Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File:                     r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier:          rp+g987rliOwrKXcQciq2cxEyQQJu5q/YjEqlYFflVA=
Subject key identifier:   3F:BC:FE:09:79:32:70:26:10:5C:63:3E:35:A6:F1:3D:24:B3:BF:59
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer:       /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial:       01962E2B2DBFDFC745D6C3BF2BFE5E0A99FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number:          131E
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
                          2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: ZUopSSEpkZRi+iGnqdrvN2LiDZMH00Mn5bMhGhrlzew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:bf:df:c7:45:d6:c3:bf:2b:fe:5e:0a:99:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=3fbcfe0979327026105c633e35a6f13d24b3bf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:83:70:cb:c5:a4:a0:79:bf:8b:ab:e4:41:
                    d9:72:36:2f:09:da:fb:40:ea:a8:52:3e:11:17:33:
                    93:02:98:96:11:94:35:7f:82:55:05:89:dc:c9:ae:
                    c7:06:df:8e:17:b2:ea:67:dc:11:2d:ce:ac:63:d7:
                    03:39:8a:42:1d:30:9e:fc:88:7f:1a:c8:8e:65:e4:
                    34:f9:62:8b:e1:0c:c2:c1:1b:17:b0:82:21:b1:85:
                    92:24:fe:3e:2c:79:3b:a1:f1:d6:da:dd:3c:48:88:
                    cd:59:db:3c:48:55:ee:e5:61:3e:69:9e:ab:db:db:
                    9f:0c:4f:38:46:83:6e:9d:a0:e1:2d:14:94:d3:a4:
                    c4:14:e1:c3:b6:19:fe:54:e3:62:77:d1:5c:99:cb:
                    a6:ad:6b:0f:ce:4a:45:a4:00:04:8c:e4:5e:0e:24:
                    87:11:fb:af:df:f6:4f:3d:40:5e:02:74:6b:51:bc:
                    4d:f5:6d:59:c8:57:a4:85:35:ea:64:7d:44:d2:33:
                    3c:fc:18:c8:79:e2:62:f9:15:b5:b8:d9:35:a7:54:
                    87:a2:d7:15:74:cb:02:50:25:3e:00:58:8c:b5:0f:
                    9c:b6:9b:b1:d3:ad:dc:5c:cb:e8:40:df:ca:a0:e8:
                    34:ba:73:f9:47:06:db:c3:48:14:0e:61:6a:bd:68:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BC:FE:09:79:32:70:26:10:5C:63:3E:35:A6:F1:3D:24:B3:BF:59
            X509v3 Authority Key Identifier:
                keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:88:1e:45:25:a9:30:c4:ac:fb:6b:10:b8:47:88:c7:11:f5:
         00:2a:40:32:d0:87:ed:34:c7:ae:d6:1a:2c:4f:c5:a5:a8:fd:
         77:9a:73:0f:6d:5c:04:b1:15:2e:34:e4:e8:8b:e1:1b:35:d1:
         23:24:b1:61:88:54:28:3e:19:f2:dc:89:12:41:bb:ce:79:24:
         b5:8e:03:92:9c:a1:2c:01:4a:88:ca:42:72:c9:7c:69:56:5e:
         9e:06:60:00:fe:f9:f3:76:48:d3:2a:bd:2e:69:fe:dd:67:8a:
         2a:a8:7a:c9:94:9c:c4:c8:40:6e:65:0f:57:88:b7:80:72:b2:
         83:d7:61:71:d9:12:dc:aa:54:3f:4c:8e:b6:b5:c7:b5:1b:1f:
         49:d3:1c:aa:c7:20:fa:a7:11:e6:c7:f6:0d:cf:39:9c:32:5c:
         06:36:68:61:9b:11:8c:fe:bd:5a:30:0c:0c:32:1c:35:b7:e7:
         ef:31:a6:e6:d4:2c:30:2e:af:a7:b1:46:e9:cb:35:ee:3e:e1:
         d0:19:33:d1:a4:6b:35:c4:88:e8:59:91:0e:c0:f9:1c:b4:3d:
         bd:82:cf:a6:87:9e:e5:a6:c4:58:da:33:dc:a7:ee:22:91:64:
         1f:9c:b8:f9:7c:0e:f6:f2:7d:0d:47:94:47:43:76:17:dc:5f:
         b4:b0:e5:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKy2/38dF1sO/K/5eCpn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTlkMzUzMzFjOWVmZTMzYzk1MzA3NjkzMjVhZThlZjU1
MGZmZGEwHhcNMjUwNDEzMDgwMTQzWhcNMjUwNDE0MDgwMTQzWjAzMTEwLwYDVQQD
EygzZmJjZmUwOTc5MzI3MDI2MTA1YzYzM2UzNWE2ZjEzZDI0YjNiZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW+DcMvFpKB5v4ur5EHZcjYvCdr7
QOqoUj4RFzOTApiWEZQ1f4JVBYncya7HBt+OF7LqZ9wRLc6sY9cDOYpCHTCe/Ih/
GsiOZeQ0+WKL4QzCwRsXsIIhsYWSJP4+LHk7ofHW2t08SIjNWds8SFXu5WE+aZ6r
29ufDE84RoNunaDhLRSU06TEFOHDthn+VONid9FcmcumrWsPzkpFpAAEjOReDiSH
Efuv3/ZPPUBeAnRrUbxN9W1ZyFekhTXqZH1E0jM8/BjIeeJi+RW1uNk1p1SHotcV
dMsCUCU+AFiMtQ+ctpux063cXMvoQN/KoOg0unP5Rwbbw0gUDmFqvWgPPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+8/gl5MnAmEFxjPjWm8T0ks79ZMB8GA1UdIwQY
MBaAFK9Z01Mxye/jPJUwdpMlro71UP/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUt
YTU5ZTZlOWFiY2M4LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUtYTU5ZTZlOWFiY2M4
LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4geRSWp
MMSs+2sQuEeIxxH1ACpAMtCH7TTHrtYaLE/Fpaj9d5pzD21cBLEVLjTk6IvhGzXR
IySxYYhUKD4Z8tyJEkG7znkktY4DkpyhLAFKiMpCcsl8aVZengZgAP7583ZI0yq9
Lmn+3WeKKqh6yZScxMhAbmUPV4i3gHKyg9dhcdkS3KpUP0yOtrXHtRsfSdMcqscg
+qcR5sf2Dc85nDJcBjZoYZsRjP69WjAMDDIcNbfn7zGm5tQsMC6vp7FG6cs17j7h
0Bkz0aRrNcSI6FmRDsD5HLQ9vYLPpoee5abEWNoz3KfuIpFkH5y4+XwO9vJ9DUeU
R0N2F9xftLDlBQ==
-----END CERTIFICATE-----