Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File:                     ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier:          VscJ/tevr7wtLmofMmLeH0i9EvD/5KKwFC8Wpp4Ux6Q=
Subject key identifier:   D6:E7:26:8F:B4:B2:D2:3F:E0:0E:52:43:0F:8E:D6:2F:46:2D:34:20
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer:       /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial:       01962F068B00475E4350746FC97A5865A061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number:          130B
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: MfC/1KPCjYwd1w8U+kwieqLXzH1B9wdIFZFE0gPXzmI=)
                          2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:00:47:5e:43:50:74:6f:c9:7a:58:65:a0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=d6e7268fb4b2d23fe00e52430f8ed62f462d3420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:55:21:c2:90:2e:10:bd:33:27:fe:6b:fe:
                    01:a6:fc:85:c4:ee:3e:fc:6f:ab:9f:ab:d5:5b:97:
                    58:10:fd:ca:56:0c:0c:33:5d:c4:73:d2:9b:0c:04:
                    86:45:4a:95:f5:90:e2:27:19:6f:25:7e:47:32:08:
                    df:11:3c:fc:be:81:fe:99:88:29:43:49:60:60:f0:
                    42:bf:ff:f6:50:c8:a5:e9:72:2e:14:6c:31:08:ca:
                    a8:31:77:5a:f3:a9:f4:2a:66:b1:f4:ea:05:c7:2c:
                    6b:66:09:14:36:68:4d:b9:74:c1:b9:1e:ea:fc:c7:
                    20:2d:06:fd:f1:82:cc:2a:cb:5a:c4:93:3c:54:43:
                    92:0f:93:67:d8:6d:4b:eb:c8:6f:30:27:2a:82:66:
                    3a:c7:80:23:29:a9:55:68:dd:87:32:45:45:c7:6b:
                    39:b8:1a:92:0a:99:c2:f0:6c:b3:76:72:7d:7f:ed:
                    67:24:8c:1d:3f:da:0d:38:50:c3:50:88:dc:61:96:
                    c5:cd:fa:3c:68:c1:cf:dc:37:40:bb:14:ae:32:3e:
                    9d:57:15:f4:61:ba:fa:c7:50:9c:e1:27:b2:57:5e:
                    e5:92:e1:8b:d7:ae:23:da:de:2c:aa:a9:30:5a:1e:
                    57:15:65:b4:37:50:1c:d5:4b:a6:73:40:72:03:aa:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E7:26:8F:B4:B2:D2:3F:E0:0E:52:43:0F:8E:D6:2F:46:2D:34:20
            X509v3 Authority Key Identifier:
                keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:e9:fe:09:30:ee:74:d4:17:1e:15:07:38:d4:f0:6e:d9:
         ac:b2:cb:81:8e:ad:18:7e:b4:2a:06:f5:d1:95:90:4f:df:78:
         3a:97:2c:36:72:35:ef:fb:93:e8:a3:84:81:ea:73:34:37:89:
         d7:28:5e:ec:1b:6f:0a:62:f6:ea:27:43:1b:16:5b:be:47:84:
         58:e1:51:9e:a1:25:34:83:3d:17:ab:57:c8:b2:bd:1c:88:5b:
         f9:92:23:c4:85:aa:98:0b:fe:8b:9a:c7:b9:ba:5a:96:b9:02:
         28:fc:36:35:77:d4:d1:e4:2e:3c:dd:6c:6b:d8:69:ce:c8:64:
         af:8c:bc:0d:36:0a:3e:a8:1d:cd:82:d9:97:75:05:19:50:c9:
         41:0d:9a:dd:2f:32:f4:6d:c6:5c:f4:50:a2:89:5c:86:88:24:
         f8:5c:8e:e5:e4:08:9e:d7:66:2d:db:ba:00:e5:c6:87:cf:3d:
         1e:ed:f1:e6:bd:7c:bb:82:60:0c:b2:9a:bb:aa:ab:22:b5:63:
         10:95:b5:00:2a:f4:c7:2d:e1:04:e7:de:49:64:7e:14:9c:2f:
         2b:4b:c5:19:53:3c:27:3d:8f:3c:ee:56:5b:52:ed:cb:b2:30:
         b7:87:56:f8:bb:f0:c3:8d:0b:50:d5:ff:7a:91:44:c1:d1:2d:
         94:e8:db:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBosAR15DUHRvyXpYZaBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjk4NDZkOGY3NWQ2NDVmZjYzMDhjZTAzMDA4N2EyOTdl
NmIzNTkwHhcNMjUwNDEzMTIwMTE5WhcNMjUwNDE0MTIwMTE5WjAzMTEwLwYDVQQD
EyhkNmU3MjY4ZmI0YjJkMjNmZTAwZTUyNDMwZjhlZDYyZjQ2MmQzNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFxVIcKQLhC9Myf+a/4BpvyFxO4+
/G+rn6vVW5dYEP3KVgwMM13Ec9KbDASGRUqV9ZDiJxlvJX5HMgjfETz8voH+mYgp
Q0lgYPBCv//2UMil6XIuFGwxCMqoMXda86n0Kmax9OoFxyxrZgkUNmhNuXTBuR7q
/McgLQb98YLMKstaxJM8VEOSD5Nn2G1L68hvMCcqgmY6x4AjKalVaN2HMkVFx2s5
uBqSCpnC8GyzdnJ9f+1nJIwdP9oNOFDDUIjcYZbFzfo8aMHP3DdAuxSuMj6dVxX0
Ybr6x1Cc4SeyV17lkuGL164j2t4sqqkwWh5XFWW0N1Ac1Uumc0ByA6p+RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbnJo+0stI/4A5SQw+O1i9GLTQgMB8GA1UdIwQY
MBaAFBK5hG2PddZF/2MIzgMAh6KX5rNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMzhmN2QtNTliYi00ODI1LWI2YmYt
Nzg4NTE5MzJiMjdmLzEvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMzhmN2QtNTliYi00ODI1LWI2YmYtNzg4NTE5MzJiMjdm
LzEvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/np/gkw
7nTUFx4VBzjU8G7ZrLLLgY6tGH60Kgb10ZWQT994OpcsNnI17/uT6KOEgepzNDeJ
1yhe7BtvCmL26idDGxZbvkeEWOFRnqElNIM9F6tXyLK9HIhb+ZIjxIWqmAv+i5rH
ubpalrkCKPw2NXfU0eQuPN1sa9hpzshkr4y8DTYKPqgdzYLZl3UFGVDJQQ2a3S8y
9G3GXPRQoolchogk+FyO5eQIntdmLdu6AOXGh889Hu3x5r18u4JgDLKau6qrIrVj
EJW1ACr0xy3hBOfeSWR+FJwvK0vFGVM8Jz2PPO5WW1Lty7Iwt4dW+Lvww40LUNX/
epFEwdEtlOjbUQ==
-----END CERTIFICATE-----