Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File:                     l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier:          QjpnP1mACeNmscvDpHCrIrrKRKvaHvA2Kz3CNyr+RaU=
Subject key identifier:   25:1D:B3:49:2D:EA:FC:13:E0:6B:3F:1F:31:06:CD:3D:27:4C:2A:A8
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer:       /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial:       01962E990C3B5470FC18BFE4EE7099602BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number:          CA
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
                          2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: 0NVYPOMPU/V8ziICKxTyrKYN8akgeJ0menBPe+ESaZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:3b:54:70:fc:18:bf:e4:ee:70:99:60:2b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=251db3492deafc13e06b3f1f3106cd3d274c2aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:37:8c:a9:14:08:49:92:8c:2c:91:ba:74:
                    56:9b:29:5f:c9:56:da:5f:40:e1:8c:3b:61:f3:9d:
                    e3:91:14:ab:41:8f:fe:59:cf:45:5e:68:d0:b8:3c:
                    bd:89:89:ed:b6:d0:10:5c:c5:40:8e:01:21:64:f3:
                    24:5b:34:88:d0:26:35:3e:0c:34:fa:c7:cc:e6:da:
                    23:77:8e:e0:ad:e1:ee:ac:c0:b5:98:81:f5:7f:57:
                    71:32:e8:ab:8d:d1:ba:fd:53:b2:52:1b:03:8d:21:
                    11:bc:02:60:36:3a:41:2d:17:16:14:cd:af:0d:a7:
                    95:a2:90:0b:bb:24:15:0d:53:d4:c3:f5:08:fb:f2:
                    89:b0:c5:f5:da:2a:67:00:4c:55:ee:8b:a8:9e:45:
                    bd:e7:fb:ac:39:2c:0e:2f:da:3d:be:d4:db:14:11:
                    c9:6a:39:99:40:fa:dc:f5:e3:3e:94:b7:62:97:4a:
                    9a:39:cb:f7:fe:19:61:0e:97:8d:9e:63:33:80:28:
                    8c:bf:89:63:86:6e:fc:37:89:cb:1c:eb:8f:ba:b9:
                    73:00:2b:26:f3:05:6c:1f:bd:9b:08:0d:53:b2:be:
                    3c:ae:3b:68:c3:a8:36:b3:9c:c3:7a:f4:83:12:60:
                    f0:92:de:77:1d:45:d4:c7:03:6b:23:8a:50:81:d1:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:B3:49:2D:EA:FC:13:E0:6B:3F:1F:31:06:CD:3D:27:4C:2A:A8
            X509v3 Authority Key Identifier:
                keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:64:57:e8:1a:20:85:5d:0e:a5:55:9c:09:4e:64:8a:15:
         c7:5c:25:8a:9e:1a:24:ab:56:f8:88:ac:ac:80:36:8b:bc:1f:
         09:19:ba:28:ec:a3:fe:23:94:8f:72:9f:76:0d:74:c8:d1:4e:
         5f:e9:f5:a5:4c:8d:c1:56:77:d3:8c:ae:ef:d2:08:c0:9c:87:
         54:49:51:f1:bd:a4:00:59:61:77:68:b9:73:39:6d:e4:55:d7:
         28:f2:6d:c1:17:72:b9:32:db:95:55:a1:3f:00:d5:b6:6a:26:
         14:a6:86:6c:20:97:d3:92:10:a9:3e:bc:e4:74:11:e7:c5:5e:
         45:bd:62:34:0f:1d:cc:39:fd:d2:65:2b:6b:5d:2c:fd:2e:81:
         c9:09:2e:f1:e2:58:78:a9:14:86:d1:ae:c7:de:76:8c:8a:50:
         8a:47:79:a0:16:84:75:b3:7a:78:e5:0d:ef:9e:ef:b1:8b:3b:
         69:12:be:22:2b:bf:f2:e0:7a:bc:3c:fe:91:20:11:82:73:3b:
         5c:10:9c:30:53:20:87:79:92:de:93:a2:79:a3:62:6e:65:80:
         4f:e8:46:4b:0c:72:59:9b:59:19:96:c8:83:1b:8a:97:ad:d3:
         3b:24:3a:73:c7:29:1b:aa:a0:8f:8f:5a:12:ee:ec:2b:0a:65:
         f1:25:76:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQw7VHD8GL/k7nCZYCvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Y2NjMGVjZGNlYjdjNGRhOTEyZTFkNzkyYmQxNmU2MjJh
ZjRhNDYwHhcNMjUwNDEzMTAwMTQ0WhcNMjUwNDE0MTAwMTQ0WjAzMTEwLwYDVQQD
EygyNTFkYjM0OTJkZWFmYzEzZTA2YjNmMWYzMTA2Y2QzZDI3NGMyYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p83jKkUCEmSjCyRunRWmylfyVba
X0DhjDth853jkRSrQY/+Wc9FXmjQuDy9iYntttAQXMVAjgEhZPMkWzSI0CY1Pgw0
+sfM5tojd47greHurMC1mIH1f1dxMuirjdG6/VOyUhsDjSERvAJgNjpBLRcWFM2v
DaeVopALuyQVDVPUw/UI+/KJsMX12ipnAExV7ouonkW95/usOSwOL9o9vtTbFBHJ
ajmZQPrc9eM+lLdil0qaOcv3/hlhDpeNnmMzgCiMv4ljhm78N4nLHOuPurlzACsm
8wVsH72bCA1Tsr48rjtow6g2s5zDevSDEmDwkt53HUXUxwNrI4pQgdGT0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUds0kt6vwT4Gs/HzEGzT0nTCqoMB8GA1UdIwQY
MBaAFJfMwOzc63xNqRLh15K9FuYir0pGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAt
OTNkMTdhMjljMGE5LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wYWE0ZGQtM2ZhYS00YjNjLWI0YzAtOTNkMTdhMjljMGE5
LzEvbDh6QTdOenJmRTJwRXVIWGtyMFc1aUt2U2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYtkV+ga
IIVdDqVVnAlOZIoVx1wlip4aJKtW+IisrIA2i7wfCRm6KOyj/iOUj3Kfdg10yNFO
X+n1pUyNwVZ304yu79IIwJyHVElR8b2kAFlhd2i5czlt5FXXKPJtwRdyuTLblVWh
PwDVtmomFKaGbCCX05IQqT685HQR58VeRb1iNA8dzDn90mUra10s/S6ByQku8eJY
eKkUhtGux952jIpQikd5oBaEdbN6eOUN757vsYs7aRK+Iiu/8uB6vDz+kSARgnM7
XBCcMFMgh3mS3pOieaNibmWAT+hGSwxyWZtZGZbIgxuKl63TOyQ6c8cpG6qgj49a
Eu7sKwpl8SV2cg==
-----END CERTIFICATE-----