Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          52iDR7ZPPjLl5D3kjgo286Rlbu7Zs7T5kp2yX5/SeHk=
Subject key identifier:   17:87:1C:ED:27:D2:2E:15:9D:F3:14:12:DA:E5:48:CC:99:B1:AA:B8
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       01962E2B3101B968518489C01224F65EA649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: nl6JIRMUwqha3LeoDWPWNyS+ipyKuBPWKPVMR0mTTSM=)
                          2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:31:01:b9:68:51:84:89:c0:12:24:f6:5e:a6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=17871ced27d22e159df31412dae548cc99b1aab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:a1:98:12:b8:61:15:75:f1:76:f7:52:31:
                    29:db:3c:16:b5:e0:1d:84:8d:36:07:2a:ef:51:3a:
                    ba:15:1a:5d:f2:e3:6c:98:83:a3:87:50:11:62:22:
                    75:41:c1:5b:fb:49:42:d7:ec:bd:21:24:a6:28:29:
                    d2:21:fe:ab:3d:71:e1:5d:87:43:61:8d:ee:51:36:
                    c1:ba:94:a8:44:34:60:2f:4d:9f:46:d6:6b:10:75:
                    c5:86:92:dc:70:51:26:32:59:c3:01:aa:51:d9:ad:
                    83:7f:af:8d:e6:7b:35:68:aa:d9:01:a1:d0:0a:b6:
                    6b:94:0e:98:c0:84:75:7f:7b:48:44:1f:a1:ae:52:
                    b6:06:28:4f:a0:a4:30:6d:33:10:84:c5:8d:f2:ce:
                    d8:17:01:ef:0f:a8:5a:3f:5d:4d:f6:0e:73:4a:a3:
                    19:9d:75:b4:3f:ee:a4:08:49:39:70:7d:1d:bb:74:
                    72:9f:35:2c:af:48:48:43:74:c9:4c:30:73:23:b1:
                    1f:a4:ab:9b:82:da:26:2c:71:a2:cf:d2:34:4f:c9:
                    52:e7:0b:13:ed:d5:d3:49:c5:24:d6:03:cc:0b:24:
                    47:aa:09:1e:80:da:24:5c:22:30:c5:1d:10:23:21:
                    4f:21:24:db:bc:ee:74:a1:cb:1c:64:e2:4d:83:a5:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:87:1C:ED:27:D2:2E:15:9D:F3:14:12:DA:E5:48:CC:99:B1:AA:B8
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5c:08:17:f7:17:e9:0f:ae:48:8f:cf:35:ae:1a:09:b7:b9:
         5f:51:01:0c:8c:fa:11:26:a6:72:54:dd:da:93:31:7d:94:04:
         cc:2d:f3:65:3e:db:41:fb:9f:23:96:83:11:fb:d0:2c:8a:f7:
         55:80:31:a7:c7:45:7c:1c:38:9e:eb:21:1f:61:a9:9c:0f:63:
         46:4a:62:e4:a6:2c:5c:7b:9b:34:ce:e4:6b:e5:b6:61:d8:f2:
         61:bb:73:0c:5e:4b:b1:37:9c:2c:15:60:00:4a:c0:bc:6d:8d:
         df:77:8d:e2:23:52:d7:9b:fa:21:25:cf:7a:c3:38:4f:ca:c2:
         d1:c5:fb:2b:d3:1d:1f:e9:22:23:31:7b:12:fa:01:74:0c:db:
         e4:d2:16:21:5b:47:4c:83:af:80:69:b9:ec:25:6a:f1:15:2b:
         e2:48:36:23:26:81:25:a9:b7:8f:aa:88:bd:5d:25:2c:83:89:
         82:1b:89:9f:85:2b:07:1c:f9:ee:6e:38:ce:16:4a:44:03:57:
         83:a2:e4:aa:dc:72:ee:e0:62:0a:bc:39:cd:32:d3:b5:5e:95:
         2e:cf:70:d0:ca:1c:5c:90:55:b2:35:45:19:d0:94:a7:02:c1:
         7f:db:03:3d:25:3d:1a:b6:64:14:3b:2b:38:5d:67:ac:02:f1:
         1b:11:7f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzEBuWhRhInAEiT2XqZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1
ZGNhZjUwHhcNMjUwNDEzMDgwMTQ0WhcNMjUwNDE0MDgwMTQ0WjAzMTEwLwYDVQQD
EygxNzg3MWNlZDI3ZDIyZTE1OWRmMzE0MTJkYWU1NDhjYzk5YjFhYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6hmBK4YRV18Xb3UjEp2zwWteAd
hI02ByrvUTq6FRpd8uNsmIOjh1ARYiJ1QcFb+0lC1+y9ISSmKCnSIf6rPXHhXYdD
YY3uUTbBupSoRDRgL02fRtZrEHXFhpLccFEmMlnDAapR2a2Df6+N5ns1aKrZAaHQ
CrZrlA6YwIR1f3tIRB+hrlK2BihPoKQwbTMQhMWN8s7YFwHvD6haP11N9g5zSqMZ
nXW0P+6kCEk5cH0du3RynzUsr0hIQ3TJTDBzI7EfpKubgtomLHGiz9I0T8lS5wsT
7dXTScUk1gPMCyRHqgkegNokXCIwxR0QIyFPISTbvO50ocscZOJNg6WCOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeHHO0n0i4VnfMUEtrlSMyZsaq4MB8GA1UdIwQY
MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt
NjliOGQ2YjUzZThjLzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj
LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1wIF/cX
6Q+uSI/PNa4aCbe5X1EBDIz6ESamclTd2pMxfZQEzC3zZT7bQfufI5aDEfvQLIr3
VYAxp8dFfBw4nushH2GpnA9jRkpi5KYsXHubNM7ka+W2YdjyYbtzDF5LsTecLBVg
AErAvG2N33eN4iNS15v6ISXPesM4T8rC0cX7K9MdH+kiIzF7EvoBdAzb5NIWIVtH
TIOvgGm57CVq8RUr4kg2IyaBJam3j6qIvV0lLIOJghuJn4UrBxz57m44zhZKRANX
g6Lkqtxy7uBiCrw5zTLTtV6VLs9w0MocXJBVsjVFGdCUpwLBf9sDPSU9GrZkFDsr
OF1nrALxGxF/hg==
-----END CERTIFICATE-----