Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File:                     En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier:          mXub3Gk9JhUkCGajdLC1NEVgyBX54MlLGS/Tkg/HHsY=
Subject key identifier:   7F:83:75:94:74:32:88:F0:08:CB:2C:44:EE:59:49:5C:43:63:6D:56
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer:       /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial:       01962E2AFC0813ECE776199D4FCAFDE44026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number:          106A
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=)
                          2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: nn7St3Z5B/rOv7PVo9EI0brAWiF22Utz4r5jB/I3J4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:08:13:ec:e7:76:19:9d:4f:ca:fd:e4:40:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=7f837594743288f008cb2c44ee59495c43636d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:5a:de:67:ef:3e:15:e1:2a:b7:87:23:a6:
                    88:6b:e9:e6:97:3d:8c:a1:8a:80:89:bb:b8:e5:b1:
                    75:35:f5:c6:ce:0f:eb:f1:a2:9b:ea:6d:b9:82:71:
                    1f:9a:74:9e:78:4b:ba:85:23:a1:df:89:a0:b2:fd:
                    e1:19:6d:28:96:f8:1d:ca:33:2a:7f:0f:68:69:a3:
                    1b:83:42:1f:cf:23:9d:77:69:13:fa:56:8f:87:20:
                    02:94:ce:3c:89:df:ca:69:65:18:ad:d0:d1:61:7f:
                    08:b5:eb:10:84:c6:a9:7a:13:26:4e:ca:27:2d:f3:
                    97:c6:cd:53:9f:09:dc:cb:fc:fe:72:b8:fc:f5:d5:
                    00:04:0e:0c:91:4b:53:27:66:c5:ef:58:29:f6:0e:
                    c6:26:fe:6f:19:5c:a8:cb:46:f9:ed:8a:c3:7d:74:
                    7d:a6:07:a7:34:c5:ad:db:d4:e2:7c:4c:f5:61:24:
                    ee:65:06:09:96:6f:f2:b1:1a:30:11:c1:27:20:fd:
                    5f:cb:11:7d:d8:23:d0:3b:d8:e9:69:2d:16:b0:cd:
                    7d:84:d7:c9:d3:c5:ef:53:a1:61:b9:0c:91:55:19:
                    0b:51:77:62:83:fe:61:e7:89:4c:36:10:80:6d:c5:
                    14:1f:3a:31:85:10:1d:37:ee:48:ea:f1:6a:a3:f0:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:83:75:94:74:32:88:F0:08:CB:2C:44:EE:59:49:5C:43:63:6D:56
            X509v3 Authority Key Identifier:
                keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:f5:04:58:e4:0b:c0:89:a3:b5:4c:45:6a:a3:a8:53:61:
         25:cf:df:b8:86:33:f8:d5:2f:a4:7e:d8:73:4f:ee:98:c4:02:
         41:c8:58:0d:4d:94:35:38:26:f2:b5:f7:bf:96:6c:7e:25:75:
         3f:92:14:3a:71:da:10:18:62:02:84:93:13:a1:60:a7:8c:db:
         a4:53:a6:ab:55:25:e8:6a:bf:bc:77:19:e2:2d:da:d9:5d:aa:
         7e:12:75:c0:a3:d5:97:55:1e:f6:b7:a8:2c:c5:e0:dd:78:f3:
         5c:08:5c:7b:7b:13:5f:fd:13:80:26:a6:2d:e5:38:89:b9:45:
         5b:b8:ce:16:27:1c:11:d4:e2:da:a6:80:2b:1c:74:50:b8:ca:
         c6:10:18:5b:90:62:22:3b:66:f8:73:66:3e:f3:3f:15:a4:49:
         a5:45:3b:9a:6c:c6:b4:5e:c9:5e:ac:fa:48:f8:03:99:e0:d1:
         00:2d:31:ed:8d:28:fa:aa:e4:51:78:f2:12:b5:04:ee:5b:fa:
         7c:e3:c2:c8:c1:4e:e6:c0:31:a3:54:bb:64:4b:90:e5:07:b4:
         fd:02:85:a5:b3:31:03:b3:21:e0:f1:ff:d8:ec:8d:02:dc:78:
         69:22:be:4f:9a:81:95:19:d5:9f:06:ca:e9:43:45:bb:5b:78:
         14:94:84:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvwIE+zndhmdT8r95EAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyN2U5ZjlkNWZkNDVkYTAxMDY5NWNjNDIxMmFmN2U2N2I3
YjM0OGYwHhcNMjUwNDEzMDgwMTMwWhcNMjUwNDE0MDgwMTMwWjAzMTEwLwYDVQQD
Eyg3ZjgzNzU5NDc0MzI4OGYwMDhjYjJjNDRlZTU5NDk1YzQzNjM2ZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Za3mfvPhXhKreHI6aIa+nmlz2M
oYqAibu45bF1NfXGzg/r8aKb6m25gnEfmnSeeEu6hSOh34mgsv3hGW0olvgdyjMq
fw9oaaMbg0IfzyOdd2kT+laPhyAClM48id/KaWUYrdDRYX8ItesQhMapehMmTson
LfOXxs1Tnwncy/z+crj89dUABA4MkUtTJ2bF71gp9g7GJv5vGVyoy0b57YrDfXR9
pgenNMWt29TifEz1YSTuZQYJlm/ysRowEcEnIP1fyxF92CPQO9jpaS0WsM19hNfJ
08XvU6FhuQyRVRkLUXdig/5h54lMNhCAbcUUHzoxhRAdN+5I6vFqo/AfWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+DdZR0MojwCMssRO5ZSVxDY21WMB8GA1UdIwQY
MBaAFBJ+n51f1F2gEGlcxCEq9+Z7ezSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzIt
MTVhOWYyMWNhYTg1LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzItMTVhOWYyMWNhYTg1
LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2r1BFjk
C8CJo7VMRWqjqFNhJc/fuIYz+NUvpH7Yc0/umMQCQchYDU2UNTgm8rX3v5ZsfiV1
P5IUOnHaEBhiAoSTE6Fgp4zbpFOmq1Ul6Gq/vHcZ4i3a2V2qfhJ1wKPVl1Ue9reo
LMXg3XjzXAhce3sTX/0TgCamLeU4iblFW7jOFiccEdTi2qaAKxx0ULjKxhAYW5Bi
Ijtm+HNmPvM/FaRJpUU7mmzGtF7JXqz6SPgDmeDRAC0x7Y0o+qrkUXjyErUE7lv6
fOPCyMFO5sAxo1S7ZEuQ5Qe0/QKFpbMxA7Mh4PH/2OyNAtx4aSK+T5qBlRnVnwbK
6UNFu1t4FJSEMw==
-----END CERTIFICATE-----