Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File:                     0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier:          s4VQXC+Q+uFVYavBMwdZcnuagNRT2bsg6ZYMCccaiMY=
Subject key identifier:   3A:F6:2D:24:C3:D7:44:67:1C:7B:DF:DC:B4:FD:4B:07:A0:8C:22:AA
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer:       /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial:       01962FAB9E12B84CF27D2FB36831B7726F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: 1zvhtOu0n4Q1QbEowHkjrtkyz5qzG5moxZjou/6Nhlk=)
                          2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
                          3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9e:12:b8:4c:f2:7d:2f:b3:68:31:b7:72:6f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=3af62d24c3d744671c7bdfdcb4fd4b07a08c22aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:3b:25:64:b2:4f:7b:7a:7a:28:97:3b:88:
                    ed:77:cb:37:78:fe:56:ec:0a:31:b1:1f:41:d7:71:
                    3b:71:96:7f:76:22:42:7b:46:ca:08:17:bd:e5:66:
                    ce:4a:b9:75:7d:b2:cd:31:46:b8:7d:74:81:f3:ab:
                    93:64:99:48:8f:4d:c7:a9:9a:9f:07:a0:fc:30:d3:
                    c1:89:8e:c7:8c:ea:b9:3f:0a:93:de:41:bf:77:8d:
                    f4:a2:7e:ce:0b:48:46:fb:4b:19:b3:6b:03:16:24:
                    e4:c3:d5:f9:de:6b:c3:e8:fb:98:46:2d:6f:ef:09:
                    28:ad:65:4b:3e:ff:c4:19:0b:e0:e7:a5:e8:9d:eb:
                    b2:f7:39:be:a1:0c:8d:8d:4f:b8:ad:3b:a8:99:9a:
                    c0:bf:1e:74:22:ee:a5:85:2a:e8:eb:cb:cf:85:5c:
                    fd:4e:e2:c4:96:66:0d:d2:1b:0b:58:64:e1:45:35:
                    58:04:fb:a8:0f:0a:e3:df:33:bc:e2:fa:c4:45:0c:
                    cc:f1:14:c8:b5:74:a4:d7:8c:01:23:a4:5e:20:bd:
                    80:54:48:71:69:6f:c8:d9:66:e6:84:89:18:73:37:
                    3f:39:c6:f1:0e:52:10:8c:37:e8:05:52:81:ff:82:
                    f5:0d:39:5b:3e:68:95:ce:62:fe:48:19:6a:25:08:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F6:2D:24:C3:D7:44:67:1C:7B:DF:DC:B4:FD:4B:07:A0:8C:22:AA
            X509v3 Authority Key Identifier:
                keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:66:92:fb:ac:fb:38:9c:ce:be:34:7f:5a:49:ff:4d:c6:
         6a:2b:f7:d3:af:68:27:f5:9b:30:5c:f9:9c:c2:5c:cb:12:25:
         98:18:c3:15:ed:95:21:db:1d:9c:74:6a:20:c2:bb:f0:ab:00:
         2a:4b:55:c9:09:bd:bb:f3:e7:69:0e:e3:f4:35:57:f9:de:ff:
         05:38:68:4b:ee:05:e9:a6:23:c8:30:c8:c2:ba:a9:05:0a:74:
         09:d7:45:fe:3d:a0:0b:c6:1f:31:0c:57:b4:b8:6b:ce:b6:ba:
         6a:a2:b7:48:df:c1:10:06:b6:81:6c:61:18:96:91:cb:99:00:
         ce:6d:37:0b:c5:8e:50:bb:51:07:50:2b:20:e2:46:2d:d0:db:
         e0:c5:43:cb:56:bd:e8:b4:3c:18:78:85:12:43:de:c0:8d:ed:
         0c:46:35:1e:30:25:a8:cd:8f:30:dd:3b:59:a1:8a:c5:e1:2c:
         73:ad:bd:a6:a5:8d:08:a4:05:92:2a:33:b6:a8:91:47:d9:d2:
         9c:d1:60:26:47:ae:d3:af:27:0b:89:e3:82:74:5b:92:fe:65:
         74:da:fe:cb:14:4f:ce:ef:41:59:ad:6d:2c:eb:23:a9:b2:4c:
         e3:a1:45:6b:b0:45:61:69:04:fa:ad:22:da:33:15:d6:5c:a8:
         5e:c5:b5:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq54SuEzyfS+zaDG3cm8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjUwNDEzMTUwMTM4WhcNMjUwNDE0MTUwMTM4WjAzMTEwLwYDVQQD
EygzYWY2MmQyNGMzZDc0NDY3MWM3YmRmZGNiNGZkNGIwN2EwOGMyMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbc7JWSyT3t6eiiXO4jtd8s3eP5W
7AoxsR9B13E7cZZ/diJCe0bKCBe95WbOSrl1fbLNMUa4fXSB86uTZJlIj03HqZqf
B6D8MNPBiY7HjOq5PwqT3kG/d430on7OC0hG+0sZs2sDFiTkw9X53mvD6PuYRi1v
7wkorWVLPv/EGQvg56Xoneuy9zm+oQyNjU+4rTuomZrAvx50Iu6lhSro68vPhVz9
TuLElmYN0hsLWGThRTVYBPuoDwrj3zO84vrERQzM8RTItXSk14wBI6ReIL2AVEhx
aW/I2WbmhIkYczc/OcbxDlIQjDfoBVKB/4L1DTlbPmiVzmL+SBlqJQhL0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr2LSTD10RnHHvf3LT9SwegjCKqMB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+lmkvus
+ziczr40f1pJ/03Gaiv3069oJ/WbMFz5nMJcyxIlmBjDFe2VIdsdnHRqIMK78KsA
KktVyQm9u/PnaQ7j9DVX+d7/BThoS+4F6aYjyDDIwrqpBQp0CddF/j2gC8YfMQxX
tLhrzra6aqK3SN/BEAa2gWxhGJaRy5kAzm03C8WOULtRB1ArIOJGLdDb4MVDy1a9
6LQ8GHiFEkPewI3tDEY1HjAlqM2PMN07WaGKxeEsc629pqWNCKQFkioztqiRR9nS
nNFgJkeu068nC4njgnRbkv5ldNr+yxRPzu9BWa1tLOsjqbJM46FFa7BFYWkE+q0i
2jMV1lyoXsW1YA==
-----END CERTIFICATE-----