Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File:                     DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier:          22dekAgTPU8966PMa2VmuAjvAbLVFaWTr4m90ej/i1Q=
Subject key identifier:   AC:DA:15:59:CF:5A:62:C8:50:A6:98:3B:4F:8E:01:3D:0B:AB:D5:D9
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer:       /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial:       01962ECFADCDB4A2AFA105B56201317719A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: Feo1HcdU7tifi1Zogpi8Qeme1DN1YF5mLhnRnChz9KE=)
                          2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ad:cd:b4:a2:af:a1:05:b5:62:01:31:77:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=acda1559cf5a62c850a6983b4f8e013d0babd5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:76:c3:59:d5:e0:ee:52:55:5b:c0:dc:ff:
                    4c:2a:c0:9c:20:41:88:d5:4f:3f:12:0e:a5:1e:31:
                    d9:72:d3:0c:57:b3:30:a0:c6:af:15:a4:5f:83:e0:
                    2b:a3:41:bb:51:a0:24:f9:74:45:7c:19:1b:5c:73:
                    1f:38:7b:fb:19:7a:1a:d2:3d:e8:e1:38:6b:4d:09:
                    66:54:9b:68:4d:59:6b:e2:24:43:91:1d:4d:c8:3f:
                    d9:f0:dc:7c:05:71:35:fd:d8:b0:53:b2:1c:84:7b:
                    f4:6b:a8:ff:0d:6f:30:71:dd:67:ba:e8:4e:65:f1:
                    89:85:15:18:5a:3b:4b:f5:54:7c:97:cf:00:a4:8c:
                    6f:c1:bb:74:42:15:a4:50:90:a5:3e:9b:3a:51:a0:
                    d3:a5:9f:90:d3:18:cb:40:e6:c2:f0:19:75:b2:8d:
                    35:87:9a:49:18:4b:1d:90:a7:fd:29:26:c9:3d:f9:
                    fb:1e:81:15:86:7b:c3:66:4b:ec:c2:5d:24:53:b2:
                    4b:c6:ca:91:ea:4c:f2:e5:e9:88:a1:67:4b:60:21:
                    49:b3:4b:cd:88:34:46:ad:64:74:11:c6:91:bb:75:
                    65:9b:ef:7b:c6:64:b3:9d:d9:04:b0:fb:0b:ba:77:
                    90:c6:37:e4:4a:c9:40:84:e4:a0:46:ca:46:8d:9f:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:15:59:CF:5A:62:C8:50:A6:98:3B:4F:8E:01:3D:0B:AB:D5:D9
            X509v3 Authority Key Identifier:
                keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:d7:9a:aa:1a:bc:a4:f0:b4:23:89:bb:ca:54:cc:57:fa:
         24:ea:6c:0f:33:c5:6b:21:f2:43:00:dc:b6:d3:74:1d:04:a2:
         9d:99:39:2b:9f:7b:6e:9e:24:e5:29:55:1a:61:f4:5f:0e:63:
         d1:21:d3:f7:3a:5e:43:eb:8e:4e:56:fc:4f:9d:cb:e4:87:97:
         ee:5b:3a:c8:40:a6:7c:3b:ab:88:96:ec:19:9a:a5:01:81:4d:
         1c:b2:d5:e7:f3:1a:38:5d:2f:ff:69:b7:1b:14:ff:29:55:7e:
         fa:50:7a:cf:1b:32:08:d3:9d:ab:94:d1:89:ec:9b:96:d5:bb:
         1d:87:fc:5c:c3:22:ff:3b:50:48:8a:d1:55:ff:cf:6d:7e:c1:
         59:01:60:e2:7f:3b:ec:a8:49:69:ad:dc:5e:5e:bf:84:51:ca:
         b3:1d:d4:09:70:2d:8a:1d:c2:d2:01:4f:01:be:5e:ac:0f:8b:
         6b:e1:88:5e:61:e3:1d:e4:aa:96:cb:45:df:c6:73:ce:42:a0:
         ba:c7:c9:40:74:e9:0e:48:3c:39:43:27:8a:1a:18:64:87:ac:
         c8:da:84:ee:5e:eb:20:66:76:8a:c8:13:09:b2:0b:84:a8:88:
         be:61:33:91:f8:10:ab:ea:e8:8f:93:c9:51:51:6e:31:ab:0d:
         c7:7d:36:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz63NtKKvoQW1YgExdxmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl
ZjhhNTkwHhcNMjUwNDEzMTEwMTI0WhcNMjUwNDE0MTEwMTI0WjAzMTEwLwYDVQQD
EyhhY2RhMTU1OWNmNWE2MmM4NTBhNjk4M2I0ZjhlMDEzZDBiYWJkNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs012w1nV4O5SVVvA3P9MKsCcIEGI
1U8/Eg6lHjHZctMMV7MwoMavFaRfg+Aro0G7UaAk+XRFfBkbXHMfOHv7GXoa0j3o
4ThrTQlmVJtoTVlr4iRDkR1NyD/Z8Nx8BXE1/diwU7IchHv0a6j/DW8wcd1nuuhO
ZfGJhRUYWjtL9VR8l88ApIxvwbt0QhWkUJClPps6UaDTpZ+Q0xjLQObC8Bl1so01
h5pJGEsdkKf9KSbJPfn7HoEVhnvDZkvswl0kU7JLxsqR6kzy5emIoWdLYCFJs0vN
iDRGrWR0EcaRu3Vlm+97xmSzndkEsPsLuneQxjfkSslAhOSgRspGjZ8+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzaFVnPWmLIUKaYO0+OAT0Lq9XZMB8GA1UdIwQY
MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt
YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5
LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlirXmqoa
vKTwtCOJu8pUzFf6JOpsDzPFayHyQwDcttN0HQSinZk5K597bp4k5SlVGmH0Xw5j
0SHT9zpeQ+uOTlb8T53L5IeX7ls6yECmfDuriJbsGZqlAYFNHLLV5/MaOF0v/2m3
GxT/KVV++lB6zxsyCNOdq5TRieybltW7HYf8XMMi/ztQSIrRVf/PbX7BWQFg4n87
7KhJaa3cXl6/hFHKsx3UCXAtih3C0gFPAb5erA+La+GIXmHjHeSqlstF38ZzzkKg
usfJQHTpDkg8OUMnihoYZIesyNqE7l7rIGZ2isgTCbILhKiIvmEzkfgQq+roj5PJ
UVFuMasNx302Sw==
-----END CERTIFICATE-----