Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File:                     0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier:          KyYNShwuzOT/hWiJvmPGiux/rHb3AFdvLdZ78/Rfz9w=
Subject key identifier:   3F:65:BA:5C:69:5D:A7:0A:A5:8C:A6:B2:AF:B7:46:CA:D5:82:C1:D4
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer:       /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial:       01962ECFD9E9977722AD4824325B3AC62256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number:          0219
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: DtWaqBpj54hSMOtQ5OUibpkbSb16758J+R6/L0NBZH4=)
                          2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
                          3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:e9:97:77:22:ad:48:24:32:5b:3a:c6:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=3f65ba5c695da70aa58ca6b2afb746cad582c1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:0a:f2:3a:91:46:9a:d8:5b:32:3f:a2:6b:
                    79:42:2a:56:a8:ee:a5:e7:60:26:58:c8:1e:84:f5:
                    44:e0:87:c9:c1:0b:c3:21:77:60:98:9a:27:61:d6:
                    39:2e:b8:3e:68:04:0b:5f:84:45:29:52:71:b0:2d:
                    41:19:f0:0b:02:64:b2:c0:b2:89:90:9b:9d:dd:33:
                    6f:f4:dd:ca:39:61:71:3d:ff:7c:d2:98:55:2f:62:
                    dd:2c:e0:1d:0e:52:10:c7:db:c0:24:ac:62:72:22:
                    1d:c1:e9:ee:e3:33:73:e8:b7:5f:55:a3:6f:96:69:
                    54:36:4d:6d:47:7c:b2:46:91:52:4e:f6:26:17:b9:
                    7f:78:d6:b8:75:54:f5:85:35:4d:b0:56:28:d5:12:
                    fe:c4:8b:74:54:30:12:92:7b:a7:58:87:09:2c:d6:
                    33:1d:a1:4f:f6:e4:d3:11:76:41:9f:9a:02:c6:72:
                    8a:45:b7:16:d0:c2:36:41:91:fa:4b:c0:44:dc:f2:
                    44:d8:00:e0:85:62:8b:c9:71:84:9d:42:aa:be:70:
                    e1:38:a2:60:a8:24:97:ce:51:7f:9a:2c:fb:fb:f2:
                    eb:29:15:28:89:fe:9f:eb:41:00:0d:11:36:25:37:
                    71:54:2e:fe:3e:bc:3f:0b:a0:9b:ca:4e:9a:76:24:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:BA:5C:69:5D:A7:0A:A5:8C:A6:B2:AF:B7:46:CA:D5:82:C1:D4
            X509v3 Authority Key Identifier:
                keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:25:dc:75:fc:c5:49:33:42:56:94:dd:34:1f:04:6b:16:
         62:65:49:1c:19:8d:7f:16:c0:2a:55:b9:e1:3f:18:5e:61:8b:
         b3:2d:de:bd:3f:a9:ae:79:02:44:ef:bb:a7:cc:3b:8b:fe:e2:
         04:d7:83:48:b2:c6:61:2e:05:95:7f:0e:eb:10:ca:5d:1a:8c:
         19:39:2a:ff:94:c9:cf:45:80:21:97:6f:d6:6c:8e:81:2d:b4:
         44:6c:03:86:e8:ac:0a:e6:63:3a:d6:1c:a3:ef:e9:0c:e7:b0:
         fc:04:5c:56:35:fe:11:c7:9e:28:af:10:1d:6b:2c:b1:de:91:
         70:8c:d8:d2:2e:35:b6:49:c5:9a:e9:6f:7a:98:fe:26:51:ab:
         da:02:2f:84:fe:83:c8:9c:9f:be:d6:a6:14:33:c7:25:b4:7a:
         f0:14:bc:c1:81:d2:dd:71:6d:61:32:5b:1e:2a:5e:a3:85:4b:
         17:0a:2f:7f:9f:c6:a6:7a:92:fd:29:58:08:0b:cc:88:83:6f:
         b9:07:1b:c9:a5:51:d5:8b:a6:e5:5b:0c:ce:29:9f:08:05:f8:
         e0:d1:62:a4:6e:2b:80:a6:0b:1e:f7:7b:92:59:51:bd:0e:94:
         6c:d9:a2:da:8e:19:d5:00:54:1a:af:3a:ea:69:55:09:dd:a9:
         81:b6:0a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9npl3cirUgkMls6xiJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjUwNDEzMTEwMTM1WhcNMjUwNDE0MTEwMTM1WjAzMTEwLwYDVQQD
EygzZjY1YmE1YzY5NWRhNzBhYTU4Y2E2YjJhZmI3NDZjYWQ1ODJjMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqkK8jqRRprYWzI/omt5QipWqO6l
52AmWMgehPVE4IfJwQvDIXdgmJonYdY5Lrg+aAQLX4RFKVJxsC1BGfALAmSywLKJ
kJud3TNv9N3KOWFxPf980phVL2LdLOAdDlIQx9vAJKxiciIdwenu4zNz6LdfVaNv
lmlUNk1tR3yyRpFSTvYmF7l/eNa4dVT1hTVNsFYo1RL+xIt0VDASknunWIcJLNYz
HaFP9uTTEXZBn5oCxnKKRbcW0MI2QZH6S8BE3PJE2ADghWKLyXGEnUKqvnDhOKJg
qCSXzlF/miz7+/LrKRUoif6f60EADRE2JTdxVC7+Prw/C6Cbyk6adiSBTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9lulxpXacKpYymsq+3RsrVgsHUMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgAl3HX8
xUkzQlaU3TQfBGsWYmVJHBmNfxbAKlW54T8YXmGLsy3evT+prnkCRO+7p8w7i/7i
BNeDSLLGYS4FlX8O6xDKXRqMGTkq/5TJz0WAIZdv1myOgS20RGwDhuisCuZjOtYc
o+/pDOew/ARcVjX+EceeKK8QHWsssd6RcIzY0i41tknFmulvepj+JlGr2gIvhP6D
yJyfvtamFDPHJbR68BS8wYHS3XFtYTJbHipeo4VLFwovf5/GpnqS/SlYCAvMiINv
uQcbyaVR1Yum5VsMzimfCAX44NFipG4rgKYLHvd7kllRvQ6UbNmi2o4Z1QBUGq86
6mlVCd2pgbYKIw==
-----END CERTIFICATE-----