Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
File:                     uEWIWKHL3onJKQYPQvKw35JNTik.mft (raw, json)
Hash identifier:          GLmc8a7//3yl2MjHEVhUbH80kn1C7C4HDldVuCK3CHU=
Subject key identifier:   CC:93:8E:A9:99:DE:3D:5B:12:66:CC:75:93:EF:52:45:9E:6F:28:57
Authority key identifier: B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
Certificate issuer:       /CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Certificate serial:       01962ECF535491D9282B18A3A119FDAB974F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
Manifest number:          096A
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: TGrXflCdfRfW3fIuk1M0sun1vvs.roa (hash: alNQcjpWXoWXc70x5wuOV0VaoVsG9NOJ3xbbbXJM7RE=)
                          2: uEWIWKHL3onJKQYPQvKw35JNTik.crl (hash: cUU9i80S0LrZ2XuHRagurAnfVJtE8VJ3Z0IQUL56z5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:53:54:91:d9:28:2b:18:a3:a1:19:fd:ab:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8458858a1cbde89c929060f42f2b0df924d4e29
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=cc938ea999de3d5b1266cc7593ef52459e6f2857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:0d:d0:b1:a9:d4:2c:82:64:3d:af:54:66:
                    87:93:28:0a:d2:20:dc:e6:b7:ee:d3:5c:10:6f:1f:
                    fa:a2:c3:65:3d:53:4e:33:62:64:91:ba:d9:bc:ca:
                    2b:83:e6:14:5f:ca:0d:81:60:3e:f0:3e:48:89:ec:
                    25:c2:03:26:c4:5c:7c:78:9a:d1:df:b8:bc:7b:56:
                    b8:e9:d8:93:15:68:00:de:a5:96:d9:bb:d3:25:8a:
                    35:40:74:6f:ca:41:d4:a7:eb:09:e9:df:f4:80:d7:
                    6a:c1:74:82:84:f7:0f:7e:4b:fb:05:b3:9d:86:67:
                    e3:42:60:b3:9e:4e:cf:2b:ce:11:b3:be:82:22:14:
                    a7:1c:69:60:c9:03:c1:77:60:97:16:8f:a4:00:6f:
                    82:6a:65:b7:73:03:f2:1f:aa:c8:aa:0e:80:cc:6d:
                    06:d5:04:2a:00:a1:77:6b:68:77:45:9b:28:e4:a2:
                    9c:2a:d7:39:62:4b:0a:7d:04:97:95:c0:33:82:00:
                    51:4f:21:bf:a4:39:a5:22:0d:f7:ba:82:04:7b:b7:
                    54:df:d5:2a:de:22:6c:5c:b7:08:12:ca:18:e3:da:
                    41:ba:03:44:4e:e6:36:64:92:0c:c6:c0:d6:86:73:
                    5e:f4:0a:bb:71:21:ef:b3:1e:66:58:c8:c3:53:2a:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:8E:A9:99:DE:3D:5B:12:66:CC:75:93:EF:52:45:9E:6F:28:57
            X509v3 Authority Key Identifier:
                keyid:B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:47:dd:9f:e3:c5:ee:50:3f:33:fb:b2:0d:c6:21:aa:0a:fe:
         32:18:6b:b0:62:36:5b:7a:81:35:c0:8a:d3:7f:f2:64:ed:19:
         3b:d8:34:f9:95:d8:d1:08:b4:6b:c1:6a:1f:b8:b1:6e:9a:19:
         a7:b4:59:80:98:80:8e:ff:60:c2:ba:99:e8:46:89:4f:78:04:
         bb:69:8d:6c:34:3e:3b:55:6e:a7:7a:cc:be:bb:0d:cb:d6:1d:
         1b:ff:f1:e4:50:4e:5e:cd:af:c0:14:61:d6:58:6c:c2:fd:5f:
         9b:0d:c7:c5:52:e9:b3:a9:19:e4:54:94:e3:ef:d3:e1:d2:d0:
         08:34:55:b1:3c:f2:37:e9:a8:0d:a2:35:fe:9b:a9:2b:5d:f6:
         cf:6e:c7:40:f6:8c:70:92:ae:48:67:4a:99:32:2a:bd:07:d3:
         67:51:d1:28:12:dc:29:5f:5e:9b:21:67:2f:bb:81:a1:02:68:
         28:39:66:7f:ba:5e:01:b5:33:5d:b5:4c:7e:47:ca:67:bf:20:
         93:e7:82:76:f6:90:64:25:7e:54:d8:33:67:ee:43:05:13:26:
         38:05:99:11:7d:3a:36:8f:35:ec:56:b5:84:4a:84:ab:4f:83:
         cd:8b:c0:00:78:42:59:36:e6:04:05:05:96:3f:9e:66:00:d0:
         06:1d:6b:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1NUkdkoKxijoRn9q5dPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDU4ODU4YTFjYmRlODljOTI5MDYwZjQyZjJiMGRmOTI0
ZDRlMjkwHhcNMjUwNDEzMTEwMTAxWhcNMjUwNDE0MTEwMTAxWjAzMTEwLwYDVQQD
EyhjYzkzOGVhOTk5ZGUzZDViMTI2NmNjNzU5M2VmNTI0NTllNmYyODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MMN0LGp1CyCZD2vVGaHkygK0iDc
5rfu01wQbx/6osNlPVNOM2JkkbrZvMorg+YUX8oNgWA+8D5IiewlwgMmxFx8eJrR
37i8e1a46diTFWgA3qWW2bvTJYo1QHRvykHUp+sJ6d/0gNdqwXSChPcPfkv7BbOd
hmfjQmCznk7PK84Rs76CIhSnHGlgyQPBd2CXFo+kAG+CamW3cwPyH6rIqg6AzG0G
1QQqAKF3a2h3RZso5KKcKtc5YksKfQSXlcAzggBRTyG/pDmlIg33uoIEe7dU39Uq
3iJsXLcIEsoY49pBugNETuY2ZJIMxsDWhnNe9Aq7cSHvsx5mWMjDUyp0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyTjqmZ3j1bEmbMdZPvUkWebyhXMB8GA1UdIwQY
MBaAFLhFiFihy96JySkGD0LysN+STU4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2It
YjdjNjdlYWNjM2E1LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2ItYjdjNjdlYWNjM2E1
LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUfdn+PF
7lA/M/uyDcYhqgr+MhhrsGI2W3qBNcCK03/yZO0ZO9g0+ZXY0Qi0a8FqH7ixbpoZ
p7RZgJiAjv9gwrqZ6EaJT3gEu2mNbDQ+O1Vup3rMvrsNy9YdG//x5FBOXs2vwBRh
1lhswv1fmw3HxVLps6kZ5FSU4+/T4dLQCDRVsTzyN+moDaI1/pupK132z27HQPaM
cJKuSGdKmTIqvQfTZ1HRKBLcKV9emyFnL7uBoQJoKDlmf7peAbUzXbVMfkfKZ78g
k+eCdvaQZCV+VNgzZ+5DBRMmOAWZEX06No817Fa1hEqEq0+DzYvAAHhCWTbmBAUF
lj+eZgDQBh1rWA==
-----END CERTIFICATE-----