Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File:                     27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier:          iomMynfJYjJCo953VPOGbF+5eEyEAOnvIewCSqv3v48=
Subject key identifier:   5F:A9:4C:58:D1:88:F9:B5:7B:4E:10:C2:23:96:E1:43:13:2E:33:1F
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer:       /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial:       01962F0665ED6DAE972901D931D6415010AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number:          08C9
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: MVEFe4GjmNp2pFZqgjMFgNQL1zznkg5T8uFTvf+wzRM=)
                          2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=)
                          3: neN1QwNYSQjNWxXWAsZe6DG1rPc.roa (hash: Z0Ho0Y/N/zGAg76im8e3nFlaRKeJIa8WBq6ey1xBkt4=)
                          4: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:65:ed:6d:ae:97:29:01:d9:31:d6:41:50:10:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=5fa94c58d188f9b57b4e10c22396e143132e331f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:6f:a3:51:0a:1d:88:bd:8d:c7:90:14:f5:
                    4e:ca:bf:6b:d9:9e:86:2a:bf:f3:7e:7f:38:43:18:
                    d3:c1:37:86:8c:65:31:ab:84:3f:76:80:0c:3b:01:
                    17:e3:5a:37:0f:96:cc:62:dd:2e:17:a0:5f:66:9e:
                    80:8d:d7:59:42:44:52:2c:c0:94:42:e6:88:18:80:
                    1f:f2:78:c5:ae:db:66:6d:3a:32:fe:c5:5a:4d:fb:
                    26:8d:5b:0b:b9:d4:3a:59:c4:12:74:41:54:d6:f5:
                    c6:b3:9b:41:a8:cc:9b:41:cf:be:eb:3e:5c:66:91:
                    51:8f:2a:e5:00:92:95:de:99:3b:f4:1a:0f:6f:b1:
                    da:80:60:30:91:f8:f1:3f:91:d6:d3:0e:b1:44:49:
                    42:bd:27:e4:d5:38:57:ff:32:de:29:f4:81:c0:36:
                    9e:b2:b7:c5:bb:12:d9:c2:3a:19:e3:e4:88:7d:7d:
                    a5:09:cd:ed:65:e1:38:85:4e:28:1f:04:70:97:00:
                    52:c2:79:49:c4:47:01:6a:2a:ef:a9:97:fd:3f:a3:
                    a2:61:56:68:5d:5a:98:5d:ab:66:c2:45:d6:6f:b0:
                    10:69:f0:27:d0:6b:44:74:99:04:bc:47:ea:9c:8d:
                    5f:e6:4a:95:61:06:de:51:67:ca:54:13:43:ec:87:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:4C:58:D1:88:F9:B5:7B:4E:10:C2:23:96:E1:43:13:2E:33:1F
            X509v3 Authority Key Identifier:
                keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:5b:9e:dd:57:5a:d4:18:d0:fc:5c:e8:60:e0:66:a4:f6:
         1a:bb:df:9b:a6:fb:21:2c:fe:ff:ee:bd:30:97:da:47:ba:35:
         09:44:fa:02:46:09:6e:ef:bb:74:02:8c:58:94:14:78:4f:4e:
         23:90:3b:d8:17:a2:5d:82:05:35:b5:43:59:5b:f8:54:ad:a6:
         db:29:b5:bb:7c:5b:d1:72:db:1d:e3:35:da:4b:d0:e5:72:79:
         7d:87:76:4f:f0:38:58:c1:6f:c0:a7:8e:25:a7:f0:0d:99:07:
         f6:56:92:cc:b6:06:5b:a0:7b:f0:36:16:48:15:fa:47:c2:8f:
         61:f3:01:95:35:1b:e5:ed:f8:1f:47:51:e5:9b:18:c9:8a:5c:
         37:d5:b2:64:13:ef:fd:36:07:f4:13:32:3f:3a:e9:a6:7d:e5:
         49:23:9e:79:84:1c:32:fd:46:5a:e9:e7:8d:8b:2f:16:06:9b:
         c1:4b:27:02:18:0a:32:40:4b:6c:4f:06:97:7a:f2:95:39:8e:
         d1:d8:b2:2a:d5:8b:bc:f1:93:08:8e:20:fa:83:85:6c:b7:8a:
         2d:50:86:94:5b:39:94:58:6a:cf:a5:5a:27:e7:51:fe:0f:e5:
         00:62:5c:dc:f5:15:26:5d:ba:6a:47:0d:e7:98:57:ae:77:75:
         fc:60:b6:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmXtba6XKQHZMdZBUBCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux
YjBmM2YwHhcNMjUwNDEzMTIwMTEwWhcNMjUwNDE0MTIwMTEwWjAzMTEwLwYDVQQD
Eyg1ZmE5NGM1OGQxODhmOWI1N2I0ZTEwYzIyMzk2ZTE0MzEzMmUzMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUFvo1EKHYi9jceQFPVOyr9r2Z6G
Kr/zfn84QxjTwTeGjGUxq4Q/doAMOwEX41o3D5bMYt0uF6BfZp6AjddZQkRSLMCU
QuaIGIAf8njFrttmbToy/sVaTfsmjVsLudQ6WcQSdEFU1vXGs5tBqMybQc++6z5c
ZpFRjyrlAJKV3pk79BoPb7HagGAwkfjxP5HW0w6xRElCvSfk1ThX/zLeKfSBwDae
srfFuxLZwjoZ4+SIfX2lCc3tZeE4hU4oHwRwlwBSwnlJxEcBairvqZf9P6OiYVZo
XVqYXatmwkXWb7AQafAn0GtEdJkEvEfqnI1f5kqVYQbeUWfKVBND7IdwEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+pTFjRiPm1e04QwiOW4UMTLjMfMB8GA1UdIwQY
MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt
ZGY1NzJmZTk2NzJhLzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh
LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPFbnt1X
WtQY0Pxc6GDgZqT2Grvfm6b7ISz+/+69MJfaR7o1CUT6AkYJbu+7dAKMWJQUeE9O
I5A72BeiXYIFNbVDWVv4VK2m2ym1u3xb0XLbHeM12kvQ5XJ5fYd2T/A4WMFvwKeO
JafwDZkH9laSzLYGW6B78DYWSBX6R8KPYfMBlTUb5e34H0dR5ZsYyYpcN9WyZBPv
/TYH9BMyPzrppn3lSSOeeYQcMv1GWunnjYsvFgabwUsnAhgKMkBLbE8Gl3rylTmO
0diyKtWLvPGTCI4g+oOFbLeKLVCGlFs5lFhqz6VaJ+dR/g/lAGJc3PUVJl26akcN
55hXrnd1/GC2RQ==
-----END CERTIFICATE-----