Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File:                     DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier:          CkHL+Q+a6MxaP6L0ZO2VwMl/j61s/Frd0WQ2xqbfdE4=
Subject key identifier:   12:F1:06:34:9F:43:24:02:ED:31:C7:6D:DC:6C:AA:94:9D:0B:EE:73
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer:       /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial:       01962ECFE39019FF8E708B3F9C14DEEB1519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number:          1218
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
                          2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: H9YweJ7uCVptUDGp0zAt8OO4RjWyaSkiXOSKuqCPS/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e3:90:19:ff:8e:70:8b:3f:9c:14:de:eb:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=12f106349f432402ed31c76ddc6caa949d0bee73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:92:a4:c0:39:36:68:44:1f:67:e5:1d:fd:
                    a1:21:3b:88:97:d2:ae:dc:78:02:62:57:72:ed:85:
                    36:41:8d:53:f4:ba:6a:9c:ff:dd:f7:ed:80:f9:51:
                    cc:43:12:82:46:ed:b1:d2:84:1c:c6:49:ea:08:60:
                    c8:e5:bb:57:f2:23:66:70:66:e8:f4:5c:31:ba:09:
                    c0:b3:f9:95:57:cc:77:9d:1c:13:ad:c0:49:25:9e:
                    17:46:85:64:78:7c:bc:e6:8f:a3:a3:98:5d:d0:82:
                    19:62:60:36:71:94:bf:be:2c:2a:90:40:14:b6:f4:
                    68:7a:01:28:37:e3:ec:ec:7b:74:a1:44:73:fc:12:
                    e6:f9:53:b2:0e:3f:52:b0:1c:30:6f:21:fc:cf:fa:
                    03:50:ee:d7:31:5a:15:64:84:c9:62:31:17:2b:f4:
                    a2:5f:b8:73:f6:d4:9e:b2:33:33:67:9f:dd:95:01:
                    f9:85:f0:e4:e3:d6:87:f7:f9:bf:df:4e:24:2c:88:
                    5b:fd:cb:0e:f5:60:d2:aa:ea:0a:ac:89:3e:0b:ce:
                    04:88:42:22:81:74:de:6a:8e:22:29:8d:bf:4e:52:
                    2c:10:77:19:9a:ae:7e:2a:28:22:ff:4f:0c:fb:21:
                    9f:4a:e0:64:79:43:50:4c:8f:6e:ed:69:34:ea:17:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F1:06:34:9F:43:24:02:ED:31:C7:6D:DC:6C:AA:94:9D:0B:EE:73
            X509v3 Authority Key Identifier:
                keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:9f:c9:03:5a:20:a3:a4:66:65:74:94:fa:4f:79:2e:eb:
         40:3a:f7:3b:f8:94:89:ef:55:23:2b:e3:b8:19:f2:0d:68:d5:
         e7:5e:25:d7:f2:07:85:c4:9e:19:df:38:8d:ab:be:4b:71:bf:
         ae:a9:07:8c:b4:b5:cb:9d:97:02:57:27:e9:0c:b1:10:31:1b:
         68:6a:09:f9:ed:01:9f:5c:7f:cb:95:c6:94:b0:7e:fd:d6:b7:
         7d:1e:57:b6:58:dd:5a:68:6b:cb:36:db:2e:9d:b2:db:57:24:
         23:c8:1d:a9:b7:94:3e:1b:75:c2:53:68:a0:7b:5f:d9:f5:be:
         34:06:9c:5f:44:12:04:e7:04:11:6d:73:1b:45:df:79:6d:de:
         82:f3:67:cc:a9:5f:a5:4a:7e:cf:3b:9a:eb:40:56:44:99:e9:
         b1:89:5d:1a:08:a2:f6:d4:4a:17:f5:76:e6:ff:17:56:c5:14:
         bb:79:a9:52:82:a7:15:7f:dc:b1:4e:cf:22:e0:b6:e2:06:2b:
         53:5a:76:11:be:c7:e0:39:29:7d:ed:28:f7:ea:51:f8:54:38:
         bd:86:96:b5:8a:45:a5:37:32:c3:19:36:89:c0:30:a3:3a:65:
         46:36:21:1a:91:d5:e5:a5:72:2d:f6:3f:a3:c5:2e:3f:a8:66:
         04:2e:5f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz+OQGf+OcIs/nBTe6xUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy
Nzg2NWQwHhcNMjUwNDEzMTEwMTM4WhcNMjUwNDE0MTEwMTM4WjAzMTEwLwYDVQQD
EygxMmYxMDYzNDlmNDMyNDAyZWQzMWM3NmRkYzZjYWE5NDlkMGJlZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDeSpMA5NmhEH2flHf2hITuIl9Ku
3HgCYldy7YU2QY1T9LpqnP/d9+2A+VHMQxKCRu2x0oQcxknqCGDI5btX8iNmcGbo
9FwxugnAs/mVV8x3nRwTrcBJJZ4XRoVkeHy85o+jo5hd0IIZYmA2cZS/viwqkEAU
tvRoegEoN+Ps7Ht0oURz/BLm+VOyDj9SsBwwbyH8z/oDUO7XMVoVZITJYjEXK/Si
X7hz9tSesjMzZ5/dlQH5hfDk49aH9/m/304kLIhb/csO9WDSquoKrIk+C84EiEIi
gXTeao4iKY2/TlIsEHcZmq5+Kigi/08M+yGfSuBkeUNQTI9u7Wk06hexYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLxBjSfQyQC7THHbdxsqpSdC+5zMB8GA1UdIwQY
MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt
ZDIyMTIzMzk3YjUwLzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw
LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaqfyQNa
IKOkZmV0lPpPeS7rQDr3O/iUie9VIyvjuBnyDWjV514l1/IHhcSeGd84jau+S3G/
rqkHjLS1y52XAlcn6QyxEDEbaGoJ+e0Bn1x/y5XGlLB+/da3fR5XtljdWmhryzbb
Lp2y21ckI8gdqbeUPht1wlNooHtf2fW+NAacX0QSBOcEEW1zG0XfeW3egvNnzKlf
pUp+zzua60BWRJnpsYldGgii9tRKF/V25v8XVsUUu3mpUoKnFX/csU7PIuC24gYr
U1p2Eb7H4Dkpfe0o9+pR+FQ4vYaWtYpFpTcywxk2icAwozplRjYhGpHV5aVyLfY/
o8UuP6hmBC5f1w==
-----END CERTIFICATE-----