Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File:                     tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier:          LEasX8ITM0Mesgfhjzr33SMhZXft8HAEdNLw4jjtsUo=
Subject key identifier:   BB:31:65:C1:C5:96:6B:6B:E8:75:3B:05:CF:27:96:07:AF:D5:F1:EF
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer:       /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial:       01962E2B4226B5FBBB1F710A130906178DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number:          0496
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
                          2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: a5nE9wQoU80TZXlXz/aP8jTaxEoCAumeO00o9g4pU0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:26:b5:fb:bb:1f:71:0a:13:09:06:17:8d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=bb3165c1c5966b6be8753b05cf279607afd5f1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:73:4d:e6:50:20:a8:9f:d1:37:51:f3:7f:
                    c4:01:e2:b0:72:73:80:67:e2:3c:96:70:e2:a8:e7:
                    c9:66:3c:20:68:6d:ef:51:aa:9e:1e:0c:61:a4:ea:
                    54:ef:a2:7c:8d:54:60:69:b0:52:a0:d6:ab:cc:2f:
                    4d:05:d8:be:3d:c5:e9:a1:48:7a:e5:63:c8:0b:0e:
                    83:d1:ac:b3:5d:e9:fc:3f:3f:26:11:2f:78:79:32:
                    3b:5a:0e:f5:21:b1:16:d5:9d:51:d5:a3:6d:de:5b:
                    3d:a2:1d:c8:a8:5c:53:e0:fc:73:8d:87:54:2b:df:
                    14:bd:9e:ae:97:89:60:50:f1:2f:7b:bc:bc:73:84:
                    ce:b0:56:36:cf:99:84:47:25:c0:ea:d4:7a:e1:27:
                    15:07:df:f8:75:bb:5f:6d:ba:58:a1:da:bd:a6:85:
                    8d:50:a8:e0:e3:19:a1:1c:e3:89:4e:da:17:55:81:
                    ce:9b:b2:04:06:12:04:83:e0:8c:91:82:6d:1f:ef:
                    a7:57:2d:2d:2e:9d:4e:1a:eb:b1:67:24:98:6b:2b:
                    11:bb:96:65:ec:77:ed:09:b3:c3:dd:c5:da:51:e5:
                    67:81:a0:d2:35:dc:14:0f:87:02:78:1e:16:50:61:
                    bd:87:8a:64:19:e5:36:29:73:1c:92:f3:17:a0:80:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:65:C1:C5:96:6B:6B:E8:75:3B:05:CF:27:96:07:AF:D5:F1:EF
            X509v3 Authority Key Identifier:
                keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:85:05:70:0f:a6:7f:e7:e3:2a:87:88:79:a9:d1:17:6d:
         13:41:b7:45:1a:3a:72:f6:7d:0b:48:37:65:a8:f0:b0:1b:4b:
         c5:5c:49:91:14:28:17:d8:23:c7:fb:87:be:cc:5c:c1:1c:95:
         96:ef:22:d9:c3:01:a2:3c:a4:ec:33:d2:19:e8:c5:fc:fa:ca:
         a6:91:04:f8:6b:5d:ba:17:31:f4:29:d9:b9:32:5d:2b:fa:b3:
         39:86:b2:df:b6:6a:7e:78:ce:1d:7a:04:a1:b2:03:f7:ec:1b:
         4f:ff:a9:28:ec:b3:bb:f9:e6:46:c7:da:9f:31:c0:8e:dc:27:
         45:db:7e:55:c2:7b:d0:cb:8e:94:35:cf:e8:df:30:b7:aa:27:
         79:49:94:7b:d3:4e:91:62:ce:16:09:b6:36:3f:80:ec:66:71:
         4c:d5:b5:ea:91:0b:4a:9a:e6:bf:9b:82:4b:19:28:4f:63:99:
         bc:fd:3c:60:ea:d9:bf:c6:0e:04:89:9c:ef:ed:35:d7:26:a7:
         ec:ce:09:4a:b3:8e:c8:0d:d5:9c:78:bd:62:a0:8d:b6:87:8b:
         de:51:e5:41:44:77:67:3a:74:c8:04:ee:8d:f0:f7:5f:75:65:
         35:b6:86:54:31:3d:0b:b2:04:94:ec:5a:9f:37:8a:72:83:e6:
         64:17:35:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0Imtfu7H3EKEwkGF42+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EyhiYjMxNjVjMWM1OTY2YjZiZTg3NTNiMDVjZjI3OTYwN2FmZDVmMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYhzTeZQIKif0TdR83/EAeKwcnOA
Z+I8lnDiqOfJZjwgaG3vUaqeHgxhpOpU76J8jVRgabBSoNarzC9NBdi+PcXpoUh6
5WPICw6D0ayzXen8Pz8mES94eTI7Wg71IbEW1Z1R1aNt3ls9oh3IqFxT4PxzjYdU
K98UvZ6ul4lgUPEve7y8c4TOsFY2z5mERyXA6tR64ScVB9/4dbtfbbpYodq9poWN
UKjg4xmhHOOJTtoXVYHOm7IEBhIEg+CMkYJtH++nVy0tLp1OGuuxZySYaysRu5Zl
7HftCbPD3cXaUeVngaDSNdwUD4cCeB4WUGG9h4pkGeU2KXMckvMXoICwfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsxZcHFlmtr6HU7Bc8nlgev1fHvMB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcCFBXAP
pn/n4yqHiHmp0RdtE0G3RRo6cvZ9C0g3ZajwsBtLxVxJkRQoF9gjx/uHvsxcwRyV
lu8i2cMBojyk7DPSGejF/PrKppEE+Gtduhcx9CnZuTJdK/qzOYay37ZqfnjOHXoE
obID9+wbT/+pKOyzu/nmRsfanzHAjtwnRdt+VcJ70MuOlDXP6N8wt6oneUmUe9NO
kWLOFgm2Nj+A7GZxTNW16pELSprmv5uCSxkoT2OZvP08YOrZv8YOBImc7+011yan
7M4JSrOOyA3VnHi9YqCNtoeL3lHlQUR3Zzp0yATujfD3X3VlNbaGVDE9C7IElOxa
nzeKcoPmZBc1+Q==
-----END CERTIFICATE-----