Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File:                     RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier:          cQoXyFCSP186qViZjjG+wShJTD00gtX+OovWsRJJzIU=
Subject key identifier:   88:19:38:17:CB:53:CB:3E:62:7C:4D:E7:91:F9:B2:55:13:E6:63:AD
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       01962F071718A2602838A534130D9DD9D939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number:          1441
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
                          2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: YgONM1cxWz0rOQClmJa0i56SHLg4THN4q0M3QaFyg54=)
                          3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:18:a2:60:28:38:a5:34:13:0d:9d:d9:d9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=88193817cb53cb3e627c4de791f9b25513e663ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:eb:a2:1c:d1:0b:34:5a:36:26:67:a8:a2:77:
                    d0:a7:45:6f:ba:a8:83:a3:27:97:2d:48:41:c3:d3:
                    61:81:6d:0a:71:49:9f:32:52:4f:fa:cf:6c:1d:02:
                    5a:8e:dc:93:48:b6:7b:b5:c6:e8:46:93:5f:c8:cc:
                    28:3d:f5:7b:ba:88:ff:88:c0:a6:3b:37:c2:4a:95:
                    d6:ae:c9:b1:a5:67:d7:06:53:c5:3a:e8:0c:74:15:
                    f9:e4:71:d7:63:00:02:34:4c:e4:c6:25:87:46:4a:
                    73:6c:2d:57:ce:cb:4a:3f:9a:12:81:7b:fc:59:5a:
                    9e:ba:1d:87:b2:c7:87:b5:8c:1c:b1:d7:86:3e:49:
                    51:15:e2:5e:42:d4:60:06:37:2e:e7:df:37:56:88:
                    87:fb:ae:55:a8:c4:29:e0:e2:62:12:81:39:35:74:
                    8a:ef:cf:7b:29:f0:48:4b:dc:97:2f:7c:f2:b2:86:
                    6b:3d:32:0a:53:bd:ff:a5:36:30:86:df:03:95:3b:
                    18:41:16:28:4f:f2:1f:e2:6a:84:04:6a:f7:95:e3:
                    8a:8a:33:52:6c:63:d0:fa:1b:2d:e2:63:0b:c7:05:
                    32:e2:ab:a6:53:9e:4d:01:10:29:c3:bb:9c:2c:29:
                    11:cd:ee:37:8a:ab:f6:ef:8f:8f:3a:f8:7c:80:58:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:19:38:17:CB:53:CB:3E:62:7C:4D:E7:91:F9:B2:55:13:E6:63:AD
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:5e:c2:13:dd:1d:b2:97:ce:b5:75:0c:6e:69:18:64:3a:
         8c:6a:ac:da:b0:c4:89:0a:c0:09:00:3e:69:cd:58:58:c7:bd:
         24:c3:fe:98:91:12:fc:6d:6d:4f:73:7a:93:87:b5:e9:6b:2e:
         af:cc:c4:f3:15:c6:8b:73:35:00:9a:dc:22:d9:d6:f5:2b:d9:
         b3:06:50:b5:32:0e:5c:0e:dd:37:ec:2b:13:12:78:b6:60:e4:
         0b:8e:8c:50:47:69:e0:a9:85:43:02:41:0f:a7:16:ce:23:49:
         3b:52:02:d4:f1:0c:6e:a2:d4:1a:1e:65:0f:d1:d4:5f:13:26:
         fe:cc:d0:8d:57:cd:a2:72:4e:90:b7:87:10:ff:10:9d:57:57:
         89:2e:bf:5f:4b:3e:f6:d9:84:ba:e6:a4:ba:25:98:47:9c:90:
         af:18:9d:2f:e5:62:7d:1b:99:6a:57:38:b1:9d:fc:8a:b1:1b:
         b8:cc:46:43:2a:b5:1e:22:a1:a1:ce:dc:4a:d7:4b:eb:9e:76:
         96:c4:68:22:aa:7f:69:4c:c0:db:fe:fe:93:25:d5:b2:3c:d9:
         9a:2c:84:74:12:5d:50:47:59:c4:2a:1e:25:89:15:7a:c6:0a:
         3d:82:d6:cb:8d:a9:18:21:db:e7:b4:dc:91:04:6e:d8:df:a0:
         44:4e:65:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxcYomAoOKU0Ew2d2dk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy
NTkzNDkwHhcNMjUwNDEzMTIwMTU1WhcNMjUwNDE0MTIwMTU1WjAzMTEwLwYDVQQD
Eyg4ODE5MzgxN2NiNTNjYjNlNjI3YzRkZTc5MWY5YjI1NTEzZTY2M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uuiHNELNFo2JmeoonfQp0VvuqiD
oyeXLUhBw9NhgW0KcUmfMlJP+s9sHQJajtyTSLZ7tcboRpNfyMwoPfV7uoj/iMCm
OzfCSpXWrsmxpWfXBlPFOugMdBX55HHXYwACNEzkxiWHRkpzbC1XzstKP5oSgXv8
WVqeuh2HsseHtYwcsdeGPklRFeJeQtRgBjcu5983VoiH+65VqMQp4OJiEoE5NXSK
7897KfBIS9yXL3zysoZrPTIKU73/pTYwht8DlTsYQRYoT/If4mqEBGr3leOKijNS
bGPQ+hst4mMLxwUy4qumU55NARApw7ucLCkRze43iqv274+POvh8gFha9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgZOBfLU8s+YnxN55H5slUT5mOtMB8GA1UdIwQY
MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt
YTkxNjM0ZDJhODA4LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4
LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB5ewhPd
HbKXzrV1DG5pGGQ6jGqs2rDEiQrACQA+ac1YWMe9JMP+mJES/G1tT3N6k4e16Wsu
r8zE8xXGi3M1AJrcItnW9SvZswZQtTIOXA7dN+wrExJ4tmDkC46MUEdp4KmFQwJB
D6cWziNJO1IC1PEMbqLUGh5lD9HUXxMm/szQjVfNonJOkLeHEP8QnVdXiS6/X0s+
9tmEuuakuiWYR5yQrxidL+VifRuZalc4sZ38irEbuMxGQyq1HiKhoc7cStdL6552
lsRoIqp/aUzA2/7+kyXVsjzZmiyEdBJdUEdZxCoeJYkVesYKPYLWy42pGCHb57Tc
kQRu2N+gRE5lqw==
-----END CERTIFICATE-----