Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          xp9SV7FaDwJO2MryBcAb+8/ckwb8moi5MsjrL0UryYk=
Subject key identifier:   E9:9F:FF:E9:8F:72:CE:2F:85:57:50:E6:88:E6:6A:80:25:AC:C7:51
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       01962E98A1B4EF49EAF7359D2B0F269C4B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          13AC
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=)
                          2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=)
                          3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=)
                          4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=)
                          5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=)
                          6: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=)
                          7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: KzdY6xL2x/uP1zvQXacX2VopspgOpaGksjv3JoPT1tA=)
                          8: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:b4:ef:49:ea:f7:35:9d:2b:0f:26:9c:4b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=e99fffe98f72ce2f855750e688e66a8025acc751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:e3:dd:fb:78:6e:90:f9:5b:2f:97:fd:a1:
                    34:d0:1b:09:c2:04:1b:3e:73:0f:98:12:07:54:87:
                    83:25:60:0b:53:51:2d:41:3f:94:a0:80:5e:fa:b1:
                    c6:80:e2:da:8d:d2:99:b2:ad:b9:81:90:48:bd:d7:
                    1b:16:79:1f:26:8a:e9:57:e8:88:4e:06:46:d9:71:
                    5d:a1:f2:a5:26:6a:e2:b8:d4:c9:71:41:e9:b7:ef:
                    14:a7:86:33:dc:29:95:96:5e:5d:ba:f0:5c:df:4f:
                    24:22:e6:e4:84:7c:85:76:20:5d:40:ad:d2:20:e0:
                    fd:f9:55:58:d1:70:9b:86:9a:cd:29:b3:96:e9:1f:
                    41:d2:0a:87:1f:e7:60:90:bc:88:1d:50:8d:e8:dd:
                    a3:f1:fc:c8:9e:80:13:00:73:ff:ff:63:bf:88:f3:
                    a0:f3:a0:f7:bc:17:96:c1:af:8a:63:d9:42:9b:ee:
                    a1:7d:47:d7:8d:72:c5:37:fe:53:75:cc:f0:31:41:
                    d6:a8:8b:92:d0:f7:54:90:99:76:3f:63:43:c2:f4:
                    16:8d:4c:8b:a7:f0:a6:d6:f8:7c:1a:bb:71:c9:23:
                    c5:0f:7e:57:f5:db:6a:61:7e:60:c6:35:56:88:eb:
                    70:c8:31:22:c3:0d:44:e6:d9:0e:87:56:f5:e7:cb:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9F:FF:E9:8F:72:CE:2F:85:57:50:E6:88:E6:6A:80:25:AC:C7:51
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:31:98:b7:43:de:2f:de:c2:80:6f:13:f5:03:95:b7:75:95:
         7c:01:45:2f:89:c4:8c:d3:38:88:ff:90:0b:6a:1b:02:07:fc:
         ad:68:6f:27:3a:40:14:35:7c:53:ea:f5:7d:08:f6:07:18:cb:
         26:bf:08:80:ac:83:01:9b:c8:29:1d:a8:07:bb:a0:09:6d:3d:
         08:8e:cc:b2:a4:d7:6f:b6:f1:55:09:76:a0:72:c1:96:04:db:
         7c:51:c5:67:48:21:f5:ed:71:3b:1b:f2:4e:8c:17:5d:24:e6:
         f3:ca:d2:79:b8:8e:7e:35:e2:38:7c:56:cf:1d:19:8f:1d:e1:
         5b:4d:54:1d:1c:1a:1d:a2:6c:01:9c:2f:22:38:c6:8a:10:39:
         b5:09:ea:90:11:62:08:d8:ef:bc:68:9c:d1:eb:f3:5c:ce:44:
         e3:96:99:fa:bf:93:ec:29:f9:2b:af:ab:00:38:3f:19:e4:6e:
         6f:fb:e6:90:47:d4:40:d4:5c:ed:fc:e8:83:b3:0f:4e:86:d0:
         fa:a4:09:2b:3c:14:54:55:80:95:d6:a1:02:6f:80:2a:64:44:
         19:f8:a3:0d:65:1a:d3:d0:7d:f4:71:7e:d4:45:1e:ee:c1:6d:
         e7:d0:f6:75:a6:56:aa:a2:e8:ca:6a:ae:c7:1f:e1:f6:78:6c:
         38:ff:f0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKG070nq9zWdKw8mnEswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1
MTBhYTkwHhcNMjUwNDEzMTAwMTE2WhcNMjUwNDE0MTAwMTE2WjAzMTEwLwYDVQQD
EyhlOTlmZmZlOThmNzJjZTJmODU1NzUwZTY4OGU2NmE4MDI1YWNjNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKnj3ft4bpD5Wy+X/aE00BsJwgQb
PnMPmBIHVIeDJWALU1EtQT+UoIBe+rHGgOLajdKZsq25gZBIvdcbFnkfJorpV+iI
TgZG2XFdofKlJmriuNTJcUHpt+8Up4Yz3CmVll5duvBc308kIubkhHyFdiBdQK3S
IOD9+VVY0XCbhprNKbOW6R9B0gqHH+dgkLyIHVCN6N2j8fzInoATAHP//2O/iPOg
86D3vBeWwa+KY9lCm+6hfUfXjXLFN/5TdczwMUHWqIuS0PdUkJl2P2NDwvQWjUyL
p/Cm1vh8GrtxySPFD35X9dtqYX5gxjVWiOtwyDEiww1E5tkOh1b158s1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmf/+mPcs4vhVdQ5ojmaoAlrMdRMB8GA1UdIwQY
MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt
M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3
LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTGYt0Pe
L97CgG8T9QOVt3WVfAFFL4nEjNM4iP+QC2obAgf8rWhvJzpAFDV8U+r1fQj2BxjL
Jr8IgKyDAZvIKR2oB7ugCW09CI7MsqTXb7bxVQl2oHLBlgTbfFHFZ0gh9e1xOxvy
TowXXSTm88rSebiOfjXiOHxWzx0Zjx3hW01UHRwaHaJsAZwvIjjGihA5tQnqkBFi
CNjvvGic0evzXM5E45aZ+r+T7Cn5K6+rADg/GeRub/vmkEfUQNRc7fzog7MPTobQ
+qQJKzwUVFWAldahAm+AKmREGfijDWUa09B99HF+1EUe7sFt59D2daZWqqLoymqu
xx/h9nhsOP/w+Q==
-----END CERTIFICATE-----