Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File:                     evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier:          MzgPPxnaUMHbbafVHn0Qkoi1AtkIrLByopGhSW331dM=
Subject key identifier:   55:7F:C2:7E:EF:51:D9:A3:BC:0B:69:F9:BC:47:9D:F6:D8:68:CB:BF
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer:       /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial:       01962E61CDBB537FB5CA4633C590E6BDDE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number:          0225
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
                          2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: IrTMWvn1DhaWLL6HHqyWPT2JsXybTItM3aWPk0Gb1hI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cd:bb:53:7f:b5:ca:46:33:c5:90:e6:bd:de:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=557fc27eef51d9a3bc0b69f9bc479df6d868cbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:61:40:9c:c7:ad:65:13:bb:03:cd:6e:3c:
                    e4:17:52:c8:35:fa:b6:0b:03:bb:91:70:ae:95:fe:
                    1d:ac:61:77:b4:2f:8c:80:d4:4e:a1:86:82:06:35:
                    08:b1:3c:25:51:15:8b:de:76:cc:db:0b:8d:be:b2:
                    88:ee:27:45:3a:40:49:a1:c4:39:1a:17:19:3e:f1:
                    83:d3:fe:9d:86:33:ee:61:9e:87:ca:9e:6c:c6:24:
                    38:a6:f9:c3:3f:39:54:e4:37:08:60:d2:27:60:ef:
                    39:38:0a:31:14:52:4e:ab:06:21:14:9d:c3:0a:4c:
                    0b:e4:86:41:2e:36:1f:38:1f:f6:cd:2d:19:de:f9:
                    f7:01:5d:2b:83:78:f3:0e:69:06:0e:61:ad:a0:3e:
                    9c:50:fc:78:8e:7a:65:0a:dd:fe:25:36:07:90:f4:
                    ef:ae:66:d3:8b:43:ac:84:38:5e:51:c8:41:b3:96:
                    b5:6e:80:77:6e:98:75:bb:95:99:20:0a:55:7c:8c:
                    3e:c1:c9:de:65:07:63:cb:06:2d:5d:32:f4:71:4b:
                    72:d5:ed:ce:c1:15:48:36:e9:87:f0:f0:0f:c9:d0:
                    ed:f2:a0:83:ef:d8:42:1b:a5:45:2b:c1:f1:6d:6f:
                    f6:d3:32:3e:08:37:09:89:d1:7a:13:f9:0d:4f:e0:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7F:C2:7E:EF:51:D9:A3:BC:0B:69:F9:BC:47:9D:F6:D8:68:CB:BF
            X509v3 Authority Key Identifier:
                keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:4d:90:ba:a8:ed:28:31:ce:6d:7a:6f:b7:90:66:b6:07:
         14:67:22:e7:02:d9:d9:af:7c:63:2b:ca:b3:58:ef:92:cb:94:
         2d:17:09:14:b7:95:d3:95:03:4f:3e:93:87:82:b3:bc:14:fb:
         39:28:7b:68:65:4d:e0:13:5b:ec:d2:53:ca:69:5d:8d:1b:ec:
         da:04:4a:6a:34:32:3a:d8:0f:24:5b:a7:4f:b9:eb:5e:df:8f:
         84:d7:f4:e6:1a:59:6f:3e:0e:05:33:88:eb:73:85:b6:76:f2:
         6f:6c:38:10:ab:42:ff:d4:f1:9a:85:c1:ac:c1:ee:cd:3f:5d:
         7d:61:07:70:d5:89:e1:7b:2f:19:71:93:0d:73:8e:0f:a4:55:
         6d:d3:ca:23:d1:62:a8:00:5c:05:a0:8d:54:ca:2c:ac:04:64:
         d7:c2:c2:60:fd:f0:ee:bd:f3:2b:cd:1d:18:66:6b:9f:96:2a:
         9c:4b:a3:dc:ec:1f:91:7c:0f:84:40:6b:c1:d1:ec:23:c2:f1:
         c0:bb:5f:cb:ff:70:0e:8c:c6:fa:ea:ed:32:96:7d:1a:dc:a9:
         64:01:0d:fd:4c:07:71:7a:ff:43:6c:2a:01:b0:e4:49:5b:ea:
         e9:68:c2:bf:bb:8f:82:98:17:02:51:c0:e2:a9:b2:84:9e:1c:
         9b:36:1c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYc27U3+1ykYzxZDmvd4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjFhN2JmNzQyODVkYjJlODIwOTFmYmY0NjNhMmVlZjZl
M2E1NzgwHhcNMjUwNDEzMDkwMTIzWhcNMjUwNDE0MDkwMTIzWjAzMTEwLwYDVQQD
Eyg1NTdmYzI3ZWVmNTFkOWEzYmMwYjY5ZjliYzQ3OWRmNmQ4NjhjYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GhhQJzHrWUTuwPNbjzkF1LINfq2
CwO7kXCulf4drGF3tC+MgNROoYaCBjUIsTwlURWL3nbM2wuNvrKI7idFOkBJocQ5
GhcZPvGD0/6dhjPuYZ6Hyp5sxiQ4pvnDPzlU5DcIYNInYO85OAoxFFJOqwYhFJ3D
CkwL5IZBLjYfOB/2zS0Z3vn3AV0rg3jzDmkGDmGtoD6cUPx4jnplCt3+JTYHkPTv
rmbTi0OshDheUchBs5a1boB3bph1u5WZIApVfIw+wcneZQdjywYtXTL0cUty1e3O
wRVINumH8PAPydDt8qCD79hCG6VFK8HxbW/20zI+CDcJidF6E/kNT+CoJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV/wn7vUdmjvAtp+bxHnfbYaMu/MB8GA1UdIwQY
MBaAFHrxp790KF2y6CCR+/Rjou7246V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTIt
YjcxMTRiNjlmODRjLzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTItYjcxMTRiNjlmODRj
LzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGxNkLqo
7Sgxzm16b7eQZrYHFGci5wLZ2a98YyvKs1jvksuULRcJFLeV05UDTz6Th4KzvBT7
OSh7aGVN4BNb7NJTymldjRvs2gRKajQyOtgPJFunT7nrXt+PhNf05hpZbz4OBTOI
63OFtnbyb2w4EKtC/9TxmoXBrMHuzT9dfWEHcNWJ4XsvGXGTDXOOD6RVbdPKI9Fi
qABcBaCNVMosrARk18LCYP3w7r3zK80dGGZrn5YqnEuj3OwfkXwPhEBrwdHsI8Lx
wLtfy/9wDozG+urtMpZ9GtypZAEN/UwHcXr/Q2wqAbDkSVvq6WjCv7uPgpgXAlHA
4qmyhJ4cmzYcRA==
-----END CERTIFICATE-----