Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File:                     kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier:          TeQHq2C5r1guPzg4L/hhXdtxx2De4kCSg7osXVTNoPo=
Subject key identifier:   5D:1A:AD:5A:ED:98:16:CA:8D:EE:D1:36:41:B7:B9:32:F2:AB:A2:44
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer:       /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial:       01962E2B07C01FE55C22F70A6F663548C875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: OIn+vF4Y98d5/v+hbpzpBq7hOoedRkeNM7Q2pWUDygM=)
                          2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:07:c0:1f:e5:5c:22:f7:0a:6f:66:35:48:c8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=5d1aad5aed9816ca8deed13641b7b932f2aba244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2f:e9:3a:05:de:c7:d6:fc:23:4c:35:7f:f0:
                    00:37:72:af:1d:39:1d:6b:e7:50:28:2b:84:ee:12:
                    2c:ca:e0:5e:2a:73:70:71:88:b4:cb:db:7b:1c:a7:
                    cc:74:72:2f:f5:ff:68:29:63:cd:2b:81:dd:11:8f:
                    9c:f4:f4:d0:0d:ee:ed:f8:b8:38:ea:f7:48:09:39:
                    64:11:2a:42:c5:cb:b8:6e:14:b1:49:62:5c:80:ab:
                    83:ee:36:9f:a2:a3:02:f9:ca:44:c0:ac:1d:db:8b:
                    40:9f:65:de:1f:63:1d:0d:59:94:c2:0f:16:a5:72:
                    7d:81:e8:49:01:3c:b3:70:f1:a8:a3:d2:a5:d9:bf:
                    3a:dc:3e:04:74:ad:ec:58:ae:3d:e9:91:8d:80:9d:
                    f0:42:50:72:08:48:75:03:f4:bd:7d:21:5f:da:4a:
                    d3:2d:13:2a:a3:05:ea:da:31:fd:57:73:f1:48:05:
                    14:1c:4d:7f:e4:42:c7:cd:fb:15:97:0f:22:11:50:
                    91:1b:f8:81:45:a1:b0:71:c3:34:f4:90:ad:3a:03:
                    3e:ea:1c:d4:31:d3:63:50:dc:a4:67:14:00:13:5b:
                    db:c3:31:f5:be:4d:f9:c5:22:ab:c4:2b:45:ce:85:
                    2c:1f:d0:2f:95:29:8c:c0:aa:4f:73:ab:45:ef:b0:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1A:AD:5A:ED:98:16:CA:8D:EE:D1:36:41:B7:B9:32:F2:AB:A2:44
            X509v3 Authority Key Identifier:
                keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:0f:5d:c0:39:99:5b:64:e9:b2:27:9f:f8:91:3b:83:96:
         70:a5:26:28:75:6c:8b:2b:ae:3f:1b:57:e1:23:d1:db:fd:13:
         75:9d:9c:8f:67:11:c6:fe:3b:6e:e8:6a:e6:ff:68:d0:e7:7c:
         aa:d3:ef:d0:ee:a6:e9:b0:eb:b9:54:65:51:e9:65:df:4b:07:
         77:07:6c:6e:6e:cb:00:0c:9b:26:23:2d:bb:7e:36:15:ec:5c:
         e7:83:7f:b9:c1:83:fa:f2:b1:64:da:13:79:84:4a:3e:89:cb:
         90:a2:4b:77:88:7c:ac:2c:75:27:00:44:4d:f6:bc:24:8b:36:
         c2:5b:2e:d4:2e:a2:e9:51:00:eb:7e:c2:6d:4c:97:26:1a:cf:
         f6:33:a8:fa:27:3f:0c:6e:dc:20:49:d7:56:55:09:a3:a6:6f:
         8e:c8:40:4b:6b:3d:52:33:0f:9b:59:9c:6a:e6:e3:e5:a5:e9:
         1c:ff:55:ec:3b:d7:80:e8:2c:50:55:43:2c:64:0d:07:73:c8:
         d8:ae:60:34:9b:42:d2:da:ad:fe:d7:4c:d7:0b:3c:58:fe:24:
         5a:73:d2:b4:0b:14:48:e4:fb:3a:45:89:e2:02:0c:cb:24:4b:
         4d:a6:ee:17:3a:83:d1:1e:a0:8e:49:80:9b:22:54:85:42:bf:
         66:26:84:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwfAH+VcIvcKb2Y1SMh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx
YmMxY2IwHhcNMjUwNDEzMDgwMTMzWhcNMjUwNDE0MDgwMTMzWjAzMTEwLwYDVQQD
Eyg1ZDFhYWQ1YWVkOTgxNmNhOGRlZWQxMzY0MWI3YjkzMmYyYWJhMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C/pOgXex9b8I0w1f/AAN3KvHTkd
a+dQKCuE7hIsyuBeKnNwcYi0y9t7HKfMdHIv9f9oKWPNK4HdEY+c9PTQDe7t+Lg4
6vdICTlkESpCxcu4bhSxSWJcgKuD7jafoqMC+cpEwKwd24tAn2XeH2MdDVmUwg8W
pXJ9gehJATyzcPGoo9Kl2b863D4EdK3sWK496ZGNgJ3wQlByCEh1A/S9fSFf2krT
LRMqowXq2jH9V3PxSAUUHE1/5ELHzfsVlw8iEVCRG/iBRaGwccM09JCtOgM+6hzU
MdNjUNykZxQAE1vbwzH1vk35xSKrxCtFzoUsH9AvlSmMwKpPc6tF77Ac4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0arVrtmBbKje7RNkG3uTLyq6JEMB8GA1UdIwQY
MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt
OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl
LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1oPXcA5
mVtk6bInn/iRO4OWcKUmKHVsiyuuPxtX4SPR2/0TdZ2cj2cRxv47buhq5v9o0Od8
qtPv0O6m6bDruVRlUell30sHdwdsbm7LAAybJiMtu342Fexc54N/ucGD+vKxZNoT
eYRKPonLkKJLd4h8rCx1JwBETfa8JIs2wlsu1C6i6VEA637CbUyXJhrP9jOo+ic/
DG7cIEnXVlUJo6ZvjshAS2s9UjMPm1mcaubj5aXpHP9V7DvXgOgsUFVDLGQNB3PI
2K5gNJtC0tqt/tdM1ws8WP4kWnPStAsUSOT7OkWJ4gIMyyRLTabuFzqD0R6gjkmA
myJUhUK/ZiaEHA==
-----END CERTIFICATE-----