Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          mOGUKHG0VbOmzRp3cXUNKdZPFrfJ9h5unfP+YHHYgzk=
Subject key identifier:   CD:98:98:33:71:E2:17:6B:C6:47:F5:C5:DC:2C:4D:6F:8D:CD:AA:61
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       01962F0740F4C3F555F08D36FB1E7486BD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: NcrD1vTRqzPtKUYVo0INWFwZqTU2pRCR3kAIWBurrnQ=)
                          2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:f4:c3:f5:55:f0:8d:36:fb:1e:74:86:bd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=cd98983371e2176bc647f5c5dc2c4d6f8dcdaa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:e0:0a:93:21:19:59:4f:a1:3b:28:50:22:
                    dd:d5:a9:c8:e6:0a:97:ed:36:4b:f7:ff:9d:10:63:
                    e2:a8:81:c6:1e:09:99:9f:12:a9:84:c6:20:34:5c:
                    a8:05:5b:7f:25:a8:0e:61:51:30:8f:1d:4f:f5:2a:
                    26:ce:e6:72:79:6c:a6:07:87:f9:7a:81:7b:f8:3b:
                    e3:e1:50:16:9f:76:a4:4b:77:1b:8f:3a:2d:52:71:
                    e2:25:f6:40:a9:96:28:b7:86:22:e5:3a:86:5c:bb:
                    d4:5a:4c:2e:98:fd:4b:06:f0:38:7b:74:ed:8b:83:
                    b3:8a:6f:5a:30:bc:e4:64:ef:7a:28:1d:7e:af:17:
                    1b:09:28:94:49:fc:51:a6:8c:ac:40:e7:ee:01:f9:
                    57:0d:30:63:a7:c5:f1:71:f6:32:13:8a:b7:80:f7:
                    cc:05:8a:a1:9d:3e:eb:e0:b1:26:af:ac:f5:c6:c6:
                    6c:b0:5b:8e:e7:3e:46:e3:dd:00:5a:97:67:6b:89:
                    d6:b4:92:9e:e6:d4:b2:46:6e:3c:8c:71:72:d2:5c:
                    96:f1:09:08:3b:38:57:1e:49:2a:d2:56:3e:e2:4a:
                    cd:d6:3d:4a:29:1a:b6:b4:d2:55:d7:fc:b1:b9:80:
                    55:2c:7c:e8:c2:81:ae:da:03:41:41:8d:a6:8b:e7:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:98:33:71:E2:17:6B:C6:47:F5:C5:DC:2C:4D:6F:8D:CD:AA:61
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:06:0c:2c:dc:d5:45:7b:3c:6a:03:aa:06:33:9b:0e:fd:a3:
         7f:24:04:b5:0c:32:49:01:47:db:4a:44:58:23:8a:f1:35:39:
         ab:39:a7:6e:76:af:07:5e:36:db:bb:48:f5:5d:83:c4:ef:9b:
         c5:27:5f:73:4f:4f:05:bf:8c:ec:f3:37:20:73:8c:ae:c4:61:
         8a:fd:14:2b:56:d7:eb:79:11:08:05:23:28:cc:6f:57:6c:16:
         58:f7:31:84:bc:aa:d7:07:f5:39:19:a4:e1:31:db:13:ac:54:
         4b:3f:c5:5a:04:19:bf:17:c4:f4:4b:5f:36:69:fb:50:c6:d5:
         fb:2a:0c:cb:4e:14:df:38:e7:d5:b3:c4:f0:c8:3e:c5:c1:76:
         a3:d0:d8:5c:bd:ac:ec:f7:41:de:16:16:e7:b4:d0:c1:99:00:
         dd:c2:51:98:11:4b:62:f0:1b:38:7d:34:44:6d:9e:12:71:56:
         e7:cb:35:70:7c:2b:d4:ef:51:db:3b:6c:ac:25:c5:e4:39:45:
         2b:ea:df:6b:ff:cc:2a:7f:8b:90:f7:17:61:3e:7b:dc:0d:cc:
         5b:b4:ca:39:ee:cc:96:5e:75:65:db:62:a2:7e:ec:a5:b9:2d:
         b5:b7:37:7d:ac:06:8d:22:02:3e:f0:ff:b0:e3:cb:b1:73:d1:
         78:fe:50:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0D0w/VV8I02+x50hr02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm
MjI3NmQwHhcNMjUwNDEzMTIwMjA2WhcNMjUwNDE0MTIwMjA2WjAzMTEwLwYDVQQD
EyhjZDk4OTgzMzcxZTIxNzZiYzY0N2Y1YzVkYzJjNGQ2ZjhkY2RhYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SbgCpMhGVlPoTsoUCLd1anI5gqX
7TZL9/+dEGPiqIHGHgmZnxKphMYgNFyoBVt/JagOYVEwjx1P9SomzuZyeWymB4f5
eoF7+Dvj4VAWn3akS3cbjzotUnHiJfZAqZYot4Yi5TqGXLvUWkwumP1LBvA4e3Tt
i4Ozim9aMLzkZO96KB1+rxcbCSiUSfxRpoysQOfuAflXDTBjp8XxcfYyE4q3gPfM
BYqhnT7r4LEmr6z1xsZssFuO5z5G490AWpdna4nWtJKe5tSyRm48jHFy0lyW8QkI
OzhXHkkq0lY+4krN1j1KKRq2tNJV1/yxuYBVLHzowoGu2gNBQY2mi+eWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2YmDNx4hdrxkf1xdwsTW+NzaphMB8GA1UdIwQY
MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt
NjI1MDI4MzMwZWM2LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2
LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQYMLNzV
RXs8agOqBjObDv2jfyQEtQwySQFH20pEWCOK8TU5qzmnbnavB14227tI9V2DxO+b
xSdfc09PBb+M7PM3IHOMrsRhiv0UK1bX63kRCAUjKMxvV2wWWPcxhLyq1wf1ORmk
4THbE6xUSz/FWgQZvxfE9EtfNmn7UMbV+yoMy04U3zjn1bPE8Mg+xcF2o9DYXL2s
7PdB3hYW57TQwZkA3cJRmBFLYvAbOH00RG2eEnFW58s1cHwr1O9R2ztsrCXF5DlF
K+rfa//MKn+LkPcXYT573A3MW7TKOe7Mll51Zdtion7spbkttbc3fawGjSICPvD/
sOPLsXPReP5QhA==
-----END CERTIFICATE-----