Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File:                     0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier:          dhSMMPz6QF8zdOqcr8Gso/ysIkwEIVAL8nYGC43E2xY=
Subject key identifier:   95:9F:B7:EE:33:5F:AA:D6:65:5B:78:F5:63:1F:BA:9A:9F:9C:97:06
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer:       /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial:       01962F3D76AC470F4FEB6BE5A84E55AB4FC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: QPNtWYZpawyPN9+zvK7kP3z0NEPQHdMNz77FwsmIQJw=)
                          2: UON5AT9SXUWq39L68I_y2_ZUikk.roa (hash: JwjZjFuzIaj/y6AQtmJH9bJqGEr4cg/qlCiSjx+pXxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:ac:47:0f:4f:eb:6b:e5:a8:4e:55:ab:4f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=959fb7ee335faad6655b78f5631fba9a9f9c9706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:a7:c5:c6:db:05:c8:51:4b:f4:99:99:2c:
                    ca:a9:38:8e:1f:76:48:c7:6c:b1:11:0f:c1:7f:fa:
                    f6:93:b9:c5:88:2b:6c:b1:cf:b3:b2:cf:a4:af:a6:
                    dc:d7:14:d7:02:fb:86:ac:77:b5:e4:c1:33:51:2a:
                    96:ee:db:f0:fa:7a:67:45:c8:b4:f7:ea:be:52:4c:
                    a2:15:b9:26:37:11:92:43:c0:02:8c:dc:36:64:34:
                    45:4e:b0:c6:d3:8d:09:82:9a:c0:07:32:c9:a6:5c:
                    f8:c0:37:36:46:28:d5:fd:de:e3:2e:f5:22:73:13:
                    0a:2a:8e:e9:e9:34:13:f8:a4:61:52:5b:b6:0f:7e:
                    6c:4e:b3:6c:2f:15:1a:ee:d7:8f:22:85:02:b9:7a:
                    c3:c6:01:11:57:a3:57:98:2d:81:11:9a:18:93:3c:
                    28:43:87:81:09:fe:0a:71:a2:97:29:15:25:b7:99:
                    05:64:03:c0:6d:22:1d:fb:86:17:5a:7a:8c:97:3c:
                    13:77:84:2c:a7:50:91:9d:3e:eb:2b:48:eb:8b:fb:
                    81:13:42:41:ff:0f:2e:cd:a2:e9:a9:df:a9:a4:ad:
                    b1:ac:24:cf:e8:55:1c:82:54:5f:c1:c2:33:8e:15:
                    60:0b:6a:ed:d8:7c:13:a9:4f:3b:8d:dd:19:d3:ca:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9F:B7:EE:33:5F:AA:D6:65:5B:78:F5:63:1F:BA:9A:9F:9C:97:06
            X509v3 Authority Key Identifier:
                keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:ef:46:b2:29:d0:5d:25:06:01:b0:3a:70:54:65:0f:5c:
         a8:84:e0:96:04:a7:4e:fb:a1:2b:5d:7b:9f:0f:8b:94:ec:c0:
         f5:bf:91:5c:d7:20:9a:ca:7f:d9:93:66:7e:e7:73:ee:2c:43:
         22:00:47:6d:6e:c5:10:23:3e:45:ad:2d:b8:6a:e6:8e:83:6c:
         14:55:0c:0c:39:54:d4:b7:ad:62:b1:e2:67:81:67:35:67:1d:
         9a:f8:cb:da:1d:54:e1:03:d5:95:bc:28:8d:ed:24:8a:87:13:
         13:44:87:80:fa:99:96:35:0c:13:c1:e7:83:b5:e1:01:24:bd:
         86:7b:74:9a:e6:7d:1b:34:82:bf:61:08:10:66:9b:6a:6c:b3:
         c6:9c:b3:87:51:24:c0:0e:13:28:a7:eb:08:f2:1e:8b:57:d9:
         30:ba:4e:22:88:bf:cb:f8:7c:7f:6e:68:4d:a8:c8:0c:fd:32:
         28:82:44:af:6c:6b:f7:66:cb:7c:f5:df:ea:e8:01:d0:8c:53:
         60:53:9c:cb:7d:31:ae:15:45:6c:7c:5b:20:58:7f:47:64:9d:
         cb:54:f3:a4:4d:81:7a:a5:42:09:7f:49:3b:2f:7b:21:3a:58:
         50:1e:49:45:28:55:6b:c5:fb:a8:e1:ec:b0:fe:e9:a8:45:ee:
         cd:75:3a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXasRw9P62vlqE5Vq0/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNGFkZWNkODRiYjE3NDhiZDM1Yjk5ZWNlYTQ2NzcyZTAx
ZWM5MzUwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
Eyg5NTlmYjdlZTMzNWZhYWQ2NjU1Yjc4ZjU2MzFmYmE5YTlmOWM5NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzISnxcbbBchRS/SZmSzKqTiOH3ZI
x2yxEQ/Bf/r2k7nFiCtssc+zss+kr6bc1xTXAvuGrHe15MEzUSqW7tvw+npnRci0
9+q+UkyiFbkmNxGSQ8ACjNw2ZDRFTrDG040JgprABzLJplz4wDc2RijV/d7jLvUi
cxMKKo7p6TQT+KRhUlu2D35sTrNsLxUa7tePIoUCuXrDxgERV6NXmC2BEZoYkzwo
Q4eBCf4KcaKXKRUlt5kFZAPAbSId+4YXWnqMlzwTd4Qsp1CRnT7rK0jri/uBE0JB
/w8uzaLpqd+ppK2xrCTP6FUcglRfwcIzjhVgC2rt2HwTqU87jd0Z08plPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWft+4zX6rWZVt49WMfupqfnJcGMB8GA1UdIwQY
MBaAFNJK3s2EuxdIvTW5ns6kZ3LgHsk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEt
NDhhNjA3YmJlMjVlLzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEtNDhhNjA3YmJlMjVl
LzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuXvRrIp
0F0lBgGwOnBUZQ9cqITglgSnTvuhK117nw+LlOzA9b+RXNcgmsp/2ZNmfudz7ixD
IgBHbW7FECM+Ra0tuGrmjoNsFFUMDDlU1LetYrHiZ4FnNWcdmvjL2h1U4QPVlbwo
je0kiocTE0SHgPqZljUME8Hng7XhASS9hnt0muZ9GzSCv2EIEGabamyzxpyzh1Ek
wA4TKKfrCPIei1fZMLpOIoi/y/h8f25oTajIDP0yKIJEr2xr92bLfPXf6ugB0IxT
YFOcy30xrhVFbHxbIFh/R2Sdy1TzpE2BeqVCCX9JOy97ITpYUB5JRShVa8X7qOHs
sP7pqEXuzXU6lw==
-----END CERTIFICATE-----