Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File:                     TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier:          Qv+XS6nWghE50dGHEkFxG95kTS9IKlCThXvvhKrB+x8=
Subject key identifier:   B4:2F:95:32:16:CC:9B:DE:08:C7:84:A6:D1:79:C6:AF:5D:30:D6:90
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer:       /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial:       01962DF3FD2BC384EA580C8362A8E374BE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number:          05AA
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: 3kWiDFXeGKyP+NUGwv3gtkcDDHnYyWiEPlTORYZbTtM=)
                          2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fd:2b:c3:84:ea:58:0c:83:62:a8:e3:74:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=b42f953216cc9bde08c784a6d179c6af5d30d690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:3a:1d:7e:f5:c2:f6:31:5a:68:82:5f:63:
                    aa:ee:bb:97:b2:c7:cb:fa:a4:82:e8:eb:05:e8:6d:
                    69:ee:d8:44:86:6d:d7:7d:f4:b5:4d:01:7a:ef:38:
                    24:43:73:da:f0:99:c3:97:0c:df:d0:2a:06:04:7e:
                    fe:33:5b:b4:ae:01:2e:22:b9:e2:9a:a1:fc:1b:37:
                    45:d4:ef:b9:42:7e:f5:3a:2c:2a:ea:62:86:e0:2a:
                    59:9f:ef:18:c1:cb:85:aa:a3:24:d6:10:dd:f1:b5:
                    4e:e2:45:a3:40:0b:f7:7e:ac:a5:b5:ea:ee:91:10:
                    76:6c:b9:eb:da:97:6a:5b:e6:a4:9b:04:b1:92:46:
                    6d:5e:b6:25:e1:6d:84:3d:a7:7c:ef:41:13:e7:9e:
                    97:c6:8f:c0:cb:d5:20:d0:92:3e:f7:b1:40:53:34:
                    c1:f7:1a:ae:09:60:b9:d7:c8:0b:da:cb:9f:16:f9:
                    e2:aa:f4:34:f2:c9:e9:70:b8:1b:d4:3a:ad:15:ec:
                    7e:c4:3d:1f:79:16:1c:53:b8:a0:2b:f5:86:f7:3a:
                    e2:93:72:b0:0a:70:f3:54:2e:f3:f9:01:86:80:be:
                    28:53:e6:4f:fe:14:04:71:ff:1b:5b:89:04:58:15:
                    6c:2a:3f:94:ed:a2:6f:50:1b:ce:b1:66:e2:11:71:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:95:32:16:CC:9B:DE:08:C7:84:A6:D1:79:C6:AF:5D:30:D6:90
            X509v3 Authority Key Identifier:
                keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:cd:67:86:71:49:ba:40:51:6a:0f:6c:32:e6:6f:01:69:04:
         49:2d:b4:01:a6:ac:95:38:47:38:16:21:1c:d6:07:f9:5f:89:
         d9:36:b0:7a:ae:6c:13:ce:90:0b:c9:4f:a0:5f:fb:b0:d4:ad:
         4b:5b:c3:c6:cf:f0:44:42:fb:5c:7d:5c:ef:68:7a:1c:ee:65:
         f1:f1:1e:93:1c:ec:a1:28:35:68:e1:37:68:ca:55:af:02:6e:
         ff:a1:d5:2d:cf:dd:d8:61:6b:75:24:5f:fb:c6:10:ec:72:da:
         ee:d3:d0:bf:74:5a:32:8f:ad:bc:69:63:b8:6c:38:74:f6:15:
         fb:23:8b:22:5e:33:e0:2e:15:4a:ce:dc:16:25:f5:b1:6c:3c:
         0a:24:4f:08:68:77:6f:19:3c:27:9e:5c:84:ee:2f:5e:49:5e:
         d0:6b:f1:9d:6c:66:26:03:a2:d7:9b:c3:0b:17:e1:c9:cd:de:
         92:14:8a:b4:8c:60:67:64:73:2b:70:5f:1a:19:3e:26:74:d2:
         54:46:ad:63:da:22:f8:a8:08:78:ce:51:10:d5:ec:5a:a8:61:
         c4:fe:c2:0f:69:c6:a0:cf:ca:74:d0:ce:96:4a:1a:d3:ff:44:
         51:8b:52:8c:39:cc:09:8e:9d:b0:6c:6a:e6:d9:fa:7c:f9:21:
         41:5f:50:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/0rw4TqWAyDYqjjdL5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjljM2VjNDdmY2NmMDFkOTMwNWZlMGQ3ZDQ4MWIzMDZi
MGQ0OGMwHhcNMjUwNDEzMDcwMTI2WhcNMjUwNDE0MDcwMTI2WjAzMTEwLwYDVQQD
EyhiNDJmOTUzMjE2Y2M5YmRlMDhjNzg0YTZkMTc5YzZhZjVkMzBkNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZY6HX71wvYxWmiCX2Oq7ruXssfL
+qSC6OsF6G1p7thEhm3XffS1TQF67zgkQ3Pa8JnDlwzf0CoGBH7+M1u0rgEuIrni
mqH8GzdF1O+5Qn71Oiwq6mKG4CpZn+8YwcuFqqMk1hDd8bVO4kWjQAv3fqylteru
kRB2bLnr2pdqW+akmwSxkkZtXrYl4W2EPad870ET556Xxo/Ay9Ug0JI+97FAUzTB
9xquCWC518gL2sufFvniqvQ08snpcLgb1DqtFex+xD0feRYcU7igK/WG9zrik3Kw
CnDzVC7z+QGGgL4oU+ZP/hQEcf8bW4kEWBVsKj+U7aJvUBvOsWbiEXFVeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQvlTIWzJveCMeEptF5xq9dMNaQMB8GA1UdIwQY
MBaAFEz5w+xH/M8B2TBf4NfUgbMGsNSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYt
ODYwMTY2MzM5NWViLzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYtODYwMTY2MzM5NWVi
LzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2M1nhnFJ
ukBRag9sMuZvAWkESS20AaaslThHOBYhHNYH+V+J2Taweq5sE86QC8lPoF/7sNSt
S1vDxs/wREL7XH1c72h6HO5l8fEekxzsoSg1aOE3aMpVrwJu/6HVLc/d2GFrdSRf
+8YQ7HLa7tPQv3RaMo+tvGljuGw4dPYV+yOLIl4z4C4VSs7cFiX1sWw8CiRPCGh3
bxk8J55chO4vXkle0GvxnWxmJgOi15vDCxfhyc3ekhSKtIxgZ2RzK3BfGhk+JnTS
VEatY9oi+KgIeM5RENXsWqhhxP7CD2nGoM/KdNDOlkoa0/9EUYtSjDnMCY6dsGxq
5tn6fPkhQV9QZw==
-----END CERTIFICATE-----