Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File:                     FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier:          +xUhoZE16uuQbsJO2Mq1ZKHshbKtzB/kzMObHP9ESzA=
Subject key identifier:   E5:E7:22:D2:B4:C7:25:3D:97:06:BF:8E:C7:B4:89:E1:1F:35:FF:60
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer:       /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial:       01962F74E0815B4F8A668DCD1785087474B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number:          1086
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
                          2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: pH8FjkiUzz/MNxcvjPYx9C4hoMcr/WTa0q0k/Uu6m7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e0:81:5b:4f:8a:66:8d:cd:17:85:08:74:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=e5e722d2b4c7253d9706bf8ec7b489e11f35ff60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:70:f1:2e:3e:1d:44:2d:c6:1a:78:17:eb:
                    3d:fb:b5:a4:f0:7f:dc:f9:66:b4:ae:a7:9e:3a:2b:
                    ba:8a:9d:1b:8a:08:86:bb:cd:2c:e2:f3:c6:98:28:
                    de:9c:08:e3:46:1b:01:84:e1:f6:bb:da:db:8d:41:
                    8c:32:28:aa:72:c9:c7:2f:5b:61:bf:83:c3:57:b6:
                    51:3c:7a:6f:e4:c9:0e:6b:8e:08:8d:63:8b:52:12:
                    6c:e4:d0:a0:dd:d2:45:67:b4:bf:73:17:95:33:ae:
                    36:6b:80:c3:81:ee:4b:ec:85:07:e1:75:b1:e0:51:
                    a2:35:1e:b9:fd:55:4a:75:fd:3f:ad:e7:df:92:f2:
                    6f:c3:93:94:f0:2f:d5:c0:97:ef:75:cf:4a:6c:13:
                    5a:87:2c:d1:63:99:53:09:17:ef:1e:ad:9e:9e:f6:
                    08:72:9b:82:b0:8e:17:4b:87:06:0d:34:ee:d7:fb:
                    4d:22:8f:11:4b:0b:71:7b:0a:22:a0:13:4c:e3:e0:
                    99:ed:20:90:7e:b0:03:9e:36:cd:fd:77:28:c1:11:
                    ab:a3:cb:01:2e:c1:59:f7:47:25:6a:72:61:40:a7:
                    bc:59:9d:bb:53:d0:14:8e:c9:0d:e6:50:dd:dd:dc:
                    62:81:f4:fa:8e:9d:6b:51:86:e2:8a:b8:ec:09:52:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:22:D2:B4:C7:25:3D:97:06:BF:8E:C7:B4:89:E1:1F:35:FF:60
            X509v3 Authority Key Identifier:
                keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:2b:df:16:38:a2:20:a8:a2:8e:5c:58:a9:a2:c1:40:7e:
         f9:89:ea:19:25:32:3e:62:84:23:f4:07:0e:d1:9c:14:a3:94:
         cd:b1:62:ef:36:b6:f4:c5:d7:8a:ef:16:30:e7:da:7e:d6:8a:
         1a:82:a7:e6:44:84:9e:d9:f3:4f:79:b8:57:c5:03:9c:99:1d:
         f3:73:50:b6:9a:ac:7a:d5:7e:41:4b:55:b6:74:ad:9f:fd:7f:
         30:46:62:12:e9:a6:b2:5b:45:c0:80:b1:8a:d2:c9:52:63:fd:
         1d:01:72:e0:9e:0c:48:a0:62:49:94:b9:83:e9:d9:a3:ab:7b:
         0b:09:48:37:1e:8a:1d:40:39:d7:cb:da:65:e2:6c:f7:35:b7:
         77:94:f9:93:0f:75:95:0a:14:34:f1:a1:d1:32:87:65:fe:05:
         93:e6:c7:f1:fb:ba:9d:96:74:87:a2:8e:81:98:08:99:4d:39:
         54:83:61:ff:93:cb:22:9c:25:45:9e:c9:88:c4:4a:70:4b:b7:
         37:17:d0:48:d2:b4:72:2c:dd:99:73:73:43:8d:38:4b:65:b6:
         82:e2:23:5d:e4:88:61:56:3e:59:6a:8e:57:4f:5d:ea:00:9a:
         08:ab:05:a3:91:ef:c5:ec:40:c9:00:58:60:cd:2c:8d:90:7c:
         a4:36:26:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOCBW0+KZo3NF4UIdHSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzM2Yzc4ZDUyYmE4MTE1NzQxMDAyYjZiMDcwZDExN2Fl
OWJmY2QwHhcNMjUwNDEzMTQwMTUwWhcNMjUwNDE0MTQwMTUwWjAzMTEwLwYDVQQD
EyhlNWU3MjJkMmI0YzcyNTNkOTcwNmJmOGVjN2I0ODllMTFmMzVmZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbNw8S4+HUQtxhp4F+s9+7Wk8H/c
+Wa0rqeeOiu6ip0bigiGu80s4vPGmCjenAjjRhsBhOH2u9rbjUGMMiiqcsnHL1th
v4PDV7ZRPHpv5MkOa44IjWOLUhJs5NCg3dJFZ7S/cxeVM642a4DDge5L7IUH4XWx
4FGiNR65/VVKdf0/reffkvJvw5OU8C/VwJfvdc9KbBNahyzRY5lTCRfvHq2envYI
cpuCsI4XS4cGDTTu1/tNIo8RSwtxewoioBNM4+CZ7SCQfrADnjbN/XcowRGro8sB
LsFZ90clanJhQKe8WZ27U9AUjskN5lDd3dxigfT6jp1rUYbiirjsCVIWGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXnItK0xyU9lwa/jse0ieEfNf9gMB8GA1UdIwQY
MBaAFBQzbHjVK6gRV0EAK2sHDRF66b/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83MTgzYWYtNjdiOC00YTZjLWJhMWEt
YWRhZWZiZGVmYWM5LzEvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83MTgzYWYtNjdiOC00YTZjLWJhMWEtYWRhZWZiZGVmYWM5
LzEvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs24r3xY4
oiCooo5cWKmiwUB++YnqGSUyPmKEI/QHDtGcFKOUzbFi7za29MXXiu8WMOfaftaK
GoKn5kSEntnzT3m4V8UDnJkd83NQtpqsetV+QUtVtnStn/1/MEZiEummsltFwICx
itLJUmP9HQFy4J4MSKBiSZS5g+nZo6t7CwlINx6KHUA518vaZeJs9zW3d5T5kw91
lQoUNPGh0TKHZf4Fk+bH8fu6nZZ0h6KOgZgImU05VINh/5PLIpwlRZ7JiMRKcEu3
NxfQSNK0cizdmXNzQ404S2W2guIjXeSIYVY+WWqOV09d6gCaCKsFo5HvxexAyQBY
YM0sjZB8pDYm8A==
-----END CERTIFICATE-----