Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          8dyGPhbIDoK4UM3GRvwSkGtrQ9Zb43U8Y+xMzmgSDoQ=
Subject key identifier:   A4:15:14:52:55:1D:2F:15:7A:15:16:EF:5D:32:3F:37:B0:53:D0:87
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       01962E619D5CAD4AEBD0295F43CF421D9B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          12
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: pX7eApEOUsLzk7vu1tr9KlPGhrqcX/GTKbXtDDexr1g=)
                          2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9d:5c:ad:4a:eb:d0:29:5f:43:cf:42:1d:9b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=a4151452551d2f157a1516ef5d323f37b053d087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:cc:23:71:59:47:83:23:71:04:ad:b9:27:
                    04:21:23:0b:23:c0:85:98:75:ee:44:42:6a:f2:a7:
                    99:b7:f1:32:45:7b:9f:db:bd:9a:76:f2:52:d1:2b:
                    d6:1a:ed:f9:ba:27:fe:21:db:fb:29:66:ce:67:77:
                    6a:01:33:e7:bc:fe:60:99:27:8d:2d:bf:7a:68:19:
                    a3:65:bc:95:a3:d4:10:64:ba:ce:fd:7f:e8:0c:21:
                    21:03:00:c0:bd:ec:ca:1e:da:dc:f5:54:c4:19:70:
                    c9:66:e5:d7:8a:7e:3c:84:f4:d0:80:df:d3:41:51:
                    27:d5:df:9d:72:92:55:40:51:95:d6:76:37:a9:7a:
                    6f:a3:68:67:bb:ae:44:e6:0d:16:99:07:95:60:ec:
                    a6:59:8a:6e:1c:ef:52:ed:68:af:1b:c3:1b:f7:94:
                    a9:d3:df:4e:5e:45:cb:3a:74:11:97:e3:1b:34:60:
                    44:95:49:27:f9:8d:b5:d6:38:99:0f:a7:bc:5c:53:
                    6a:00:4f:aa:f9:07:b5:28:c7:49:b8:07:5c:20:3a:
                    e6:89:40:c8:5d:83:a2:4d:b7:ef:a3:ac:92:de:a6:
                    eb:79:dd:c3:bf:98:d8:48:3e:27:51:d7:00:29:b3:
                    81:00:fa:64:e0:36:1b:e7:b7:6d:62:fc:75:ba:a0:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:14:52:55:1D:2F:15:7A:15:16:EF:5D:32:3F:37:B0:53:D0:87
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:8d:65:6a:c6:fd:2f:50:67:92:59:b9:66:75:66:72:9f:
         a8:f6:15:4b:22:f3:b9:82:5a:bf:49:d6:a7:69:d2:cb:91:4a:
         9f:74:18:38:6b:23:c0:b5:c4:13:27:5d:10:17:e8:6c:d1:f7:
         b5:a0:f5:29:5f:28:3e:4e:5b:77:08:2e:88:10:0a:95:cd:90:
         4e:ca:70:bf:44:08:9f:82:a0:78:40:3f:9d:34:27:06:62:81:
         5c:26:3e:42:7f:9e:65:e1:15:b4:2a:5e:37:70:6e:4c:32:34:
         fa:2f:2f:6f:15:8d:19:41:59:f0:62:df:3e:68:47:81:32:42:
         97:ba:7f:2c:43:f1:c6:51:3f:93:ec:b3:a5:d7:18:18:11:2b:
         fe:d7:7d:6f:a0:3a:3a:12:de:80:fd:45:96:df:1a:87:56:ba:
         5f:ce:46:ec:84:e7:66:9a:3d:6b:cf:53:b1:a8:be:04:04:6b:
         2e:e0:39:5e:96:5e:11:05:0d:88:a5:10:76:00:27:bc:a0:3c:
         c6:ab:bc:e0:24:16:95:3c:09:5f:15:27:af:2d:a5:77:38:10:
         a7:93:fa:e9:69:16:ce:af:fe:b5:4d:95:9d:df:a6:2c:89:07:
         59:51:c4:ad:7b:93:cc:2e:76:ed:4a:a6:85:0d:e8:d6:d7:92:
         be:ab:ca:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZ1crUrr0ClfQ89CHZsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi
NmM4MjYwHhcNMjUwNDEzMDkwMTExWhcNMjUwNDE0MDkwMTExWjAzMTEwLwYDVQQD
EyhhNDE1MTQ1MjU1MWQyZjE1N2ExNTE2ZWY1ZDMyM2YzN2IwNTNkMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vPMI3FZR4MjcQStuScEISMLI8CF
mHXuREJq8qeZt/EyRXuf272advJS0SvWGu35uif+Idv7KWbOZ3dqATPnvP5gmSeN
Lb96aBmjZbyVo9QQZLrO/X/oDCEhAwDAvezKHtrc9VTEGXDJZuXXin48hPTQgN/T
QVEn1d+dcpJVQFGV1nY3qXpvo2hnu65E5g0WmQeVYOymWYpuHO9S7WivG8Mb95Sp
099OXkXLOnQRl+MbNGBElUkn+Y211jiZD6e8XFNqAE+q+Qe1KMdJuAdcIDrmiUDI
XYOiTbfvo6yS3qbred3Dv5jYSD4nUdcAKbOBAPpk4DYb57dtYvx1uqDVKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQVFFJVHS8VehUW710yPzewU9CHMB8GA1UdIwQY
MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt
NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi
LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9ONZWrG
/S9QZ5JZuWZ1ZnKfqPYVSyLzuYJav0nWp2nSy5FKn3QYOGsjwLXEEyddEBfobNH3
taD1KV8oPk5bdwguiBAKlc2QTspwv0QIn4KgeEA/nTQnBmKBXCY+Qn+eZeEVtCpe
N3BuTDI0+i8vbxWNGUFZ8GLfPmhHgTJCl7p/LEPxxlE/k+yzpdcYGBEr/td9b6A6
OhLegP1Flt8ah1a6X85G7ITnZpo9a89Tsai+BARrLuA5XpZeEQUNiKUQdgAnvKA8
xqu84CQWlTwJXxUnry2ldzgQp5P66WkWzq/+tU2Vnd+mLIkHWVHErXuTzC527Uqm
hQ3o1teSvqvKnQ==
-----END CERTIFICATE-----