Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File:                     8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier:          Fz9ZePMooA1QHPRiyTsTWK7wV5s2JnUn8Ova3EG4NMA=
Subject key identifier:   5D:12:B2:EC:4E:23:93:5A:7B:F6:2B:AB:FC:36:95:F2:BC:52:E5:37
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer:       /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial:       01962E98D9C2DA19930180E56A5903CE7123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: 75kXPhr7sdTCd8ZFa29+ws94baNN9Vi2A4v7z6aMRlM=)
                          2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
                          3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:c2:da:19:93:01:80:e5:6a:59:03:ce:71:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=5d12b2ec4e23935a7bf62babfc3695f2bc52e537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:3f:d4:84:ac:0f:0a:26:da:c5:50:d3:01:
                    d7:65:72:1a:07:eb:03:75:82:a5:e5:53:79:f5:5d:
                    64:f6:e6:2c:de:2e:2e:12:db:fc:ea:58:f0:cc:f2:
                    2f:4c:25:b6:1a:46:f8:bf:15:a5:84:b4:97:4c:42:
                    b4:77:b3:8d:bc:2c:e7:e0:21:28:b6:29:63:f2:64:
                    28:ce:0f:02:cd:31:e0:16:f6:b1:b4:fd:c4:f7:7a:
                    e8:eb:55:76:96:72:3f:40:1b:b5:cf:d3:8e:17:88:
                    f2:95:0b:6e:95:23:3c:e7:bd:23:c6:27:2a:1d:c5:
                    fb:19:3d:d2:04:20:ca:0f:49:8b:6c:49:07:c6:a8:
                    74:63:cd:0c:02:78:96:13:a4:ee:a0:c1:f2:37:c1:
                    60:e2:a1:44:41:ec:6d:b2:98:46:3e:49:6b:96:83:
                    ab:53:b4:bf:f0:d5:be:23:a4:6a:3b:7a:21:9a:3e:
                    25:f5:1e:3f:b3:70:5c:a1:71:62:5d:63:eb:54:a6:
                    ba:2f:5a:60:10:94:da:33:ef:8c:e3:57:6e:72:61:
                    80:39:4e:65:4b:d7:e1:de:8b:67:fb:fb:f9:8d:a5:
                    4c:f3:fa:a4:fc:93:e1:6f:c7:63:81:df:5e:26:cd:
                    84:c0:8d:75:42:18:ef:3d:87:b6:20:38:da:75:ca:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:12:B2:EC:4E:23:93:5A:7B:F6:2B:AB:FC:36:95:F2:BC:52:E5:37
            X509v3 Authority Key Identifier:
                keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:d0:8b:44:8c:84:90:8d:57:96:9b:ce:46:55:69:5e:53:
         2d:51:3d:61:a6:bf:df:d4:e0:d2:ab:4c:0e:ad:72:3e:a2:96:
         1b:b7:9a:3b:8b:c0:28:25:6d:64:af:bd:af:04:54:45:f5:d8:
         b1:4d:06:f0:22:1b:05:43:5a:15:b9:08:e4:f9:6b:10:82:5e:
         ab:5b:04:cb:4f:43:cf:b4:0e:98:c7:b8:66:e7:25:8a:db:af:
         01:37:e4:39:6c:ee:cc:ad:40:01:cd:4b:69:dc:7c:1b:4c:82:
         1d:68:00:f5:0c:98:17:1e:cd:06:c9:a1:ca:eb:86:67:bc:7d:
         70:dc:10:e0:37:9a:29:91:82:4f:ea:0a:68:d5:68:d9:3a:63:
         e5:f8:4c:5a:e9:a9:bc:d9:61:09:5c:f3:38:ea:a9:a2:ba:78:
         17:1d:67:1e:7a:10:ef:98:ba:db:62:1b:e6:ed:35:b7:0f:cf:
         78:bf:2b:f2:0e:3e:7d:09:f0:4e:61:a0:24:1a:b8:06:36:d6:
         79:0b:b1:9a:8e:df:f7:d6:38:31:24:6a:bc:27:cc:9b:18:cc:
         8c:32:2b:35:cc:bf:ed:d9:a8:17:1e:02:6b:96:3c:fc:6b:83:
         c3:86:76:cb:1c:49:16:aa:2e:1c:fb:64:bf:e3:3e:3f:17:88:
         ff:d6:ce:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNnC2hmTAYDlalkDznEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjUwNDEzMTAwMTMxWhcNMjUwNDE0MTAwMTMxWjAzMTEwLwYDVQQD
Eyg1ZDEyYjJlYzRlMjM5MzVhN2JmNjJiYWJmYzM2OTVmMmJjNTJlNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8/1ISsDwom2sVQ0wHXZXIaB+sD
dYKl5VN59V1k9uYs3i4uEtv86ljwzPIvTCW2Gkb4vxWlhLSXTEK0d7ONvCzn4CEo
tilj8mQozg8CzTHgFvaxtP3E93ro61V2lnI/QBu1z9OOF4jylQtulSM8570jxicq
HcX7GT3SBCDKD0mLbEkHxqh0Y80MAniWE6TuoMHyN8Fg4qFEQextsphGPklrloOr
U7S/8NW+I6RqO3ohmj4l9R4/s3BcoXFiXWPrVKa6L1pgEJTaM++M41ducmGAOU5l
S9fh3otn+/v5jaVM8/qk/JPhb8djgd9eJs2EwI11QhjvPYe2IDjadcoFGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0SsuxOI5Nae/Yrq/w2lfK8UuU3MB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8fQi0SM
hJCNV5abzkZVaV5TLVE9Yaa/39Tg0qtMDq1yPqKWG7eaO4vAKCVtZK+9rwRURfXY
sU0G8CIbBUNaFbkI5PlrEIJeq1sEy09Dz7QOmMe4ZuclituvATfkOWzuzK1AAc1L
adx8G0yCHWgA9QyYFx7NBsmhyuuGZ7x9cNwQ4DeaKZGCT+oKaNVo2Tpj5fhMWump
vNlhCVzzOOqporp4Fx1nHnoQ75i622Ib5u01tw/PeL8r8g4+fQnwTmGgJBq4BjbW
eQuxmo7f99Y4MSRqvCfMmxjMjDIrNcy/7dmoFx4Ca5Y8/GuDw4Z2yxxJFqouHPtk
v+M+PxeI/9bO4A==
-----END CERTIFICATE-----