Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
File:                     __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json)
Hash identifier:          mi9sWzKje6WxWLBxat21FPlTrTZHWasyWs9gayF7lKw=
Subject key identifier:   C9:36:67:FB:70:10:21:37:68:30:28:00:8E:68:1A:ED:34:35:D3:AE
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Certificate issuer:       /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial:       01962E2AE898A6F2F54CB706319DBCA5EA93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: sucEiKOtgFxpfGQdlHYg2uyd50bIGi62VyskjkSujuo=)
                          2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:98:a6:f2:f5:4c:b7:06:31:9d:bc:a5:ea:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=c93667fb70102137683028008e681aed3435d3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:d0:bc:39:f8:26:f6:ec:92:7e:1a:60:c9:
                    d6:a2:79:1c:61:d2:2c:cf:33:81:5b:99:40:3c:30:
                    63:37:e3:00:23:bf:0b:70:52:25:c8:35:15:fa:57:
                    2a:d1:e8:4c:4e:00:c0:51:36:13:d5:7b:e8:02:30:
                    9b:4d:63:31:df:aa:4d:a1:fb:1b:93:76:c6:31:51:
                    dd:2d:4a:f3:02:26:ea:5f:62:b9:09:e4:82:28:65:
                    68:37:16:85:79:12:9c:d8:a1:47:0d:f0:11:8b:6a:
                    b3:d8:bf:f8:b6:5e:bd:8c:f1:aa:44:87:84:8c:55:
                    f6:1a:41:da:a9:97:25:8c:dc:30:3e:07:01:b9:11:
                    8a:29:d3:d3:1b:92:0d:2a:db:49:2f:c4:db:34:dc:
                    1f:1b:b3:e2:2f:a1:f4:e3:83:27:db:10:16:3d:df:
                    dc:67:d9:23:77:5a:e3:31:fc:da:d8:40:75:5a:8a:
                    2e:85:7b:bb:45:0e:2f:da:58:02:fe:1a:03:73:cc:
                    4b:9c:bd:e1:a5:0f:3b:63:ee:b9:d5:7a:e8:37:3a:
                    0e:65:e7:44:12:32:0f:76:85:30:50:ca:a5:41:f6:
                    83:49:be:c0:12:16:3f:43:89:24:64:02:14:5b:54:
                    06:ba:73:0d:28:b0:d7:1b:07:84:4b:5b:d3:e1:01:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:67:FB:70:10:21:37:68:30:28:00:8E:68:1A:ED:34:35:D3:AE
            X509v3 Authority Key Identifier:
                keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:8e:bc:87:f4:87:16:cc:ad:66:07:42:de:9c:90:2e:6b:
         76:fc:7e:3c:36:e2:ba:1a:2f:c4:fb:f3:77:8e:d6:e7:44:b8:
         21:e5:79:7f:6f:7d:07:9d:dd:12:20:56:18:b8:92:cc:60:6c:
         c6:0c:de:de:47:f1:bf:1f:63:9c:cc:39:73:8a:21:d6:06:97:
         f6:a5:71:73:c4:59:fb:53:7a:77:b9:3b:bf:c2:00:d3:b5:25:
         51:12:67:aa:9d:dd:b0:7f:49:32:5f:aa:27:3f:ae:bd:dd:67:
         8b:63:08:57:82:6b:eb:1b:d6:9a:88:ba:94:51:f4:15:c1:12:
         e7:ae:7f:b1:9e:6d:e5:a6:a9:da:f3:26:ed:df:09:81:87:40:
         bc:f1:01:09:d0:8b:77:cc:de:08:1a:4b:e4:8d:45:66:d8:8b:
         bf:80:81:dd:ad:a9:57:07:c1:b0:15:e3:80:b2:29:fe:3c:b4:
         a2:80:96:6d:f1:23:45:c8:df:05:de:2d:d1:9e:45:a7:17:96:
         27:db:25:a8:96:57:a8:45:cf:a6:52:f9:bd:e7:ae:7b:44:6c:
         7d:3c:91:df:9d:65:60:d3:b8:d8:08:a8:f5:37:b0:ec:b2:09:
         0f:19:d7:48:18:00:69:f8:19:04:0c:18:69:2d:11:bc:3c:10:
         2a:b0:37:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuiYpvL1TLcGMZ28peqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZmYwZmE1MWU2OTM5ZDAxZGNhYTJiYjNkNWRjYWE2ZDAw
NDNkYTIwHhcNMjUwNDEzMDgwMTI2WhcNMjUwNDE0MDgwMTI2WjAzMTEwLwYDVQQD
EyhjOTM2NjdmYjcwMTAyMTM3NjgzMDI4MDA4ZTY4MWFlZDM0MzVkM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGvQvDn4Jvbskn4aYMnWonkcYdIs
zzOBW5lAPDBjN+MAI78LcFIlyDUV+lcq0ehMTgDAUTYT1XvoAjCbTWMx36pNofsb
k3bGMVHdLUrzAibqX2K5CeSCKGVoNxaFeRKc2KFHDfARi2qz2L/4tl69jPGqRIeE
jFX2GkHaqZcljNwwPgcBuRGKKdPTG5INKttJL8TbNNwfG7PiL6H044Mn2xAWPd/c
Z9kjd1rjMfza2EB1WoouhXu7RQ4v2lgC/hoDc8xLnL3hpQ87Y+651XroNzoOZedE
EjIPdoUwUMqlQfaDSb7AEhY/Q4kkZAIUW1QGunMNKLDXGweES1vT4QEIBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk2Z/twECE3aDAoAI5oGu00NdOuMB8GA1UdIwQY
MBaAFP//D6UeaTnQHcqiuz1dyqbQBD2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX184UHBSNXBPZEFkeXFLN1BWM0twdEFFUGFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85Y2I2YjUtN2E1My00MDZmLWFmN2Et
MTdjMzhkOWMzNzY4LzEvX184UHBSNXBPZEFkeXFLN1BWM0twdEFFUGFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85Y2I2YjUtN2E1My00MDZmLWFmN2EtMTdjMzhkOWMzNzY4
LzEvX184UHBSNXBPZEFkeXFLN1BWM0twdEFFUGFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaKOvIf0
hxbMrWYHQt6ckC5rdvx+PDbiuhovxPvzd47W50S4IeV5f299B53dEiBWGLiSzGBs
xgze3kfxvx9jnMw5c4oh1gaX9qVxc8RZ+1N6d7k7v8IA07UlURJnqp3dsH9JMl+q
Jz+uvd1ni2MIV4Jr6xvWmoi6lFH0FcES565/sZ5t5aap2vMm7d8JgYdAvPEBCdCL
d8zeCBpL5I1FZtiLv4CB3a2pVwfBsBXjgLIp/jy0ooCWbfEjRcjfBd4t0Z5FpxeW
J9slqJZXqEXPplL5veeue0RsfTyR351lYNO42Aio9Tew7LIJDxnXSBgAafgZBAwY
aS0RvDwQKrA31w==
-----END CERTIFICATE-----