Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File:                     sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier:          zkxBMNv87COg/sL4lOxz+kM5jMQvu2NNjsZE7OSk5Fg=
Subject key identifier:   CC:26:41:1D:19:FA:E7:2E:F2:A5:B2:2B:97:48:DA:5A:2F:3D:82:7F
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer:       /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial:       01962ECF90D29A22AC4CF4C1697DA00FD7BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=)
                          2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: +C6Zwo15MRRGbmNr0off8B5QNSB3vujDsh8AekaH+dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:d2:9a:22:ac:4c:f4:c1:69:7d:a0:0f:d7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=cc26411d19fae72ef2a5b22b9748da5a2f3d827f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:bb:8e:f0:34:a4:cb:cb:5f:64:7e:67:98:
                    1f:d3:6e:77:a8:b6:3e:4f:f2:1a:b6:61:64:17:29:
                    82:06:22:8d:ba:34:a2:b5:a1:0d:51:c2:48:8a:5a:
                    f7:2a:dc:29:f3:c5:da:23:bd:60:02:ca:86:7b:66:
                    e2:33:b3:e2:13:fe:0f:62:44:38:b8:0b:43:a7:e2:
                    b3:df:e5:e0:0b:30:ea:33:06:a5:a1:30:ab:11:55:
                    66:1a:3a:e7:cb:48:16:b7:5a:6c:f9:46:4c:e2:e3:
                    47:3e:35:83:5c:4a:e9:5b:7e:99:04:41:b4:7a:cf:
                    4f:cf:f4:ff:fc:3e:ba:b9:3c:29:42:8b:38:b0:8c:
                    f8:58:35:0c:64:d5:01:c3:6e:aa:71:68:19:db:90:
                    4c:2e:62:3c:7e:47:0b:8d:47:fb:56:65:ed:74:96:
                    e0:f9:dc:fb:bb:51:43:ca:01:5e:44:88:2b:19:af:
                    30:4f:0c:c3:7a:1f:b5:92:b3:f6:84:e2:d5:a4:76:
                    f1:c1:e9:5d:46:d8:d8:8d:03:14:71:8d:40:87:7e:
                    12:0d:db:13:60:06:f2:98:c5:d6:45:cb:00:99:aa:
                    93:ff:e3:55:46:1f:25:54:10:26:ef:d0:d5:78:87:
                    93:2f:a1:c5:1d:c8:d8:45:b4:59:11:8e:a2:85:e6:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:41:1D:19:FA:E7:2E:F2:A5:B2:2B:97:48:DA:5A:2F:3D:82:7F
            X509v3 Authority Key Identifier:
                keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:00:9c:90:67:35:c2:a5:22:4d:8f:1e:15:66:a5:88:30:
         85:c0:7c:28:5d:43:08:d7:a9:92:c4:fb:95:e0:9a:5b:ca:ad:
         65:95:20:73:6e:6e:a4:60:76:8f:49:20:c2:29:f9:99:e3:b6:
         a8:bc:6a:4a:ed:22:8e:26:bd:b7:32:f7:a6:84:29:6a:95:a9:
         0a:5c:b3:9a:1d:52:8a:42:72:08:30:25:52:a4:d4:fe:10:b9:
         46:cc:30:fa:0d:2a:ef:c1:3f:25:7e:e3:01:db:c5:ea:50:ab:
         13:e4:49:f7:60:07:b6:2d:d4:cf:e3:6c:d2:80:e9:94:8e:43:
         8b:b5:05:4a:78:47:a7:ec:73:61:88:ac:9a:35:c6:76:50:20:
         1d:73:96:92:6b:95:65:ba:6b:63:64:7f:46:3f:17:b8:f3:fd:
         96:b7:9e:10:9f:32:56:c8:f2:8d:45:d8:58:51:31:93:ba:71:
         d5:26:c9:4e:1c:dd:03:68:97:5d:cf:5d:56:83:97:b6:19:f7:
         22:15:03:4d:72:c7:06:98:b1:58:c2:f0:b9:46:33:dc:c3:1a:
         41:ab:e8:d4:6d:16:71:e4:c6:ea:e4:13:15:7c:99:d1:bc:51:
         e4:36:9e:dd:c5:cd:c0:16:eb:1f:a8:fe:3b:da:93:4b:9d:c8:
         c7:5d:c7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5DSmiKsTPTBaX2gD9e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWQ4NTY5ODhjNjJhNjAyMDczZWMyOTM4NTgxZGQ0YTU4
NmZiOGYwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
EyhjYzI2NDExZDE5ZmFlNzJlZjJhNWIyMmI5NzQ4ZGE1YTJmM2Q4MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9y7jvA0pMvLX2R+Z5gf0253qLY+
T/IatmFkFymCBiKNujSitaENUcJIilr3Ktwp88XaI71gAsqGe2biM7PiE/4PYkQ4
uAtDp+Kz3+XgCzDqMwaloTCrEVVmGjrny0gWt1ps+UZM4uNHPjWDXErpW36ZBEG0
es9Pz/T//D66uTwpQos4sIz4WDUMZNUBw26qcWgZ25BMLmI8fkcLjUf7VmXtdJbg
+dz7u1FDygFeRIgrGa8wTwzDeh+1krP2hOLVpHbxweldRtjYjQMUcY1Ah34SDdsT
YAbymMXWRcsAmaqT/+NVRh8lVBAm79DVeIeTL6HFHcjYRbRZEY6ihebVlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwmQR0Z+ucu8qWyK5dI2lovPYJ/MB8GA1UdIwQY
MBaAFLJdhWmIxipgIHPsKThYHdSlhvuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYt
OWQwODIxMTdkOGMxLzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYtOWQwODIxMTdkOGMx
LzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMkAnJBn
NcKlIk2PHhVmpYgwhcB8KF1DCNepksT7leCaW8qtZZUgc25upGB2j0kgwin5meO2
qLxqSu0ijia9tzL3poQpapWpClyzmh1SikJyCDAlUqTU/hC5Rsww+g0q78E/JX7j
AdvF6lCrE+RJ92AHti3Uz+Ns0oDplI5Di7UFSnhHp+xzYYismjXGdlAgHXOWkmuV
ZbprY2R/Rj8XuPP9lreeEJ8yVsjyjUXYWFExk7px1SbJThzdA2iXXc9dVoOXthn3
IhUDTXLHBpixWMLwuUYz3MMaQavo1G0WceTG6uQTFXyZ0bxR5Dae3cXNwBbrH6j+
O9qTS53Ix13HhQ==
-----END CERTIFICATE-----