Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File:                     t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier:          cdreIimp0R1PdWUlqwTteiE5uMoBllOrUypJXWera9I=
Subject key identifier:   38:FA:69:34:8E:F1:DD:23:14:D5:77:A4:B3:A6:58:EB:BF:32:75:05
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer:       /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial:       01962DF43982B9E45AAC861FAE2A435FCAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number:          0B96
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=)
                          2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: jI3Wqth4Zu3BbJx8zlPKCfDH9raru489ysE6ncz8z3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:39:82:b9:e4:5a:ac:86:1f:ae:2a:43:5f:ca:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=38fa69348ef1dd2314d577a4b3a658ebbf327505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:43:26:06:89:c4:cd:f3:e4:70:25:d9:1b:
                    82:67:27:b8:1d:f5:91:a8:5b:cc:49:6f:25:c2:d8:
                    83:7b:65:38:60:f3:1b:0b:47:76:0d:ac:b6:19:12:
                    98:bd:fb:69:c1:2e:19:c7:01:67:a8:89:74:cb:37:
                    00:8f:f6:16:3f:b5:2a:9b:3c:81:4e:5e:f8:86:d5:
                    cb:2f:e2:09:6a:1b:f9:a5:1b:cc:4b:c4:dd:03:db:
                    87:5c:9a:5f:bd:19:46:e4:2d:11:7c:0f:2a:5d:81:
                    09:ab:63:fb:18:4e:ed:df:28:c0:d1:58:52:f5:c5:
                    3a:8c:15:03:a0:23:20:d6:45:5a:c6:fb:f2:64:fd:
                    dc:15:b8:34:92:6b:0b:63:16:c4:b4:d9:ca:f3:b8:
                    3c:df:06:0d:78:61:08:6f:38:1d:7b:5a:ae:4c:44:
                    ce:54:56:4d:5d:a7:ef:86:de:65:87:7e:dc:80:aa:
                    ae:fa:03:12:fb:52:d7:27:4e:c9:d1:1f:cd:f8:39:
                    4e:fc:f7:b1:0c:a2:99:67:19:d4:94:0f:6c:29:94:
                    97:13:af:18:ff:fd:d8:0c:18:10:4f:32:57:9c:63:
                    bd:c1:c0:a8:fa:70:3f:73:f7:3a:e1:90:e3:06:8b:
                    cf:d3:89:c4:14:8e:95:50:b5:12:83:0c:9b:33:52:
                    ea:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FA:69:34:8E:F1:DD:23:14:D5:77:A4:B3:A6:58:EB:BF:32:75:05
            X509v3 Authority Key Identifier:
                keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:67:18:59:d8:01:83:1d:9e:14:c7:74:70:1b:69:e5:9c:2a:
         94:39:38:a7:d3:00:52:dd:ed:19:b1:fa:b6:67:4d:bc:65:d5:
         fb:31:4d:7d:bd:11:43:40:94:59:bc:39:cd:42:9a:5a:a2:c2:
         4c:ae:8d:ee:c2:d2:27:84:d2:7a:95:4e:8a:97:ed:05:cb:6f:
         ca:48:5c:71:9f:db:dd:3e:d4:06:fe:6e:9f:f6:84:2c:7d:78:
         74:31:24:83:da:f4:1c:77:0e:9f:82:a7:89:82:a0:db:8d:4c:
         af:c1:19:e2:57:86:72:b5:0f:91:f3:25:8c:22:40:29:87:7b:
         9f:9a:b5:26:8d:cc:ad:1b:2c:1f:0b:ed:ba:9d:25:a6:33:ee:
         dc:e9:20:c6:a4:d5:72:46:11:b0:a3:38:43:5c:47:9a:14:e6:
         5d:37:52:f8:14:b4:35:1a:f1:16:fe:ed:16:81:a5:e4:d4:bb:
         71:d4:3f:f3:50:00:ba:23:2a:26:16:f5:94:e4:aa:13:f3:ad:
         ad:71:1e:99:23:3d:74:5d:df:4c:02:92:49:14:36:3b:6e:1d:
         c0:17:73:7c:93:9e:37:f7:7f:d2:05:37:1b:b3:0d:59:30:09:
         39:2c:28:35:53:2d:d3:66:b3:79:f9:ae:69:a1:82:81:ef:5e:
         b2:96:df:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DmCueRarIYfripDX8rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzU1OGM0MmM0M2FkNTk0MDZlYTQ0NmM5ZWVmZWQ0MmE0
OTFlZWMwHhcNMjUwNDEzMDcwMTQyWhcNMjUwNDE0MDcwMTQyWjAzMTEwLwYDVQQD
EygzOGZhNjkzNDhlZjFkZDIzMTRkNTc3YTRiM2E2NThlYmJmMzI3NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02hDJgaJxM3z5HAl2RuCZye4HfWR
qFvMSW8lwtiDe2U4YPMbC0d2Day2GRKYvftpwS4ZxwFnqIl0yzcAj/YWP7UqmzyB
Tl74htXLL+IJahv5pRvMS8TdA9uHXJpfvRlG5C0RfA8qXYEJq2P7GE7t3yjA0VhS
9cU6jBUDoCMg1kVaxvvyZP3cFbg0kmsLYxbEtNnK87g83wYNeGEIbzgde1quTETO
VFZNXafvht5lh37cgKqu+gMS+1LXJ07J0R/N+DlO/PexDKKZZxnUlA9sKZSXE68Y
//3YDBgQTzJXnGO9wcCo+nA/c/c64ZDjBovP04nEFI6VULUSgwybM1LqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj6aTSO8d0jFNV3pLOmWOu/MnUFMB8GA1UdIwQY
MBaAFLfFWMQsQ61ZQG6kRsnu/tQqSR7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMt
YTI1ZWY0NDIwYTJhLzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJh
LzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGcYWdgB
gx2eFMd0cBtp5ZwqlDk4p9MAUt3tGbH6tmdNvGXV+zFNfb0RQ0CUWbw5zUKaWqLC
TK6N7sLSJ4TSepVOipftBctvykhccZ/b3T7UBv5un/aELH14dDEkg9r0HHcOn4Kn
iYKg241Mr8EZ4leGcrUPkfMljCJAKYd7n5q1Jo3MrRssHwvtup0lpjPu3OkgxqTV
ckYRsKM4Q1xHmhTmXTdS+BS0NRrxFv7tFoGl5NS7cdQ/81AAuiMqJhb1lOSqE/Ot
rXEemSM9dF3fTAKSSRQ2O24dwBdzfJOeN/d/0gU3G7MNWTAJOSwoNVMt02azefmu
aaGCge9espbf6w==
-----END CERTIFICATE-----