Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File:                     4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier:          HkQHVmLxf5dJ+seOpKQpBAf6pNuln+dg0zsa/n3PVvE=
Subject key identifier:   B0:DE:D9:CA:4B:23:AE:45:89:28:BB:7F:44:9B:56:F3:0A:6F:76:46
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer:       /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial:       01962F3DC0BF1131C782AE095784703C99D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number:          1241
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: G9OvgxC9wsOahIfryFYIxxnP49QGINv5LkGhDd9XXcY=)
                          2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:bf:11:31:c7:82:ae:09:57:84:70:3c:99:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=b0ded9ca4b23ae458928bb7f449b56f30a6f7646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:f6:0c:8b:dc:b2:12:dc:71:e1:bf:4d:7d:
                    29:87:12:7d:01:23:a9:1a:2f:72:2d:7e:32:bb:2e:
                    48:7a:18:29:d9:5c:0d:42:b4:85:71:6a:91:1c:aa:
                    aa:e8:17:81:ff:05:65:1a:63:67:5b:e0:fb:ce:9c:
                    10:b0:5b:6c:fa:ec:48:1a:be:f0:8c:1a:a7:aa:0f:
                    d8:ee:d6:e5:4c:81:9d:31:b1:a5:9b:f9:0e:7c:ca:
                    46:e5:5e:ef:3f:1b:de:b9:c5:a6:92:06:56:0d:86:
                    99:0a:e6:79:d5:5d:1e:e9:36:5c:58:96:74:cb:27:
                    14:52:2e:12:be:27:8f:84:40:86:2c:da:2f:55:0f:
                    95:44:c6:c4:82:de:54:26:fa:72:b2:36:6a:de:42:
                    65:5b:28:74:da:20:8d:30:0c:c7:91:98:98:20:ce:
                    8a:7e:b1:e1:e5:9b:d6:02:6b:09:dd:9c:a8:e2:c7:
                    5e:bd:17:7d:b4:48:48:c5:5e:22:8b:e4:7b:55:15:
                    47:6a:8a:28:3e:89:b8:3c:10:a8:78:7f:73:27:3a:
                    27:90:19:3e:09:bf:1f:97:dd:41:72:4e:31:f2:a8:
                    3b:3f:7f:47:c1:20:bf:62:e3:b9:16:c4:97:53:58:
                    f1:47:8b:d4:55:03:85:dc:86:62:a2:4d:5a:2c:db:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:D9:CA:4B:23:AE:45:89:28:BB:7F:44:9B:56:F3:0A:6F:76:46
            X509v3 Authority Key Identifier:
                keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d9:cc:ab:a4:81:12:1b:94:61:64:6d:51:bb:34:a3:3f:0e:
         d2:e3:38:87:a2:4d:f0:d3:ca:e1:e3:d3:77:eb:3a:5c:5c:95:
         3e:b1:66:24:9d:dc:a2:db:85:66:9b:c4:14:8c:89:a0:81:b1:
         e0:a0:34:9e:d7:5f:e1:69:c1:c2:86:52:f4:3d:df:dd:f2:3e:
         51:e2:00:c7:40:21:69:0f:8b:1a:ab:16:3a:da:43:17:af:a5:
         8b:37:63:72:e2:fe:d4:11:4e:57:4e:62:b0:c7:6a:5c:67:58:
         d7:dc:63:70:df:53:db:1c:53:c2:38:64:71:fd:7d:84:6f:ec:
         1c:c8:1d:12:5d:51:9d:b1:cf:ed:3f:39:08:6e:cb:b3:14:6e:
         bb:7c:93:4c:65:be:8a:58:99:93:ed:d2:48:8d:40:3c:01:41:
         5e:a1:78:ff:93:b3:87:47:45:d2:c0:8f:74:74:c0:5c:04:e5:
         eb:b1:8d:7d:e3:aa:df:5b:30:33:fe:e2:92:48:cc:ce:a5:7d:
         95:37:14:23:75:04:61:45:70:33:df:84:29:c6:f3:b1:08:33:
         f4:7e:a3:5a:02:b3:f7:15:de:e7:8a:eb:cf:2c:df:66:ad:da:
         cd:8e:8a:e6:16:45:0c:b6:08:f5:95:69:18:70:61:2f:eb:33:
         11:1a:a1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcC/ETHHgq4JV4RwPJnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1
YWE2YTgwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
EyhiMGRlZDljYTRiMjNhZTQ1ODkyOGJiN2Y0NDliNTZmMzBhNmY3NjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf32DIvcshLcceG/TX0phxJ9ASOp
Gi9yLX4yuy5Iehgp2VwNQrSFcWqRHKqq6BeB/wVlGmNnW+D7zpwQsFts+uxIGr7w
jBqnqg/Y7tblTIGdMbGlm/kOfMpG5V7vPxveucWmkgZWDYaZCuZ51V0e6TZcWJZ0
yycUUi4SviePhECGLNovVQ+VRMbEgt5UJvpysjZq3kJlWyh02iCNMAzHkZiYIM6K
frHh5ZvWAmsJ3Zyo4sdevRd9tEhIxV4ii+R7VRVHaoooPom4PBCoeH9zJzonkBk+
Cb8fl91Bck4x8qg7P39HwSC/YuO5FsSXU1jxR4vUVQOF3IZiok1aLNukBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDe2cpLI65FiSi7f0SbVvMKb3ZGMB8GA1UdIwQY
MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt
OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0
LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNnMq6SB
EhuUYWRtUbs0oz8O0uM4h6JN8NPK4ePTd+s6XFyVPrFmJJ3cotuFZpvEFIyJoIGx
4KA0ntdf4WnBwoZS9D3f3fI+UeIAx0AhaQ+LGqsWOtpDF6+lizdjcuL+1BFOV05i
sMdqXGdY19xjcN9T2xxTwjhkcf19hG/sHMgdEl1RnbHP7T85CG7LsxRuu3yTTGW+
iliZk+3SSI1APAFBXqF4/5Ozh0dF0sCPdHTAXATl67GNfeOq31swM/7ikkjMzqV9
lTcUI3UEYUVwM9+EKcbzsQgz9H6jWgKz9xXe54rrzyzfZq3azY6K5hZFDLYI9ZVp
GHBhL+szERqhaw==
-----END CERTIFICATE-----