XIDAyVVaQUJw+zggRiXmhORyC0JOhbHeitaiIZwZL22mlHnIA5MxuNS16FdS
FJNl/TWDFCkHRTVZDDOknHjd1mQCzdz9heKtiuGYgVtsqtppVBk/XZ/7iuVO2gJS
w+NeawEyqmfmvRrgRn1szPio3cjTru9Vx+aaVnGWtvSTtcEXeAyUf5gESukZPllb
Lzi6lNenLMDkCl76uOF4j7rwazwR72JYgDVr9Bahac/Wdp/0p3OTwNU3lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU7zw2dRuQdS+kAjmWNiMdATgRqMB8GA1UdIwQY
MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt
ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3
LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8zeLimt
MZExg6hKJk4QADRobofGbK8DPngVuaoEx79++0fcg34v20664kIr2hlQf2F/KKFb
FrH/e2m/s2yEFRX/pXn0rf8vMegfhU1i+TLguTN7rqFT8Ef/Qmo0bBvvaOpiTTnx
nJS1lUJbqCn4gLiNt/TDXaILAwIdczVZodOD3Ja3PZ97EYLlCF13UQAer9bd/UEB
KBL8Tu5ebzQyqlgXt5gHY5rrYAY9OygZWA9YL5KIWFQPqcBNuYQJBMQ8/jp1OkpF
irjgpgm/dXd67dXt6cGc9tRBC35W62yZGPMwezfW2NVXpPIH4lahmaJv1FuT3rap
o50vVISdqsV0fw==
-----END CERTIFICATE-----