Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier:          VbEAzs1KzA96tbvgZOrJq+NB3Ct4nf2LK3nY6F7TAqE=
Subject key identifier:   6C:FC:C7:37:1C:48:26:27:01:A4:1F:E1:46:8D:4D:F7:E6:BE:74:C5
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer:       /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial:       01962DF437EFDEDCE39BC579CE029223328F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number:          1197
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: dp8GECQDT3ke0LmTgOWDZYxTZx3ZaVTKgtBnBA5AQ5k=)
                          2: kIzUAPC0DdQ_FT2bfHdyL_f4yoU.roa (hash: rSGry/QGGACqFb/sa5t28CBZOiur+so7pmuHdYgh5Pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:37:ef:de:dc:e3:9b:c5:79:ce:02:92:23:32:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=6cfcc7371c48262701a41fe1468d4df7e6be74c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:45:49:dc:06:0d:00:c7:29:85:f1:f3:47:
                    3b:9d:18:53:65:6e:53:59:7c:65:d8:aa:64:63:f8:
                    8b:58:fc:3e:1d:0d:03:56:c7:f6:89:86:3f:94:05:
                    0c:d2:20:24:ee:ec:d6:7a:dc:7a:ca:43:5f:d5:57:
                    11:43:2f:32:a2:a8:dc:bc:a6:70:fb:8f:6c:79:cf:
                    88:47:62:99:ec:82:5b:66:90:80:69:f3:14:6c:e0:
                    84:47:96:46:c2:81:0a:a5:8f:c5:36:b4:28:3d:e5:
                    ec:9b:1a:5c:c4:22:fd:ff:e9:88:eb:87:b2:3f:a0:
                    bc:c9:bd:db:04:71:8a:e4:96:37:18:5a:46:0c:f3:
                    bc:fd:2a:e8:53:e8:2e:e5:5e:87:e4:ef:9a:64:fc:
                    a8:e4:7d:a9:28:bd:83:cd:38:ee:40:bb:c5:72:d1:
                    fd:e7:9a:bb:6f:3a:b6:8e:c9:21:6f:4e:8d:3b:53:
                    2c:d5:12:9a:75:46:9b:f3:ac:03:b4:21:2f:66:08:
                    e1:f8:d1:b4:4e:49:77:36:9e:b5:f1:2b:fc:1e:eb:
                    15:23:1f:dc:09:7c:d1:11:f0:15:83:02:1c:c3:7a:
                    40:7f:7f:7b:c9:33:77:2e:2d:a3:53:90:9c:6f:68:
                    21:db:1b:6d:3e:69:0a:f9:02:96:a1:a1:71:ab:d5:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FC:C7:37:1C:48:26:27:01:A4:1F:E1:46:8D:4D:F7:E6:BE:74:C5
            X509v3 Authority Key Identifier:
                keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:24:35:0a:b7:4d:13:34:70:bb:03:c8:2a:4a:7b:5a:16:69:
         c7:ed:04:6e:ee:41:ab:b4:dc:09:2d:05:80:ea:af:ed:46:f2:
         26:1a:0a:f2:7b:91:78:83:1f:13:1d:d9:70:ee:0b:e7:c3:c2:
         66:8b:e5:eb:d2:51:59:8b:05:a5:d3:26:06:05:64:aa:ee:d0:
         f3:d4:7c:f7:95:8e:76:34:4c:6f:76:ee:d7:9f:e5:44:6b:b5:
         ed:df:36:cb:df:e9:d1:22:5b:48:31:49:b1:c3:f0:0b:b9:f8:
         56:fa:d0:7c:a8:9f:b5:86:51:27:46:d1:ec:d0:99:de:d3:51:
         63:d1:93:fd:46:24:97:5e:ee:af:7d:c2:35:96:75:4d:50:71:
         67:dd:20:92:3c:79:5b:29:39:66:fe:a4:50:d2:46:e2:7c:c0:
         70:67:ad:69:ce:ce:22:fc:13:b1:01:17:e0:31:8b:43:16:79:
         07:c1:6d:80:0e:6d:71:af:be:fa:59:d8:f6:f5:cd:1f:fc:bb:
         29:bf:ed:36:d1:8b:82:bf:10:d2:93:e0:39:ca:af:81:c8:c0:
         35:91:4d:aa:51:a6:a2:c8:0b:1e:73:28:a5:84:34:4c:3a:d1:
         a0:34:9c:8c:f5:7a:e5:de:c5:1e:44:65:6f:23:eb:51:d0:9c:
         5b:2d:ee:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Dfv3tzjm8V5zgKSIzKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg2Y2ZjYzczNzFjNDgyNjI3MDFhNDFmZTE0NjhkNGRmN2U2YmU3NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BFSdwGDQDHKYXx80c7nRhTZW5T
WXxl2KpkY/iLWPw+HQ0DVsf2iYY/lAUM0iAk7uzWetx6ykNf1VcRQy8yoqjcvKZw
+49sec+IR2KZ7IJbZpCAafMUbOCER5ZGwoEKpY/FNrQoPeXsmxpcxCL9/+mI64ey
P6C8yb3bBHGK5JY3GFpGDPO8/SroU+gu5V6H5O+aZPyo5H2pKL2DzTjuQLvFctH9
55q7bzq2jskhb06NO1Ms1RKadUab86wDtCEvZgjh+NG0Tkl3Np618Sv8HusVIx/c
CXzREfAVgwIcw3pAf397yTN3Li2jU5Ccb2gh2xttPmkK+QKWoaFxq9XWLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz8xzccSCYnAaQf4UaNTffmvnTFMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCQ1CrdN
EzRwuwPIKkp7WhZpx+0Ebu5Bq7TcCS0FgOqv7UbyJhoK8nuReIMfEx3ZcO4L58PC
Zovl69JRWYsFpdMmBgVkqu7Q89R895WOdjRMb3bu15/lRGu17d82y9/p0SJbSDFJ
scPwC7n4VvrQfKiftYZRJ0bR7NCZ3tNRY9GT/UYkl17ur33CNZZ1TVBxZ90gkjx5
Wyk5Zv6kUNJG4nzAcGetac7OIvwTsQEX4DGLQxZ5B8FtgA5tca+++lnY9vXNH/y7
Kb/tNtGLgr8Q0pPgOcqvgcjANZFNqlGmosgLHnMopYQ0TDrRoDScjPV65d7FHkRl
byPrUdCcWy3uIA==
-----END CERTIFICATE-----