Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File:                     tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier:          NE79X6zYoGu+ZStTz+f9L0gbOSNkHRFDAkpLWZM97nE=
Subject key identifier:   E0:BF:F8:B8:B1:54:4C:C7:0E:07:29:EF:C6:CF:9B:B0:7F:92:B1:74
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer:       /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial:       01962F065853678AB14BFB0586529B252E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
                          2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: btLMq1yOMhlbuF27sxxpxc+sdVElddo4x2R3xzwN8fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:53:67:8a:b1:4b:fb:05:86:52:9b:25:2e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=e0bff8b8b1544cc70e0729efc6cf9bb07f92b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:99:b2:11:41:d5:4c:48:0c:76:e2:b1:43:
                    96:5a:cc:19:53:4c:b3:9a:3f:3c:60:c7:97:82:cd:
                    e3:4d:91:42:a7:e1:a0:4f:0e:c7:fc:bc:aa:17:89:
                    15:bb:d4:4c:66:bc:07:24:7d:3c:08:7b:97:7e:03:
                    63:4f:63:a1:39:fb:b1:99:88:42:f1:75:a7:c3:3b:
                    0e:49:d8:5e:9e:d9:2a:4f:8a:9c:4c:1c:10:35:c3:
                    71:42:f8:ae:52:c1:b2:0a:bb:cd:c3:4e:d6:0c:35:
                    84:ac:82:47:88:f5:40:ba:5b:ae:70:ca:74:e1:94:
                    de:3d:4b:d5:b6:d9:b2:4b:c3:8e:e5:e2:cc:67:19:
                    a7:01:e7:69:6f:d9:58:bf:94:b6:0c:28:be:c9:8b:
                    f8:66:e4:27:9a:bb:51:ad:0f:47:c2:a7:fa:38:c9:
                    70:e6:eb:cc:11:70:63:e3:4a:3e:d1:0c:1e:13:b9:
                    a6:1d:57:b4:72:18:23:c8:cb:cc:26:c9:e7:a3:58:
                    9b:79:04:a4:13:cf:62:f5:8d:79:d0:8c:12:f4:e2:
                    c1:f3:c5:b0:90:a8:93:ee:a4:91:cd:1a:e0:39:c7:
                    ea:bc:c5:32:07:59:b7:bc:31:6f:f8:ed:8c:66:46:
                    50:63:1c:7a:a1:2b:df:d6:fa:59:44:24:55:f3:74:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:F8:B8:B1:54:4C:C7:0E:07:29:EF:C6:CF:9B:B0:7F:92:B1:74
            X509v3 Authority Key Identifier:
                keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:db:ce:39:63:a8:ff:e6:4a:ff:f8:e1:c3:c0:83:e6:1e:
         e5:71:aa:fc:bc:ab:1a:65:22:76:7b:ed:95:72:ad:0f:6b:4f:
         25:75:20:c4:61:ab:b1:97:b0:d9:4a:e0:0e:56:d0:1d:fe:36:
         f0:79:28:8b:44:15:1e:81:d2:fe:7c:4c:b3:55:25:56:2b:e4:
         19:3c:19:e7:59:5a:69:24:82:a6:a8:5d:6b:22:e6:f9:b8:5d:
         91:3d:03:05:c1:5f:7b:d1:41:21:67:3a:dd:1d:9f:bd:85:94:
         54:09:d9:a2:45:6d:0a:3c:cc:37:a3:2e:9c:ed:74:ea:dd:45:
         14:99:e7:83:fb:52:ea:0c:51:c0:01:b3:ac:24:0f:7a:83:99:
         2b:06:aa:31:d8:47:44:27:c5:c0:ec:bf:f8:9f:c7:ec:58:e4:
         c3:61:e9:03:ca:01:1b:dc:ba:cf:f9:7c:15:a3:f8:93:3b:72:
         53:6c:58:6a:2d:12:4b:e4:b5:f1:b4:43:b4:bd:9f:2b:2d:d0:
         ae:ee:b3:46:42:d0:a8:55:11:c0:76:66:06:ce:28:49:5b:7f:
         83:96:ab:34:c0:73:f2:c7:63:fd:79:c7:fe:f7:a0:c3:a9:59:
         17:5a:b5:0a:a1:bd:e7:f1:fe:62:d8:0e:1c:a3:8f:d6:f1:47:
         0a:15:ac:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlhTZ4qxS/sFhlKbJS4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0
NTRhMTkwHhcNMjUwNDEzMTIwMTA3WhcNMjUwNDE0MTIwMTA3WjAzMTEwLwYDVQQD
EyhlMGJmZjhiOGIxNTQ0Y2M3MGUwNzI5ZWZjNmNmOWJiMDdmOTJiMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtSZshFB1UxIDHbisUOWWswZU0yz
mj88YMeXgs3jTZFCp+GgTw7H/LyqF4kVu9RMZrwHJH08CHuXfgNjT2OhOfuxmYhC
8XWnwzsOSdhentkqT4qcTBwQNcNxQviuUsGyCrvNw07WDDWErIJHiPVAuluucMp0
4ZTePUvVttmyS8OO5eLMZxmnAedpb9lYv5S2DCi+yYv4ZuQnmrtRrQ9Hwqf6OMlw
5uvMEXBj40o+0QweE7mmHVe0chgjyMvMJsnno1ibeQSkE89i9Y150IwS9OLB88Ww
kKiT7qSRzRrgOcfqvMUyB1m3vDFv+O2MZkZQYxx6oSvf1vpZRCRV83SU1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC/+LixVEzHDgcp78bPm7B/krF0MB8GA1UdIwQY
MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt
ZDI0NDFlOGY2YzdhLzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh
LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0Xbzjlj
qP/mSv/44cPAg+Ye5XGq/LyrGmUidnvtlXKtD2tPJXUgxGGrsZew2UrgDlbQHf42
8Hkoi0QVHoHS/nxMs1UlVivkGTwZ51laaSSCpqhdayLm+bhdkT0DBcFfe9FBIWc6
3R2fvYWUVAnZokVtCjzMN6MunO106t1FFJnng/tS6gxRwAGzrCQPeoOZKwaqMdhH
RCfFwOy/+J/H7Fjkw2HpA8oBG9y6z/l8FaP4kztyU2xYai0SS+S18bRDtL2fKy3Q
ru6zRkLQqFURwHZmBs4oSVt/g5arNMBz8sdj/XnH/vegw6lZF1q1CqG95/H+YtgO
HKOP1vFHChWs6Q==
-----END CERTIFICATE-----