Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File:                     pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier:          axXAnLu++FO9kPuWXBk077uPbe8H8BQoAtghi7a1590=
Subject key identifier:   0B:AB:7C:89:1B:52:0B:EB:E7:D3:FE:CF:2B:F8:FE:40:76:B9:69:C0
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer:       /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial:       01962ECFED41178ECDE695231EB13F4296E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number:          0573
Signing time:             Sun 13 Apr 2025 11:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:40 +0000
Files and hashes:         1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
                          2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: g1OD0XupMpPy14i8a84wOeIt56M1yja2i4tr0MfPwtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ed:41:17:8e:cd:e6:95:23:1e:b1:3f:42:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
        Validity
            Not Before: Apr 13 11:01:40 2025 GMT
            Not After : Apr 14 11:01:40 2025 GMT
        Subject: CN=0bab7c891b520bebe7d3fecf2bf8fe4076b969c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:27:1e:eb:77:f4:4a:07:2a:3e:0b:b4:3c:
                    c4:02:99:88:0e:17:b1:32:c3:be:1d:0c:d0:f9:6d:
                    82:75:ac:a2:2e:f2:81:4b:fa:df:b6:55:60:dd:45:
                    4f:4e:37:32:b7:7a:99:41:9e:e8:62:b2:99:27:ed:
                    8a:a2:a6:04:76:81:9b:08:8e:cd:92:31:c0:d4:14:
                    51:d2:c7:5b:50:16:83:8f:f1:e4:cd:93:21:ae:91:
                    63:7c:5b:b5:84:93:7f:47:37:43:ed:ec:61:bf:be:
                    cb:80:2f:48:53:4c:e7:b7:4a:14:be:4b:8d:bc:73:
                    54:4f:9e:96:87:6f:17:f7:08:92:f0:4a:94:57:c9:
                    fe:7e:f1:5b:ca:db:b4:5b:a2:a0:1e:70:c4:6a:35:
                    dc:34:0b:a4:d5:f2:b5:9f:1d:4c:59:09:3d:21:a3:
                    93:8d:29:af:b4:4a:cf:68:30:2e:22:67:9f:c6:c9:
                    da:4b:0e:bc:0b:33:57:55:95:80:89:47:8f:15:75:
                    66:2c:06:ff:85:f5:90:75:06:4c:2b:7b:38:db:66:
                    c2:50:14:95:92:b1:8c:13:30:22:9d:b8:dd:65:63:
                    00:a7:a1:4f:61:4c:4e:c9:28:d0:76:6d:db:68:a9:
                    2d:05:b7:38:7b:d3:04:14:71:7b:f2:b7:cd:2f:47:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AB:7C:89:1B:52:0B:EB:E7:D3:FE:CF:2B:F8:FE:40:76:B9:69:C0
            X509v3 Authority Key Identifier:
                keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:cb:38:3b:80:3b:66:b9:c9:19:bf:69:f0:34:d8:96:b4:2c:
         e8:86:51:33:ca:0d:40:1e:9a:6b:4f:cf:fe:32:fa:08:bb:16:
         3f:5c:85:72:d4:4b:bc:a4:18:ef:c0:9f:12:88:c4:1f:30:c5:
         16:42:27:fb:1e:3e:09:47:e0:a3:f9:31:6e:37:69:91:af:82:
         40:df:0f:3b:d2:da:ef:f4:78:56:fe:e6:7c:d1:2a:eb:45:aa:
         ea:07:85:5f:37:2d:eb:e1:0b:23:0e:7b:51:f9:81:2c:5a:9f:
         9d:01:55:39:c7:1c:9d:d9:a9:02:15:09:94:48:66:88:13:3d:
         0c:9e:ee:66:55:5f:1d:40:cd:71:2c:cb:d3:cd:d9:13:10:11:
         ab:6a:22:4e:24:7d:9c:70:5d:ca:5f:d1:08:10:ad:59:40:2e:
         cb:d0:ee:25:5d:9c:42:d9:7b:b0:73:d7:27:c4:4d:6a:73:db:
         56:31:3f:37:d8:3c:ac:4c:13:6a:23:ee:23:ef:09:3a:0c:f8:
         e0:0e:67:b1:50:40:97:4b:d8:bc:69:48:5b:96:69:18:eb:2b:
         95:63:39:1e:9d:0f:20:c6:f6:b3:41:ed:1a:ba:66:98:cf:41:
         70:6d:e0:0f:3d:c6:a6:1b:0a:cc:0d:c3:3a:40:aa:c2:57:02:
         4e:21:4f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz+1BF47N5pUjHrE/QpbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OGRhNTIwOWJkNmNmOTBjNmRmNmQ3ZTZkNjNhNjM5NTVi
YWQ0YjUwHhcNMjUwNDEzMTEwMTQwWhcNMjUwNDE0MTEwMTQwWjAzMTEwLwYDVQQD
EygwYmFiN2M4OTFiNTIwYmViZTdkM2ZlY2YyYmY4ZmU0MDc2Yjk2OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPEnHut39EoHKj4LtDzEApmIDhex
MsO+HQzQ+W2CdayiLvKBS/rftlVg3UVPTjcyt3qZQZ7oYrKZJ+2KoqYEdoGbCI7N
kjHA1BRR0sdbUBaDj/HkzZMhrpFjfFu1hJN/RzdD7exhv77LgC9IU0znt0oUvkuN
vHNUT56Wh28X9wiS8EqUV8n+fvFbytu0W6KgHnDEajXcNAuk1fK1nx1MWQk9IaOT
jSmvtErPaDAuImefxsnaSw68CzNXVZWAiUePFXVmLAb/hfWQdQZMK3s422bCUBSV
krGMEzAinbjdZWMAp6FPYUxOySjQdm3baKktBbc4e9MEFHF78rfNL0cv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAurfIkbUgvr59P+zyv4/kB2uWnAMB8GA1UdIwQY
MBaAFKSNpSCb1s+Qxt9tfm1jpjlVutS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEkybElKdld6NURHMzIxLWJXT21PVlc2MUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNjMxYmYtZGU5NS00Y2ZmLWIwZGQt
NWNiMmQ3MjU4YjBkLzEvcEkybElKdld6NURHMzIxLWJXT21PVlc2MUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lNjMxYmYtZGU5NS00Y2ZmLWIwZGQtNWNiMmQ3MjU4YjBk
LzEvcEkybElKdld6NURHMzIxLWJXT21PVlc2MUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAycs4O4A7
ZrnJGb9p8DTYlrQs6IZRM8oNQB6aa0/P/jL6CLsWP1yFctRLvKQY78CfEojEHzDF
FkIn+x4+CUfgo/kxbjdpka+CQN8PO9La7/R4Vv7mfNEq60Wq6geFXzct6+ELIw57
UfmBLFqfnQFVOcccndmpAhUJlEhmiBM9DJ7uZlVfHUDNcSzL083ZExARq2oiTiR9
nHBdyl/RCBCtWUAuy9DuJV2cQtl7sHPXJ8RNanPbVjE/N9g8rEwTaiPuI+8JOgz4
4A5nsVBAl0vYvGlIW5ZpGOsrlWM5Hp0PIMb2s0HtGrpmmM9BcG3gDz3GphsKzA3D
OkCqwlcCTiFPjA==
-----END CERTIFICATE-----