Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
File:                     1-N164S0qN_IarG-Btq9n1mF8oo4.mft (raw, json)
Hash identifier:          3u83cemwTuKGn1WhxAVizps0ZIFTTxeUH6BEB3wvA80=
Subject key identifier:   8A:35:8D:62:4B:24:76:3F:75:F7:04:19:69:04:EC:F6:DA:E2:8B:EE
Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Certificate issuer:       /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Certificate serial:       01962E61B8D8B92FE74958EE7CEA344E789B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
Manifest number:          0B1D
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 1-N164S0qN_IarG-Btq9n1mF8oo4.crl (hash: DsAV7OUi8d5Mhb9s5iMTTvgdqRpH0z9vaWIMWbik18U=)
                          2: 6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa (hash: TuEDPLOZHzrwGKuGu5WkL6I1wv3+goqCPl2BGjRQIWw=)
                          3: YS8fn_l74imFCNkcNVvUSOlCEEc.roa (hash: 8POCWM71NgjblaW0PGPjWaKSeiuviZ9/gLwwgo+p/hg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:d8:b9:2f:e7:49:58:ee:7c:ea:34:4e:78:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=8a358d624b24763f75f704196904ecf6dae28bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:bf:ff:43:31:c2:b4:c3:0e:12:59:67:d6:
                    a3:4b:0d:c8:1d:3d:05:6a:56:1a:38:78:38:d4:8d:
                    02:2f:90:f8:ce:e4:90:6b:d0:43:91:5f:7d:2a:90:
                    5b:75:10:a0:ad:48:5c:a6:3d:57:91:83:11:58:3e:
                    5f:a6:3a:68:21:d3:df:6f:e7:f6:a2:19:2c:98:0a:
                    96:15:9f:a0:9b:cd:c5:b5:12:b0:31:60:32:e8:58:
                    1c:56:9d:c5:d0:aa:02:e7:fe:03:30:16:86:be:21:
                    d0:0f:96:9f:0c:c9:d9:4d:f7:95:d5:34:6e:4f:96:
                    52:39:27:d0:88:e9:81:06:3a:32:73:63:51:4a:00:
                    17:27:1c:8e:09:8b:d9:da:31:82:8e:c7:6d:4b:15:
                    9b:86:05:77:1f:9c:9a:5d:da:36:ca:07:16:47:95:
                    64:cf:bd:a1:f3:c0:3d:5c:16:45:3e:51:f8:9d:bc:
                    1a:15:f0:87:8e:1b:ff:9a:c9:c0:4c:e8:83:60:99:
                    c6:1a:7e:e0:01:6e:32:2f:44:03:e7:aa:d2:4b:2d:
                    10:23:ba:99:b1:47:e4:eb:a1:92:c5:38:b2:8e:f1:
                    8e:4c:e8:bb:4a:b3:76:91:d4:1f:6e:e6:f6:8e:4a:
                    9e:f0:00:ef:38:52:6f:c7:ce:99:38:b9:94:dd:53:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:8D:62:4B:24:76:3F:75:F7:04:19:69:04:EC:F6:DA:E2:8B:EE
            X509v3 Authority Key Identifier:
                keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:48:6e:d0:5e:e5:fb:8a:64:25:3a:39:15:6f:c3:dd:4c:f0:
         85:66:06:e0:6b:a8:26:a9:d9:5c:6d:9c:dd:ff:4d:65:32:25:
         0d:68:50:ed:42:0c:45:69:20:f5:53:db:fa:fa:63:d1:2f:aa:
         1f:99:4d:e2:39:be:32:f4:28:4f:d5:b1:a4:30:94:eb:76:ba:
         33:45:5f:45:1d:df:07:e5:dd:84:f6:50:ba:ea:1e:87:68:ed:
         b2:c8:07:8c:89:b4:c7:da:88:7b:45:3e:de:6f:fe:ea:de:ea:
         6e:c6:fb:88:d0:d3:91:dd:8b:9e:48:1b:2a:fe:bb:0c:9c:19:
         79:9e:ea:94:ef:c0:0d:56:69:7d:33:5c:a0:4e:55:f1:03:ad:
         71:41:41:b6:ba:25:22:3e:fa:fe:28:21:10:62:13:e9:2c:a0:
         9b:13:83:5b:b0:67:af:3c:4a:40:a5:01:4f:b3:15:4b:96:46:
         27:10:85:80:20:4d:8c:26:3c:71:09:2f:a8:62:87:9c:47:5e:
         1f:4b:70:33:42:d7:1c:82:2e:a3:f0:ce:07:f7:0e:52:96:23:
         92:bc:8e:71:fc:99:90:e3:28:4c:d6:c8:84:2e:64:58:c6:c6:
         5d:48:7c:f8:19:df:9e:97:97:8c:34:c3:2a:02:cc:3e:9d:74:
         04:d0:5d:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuYbjYuS/nSVjufOo0TnibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3
Y2EyOGUwHhcNMjUwNDEzMDkwMTE4WhcNMjUwNDE0MDkwMTE4WjAzMTEwLwYDVQQD
Eyg4YTM1OGQ2MjRiMjQ3NjNmNzVmNzA0MTk2OTA0ZWNmNmRhZTI4YmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw22//0MxwrTDDhJZZ9ajSw3IHT0F
alYaOHg41I0CL5D4zuSQa9BDkV99KpBbdRCgrUhcpj1XkYMRWD5fpjpoIdPfb+f2
ohksmAqWFZ+gm83FtRKwMWAy6FgcVp3F0KoC5/4DMBaGviHQD5afDMnZTfeV1TRu
T5ZSOSfQiOmBBjoyc2NRSgAXJxyOCYvZ2jGCjsdtSxWbhgV3H5yaXdo2ygcWR5Vk
z72h88A9XBZFPlH4nbwaFfCHjhv/msnATOiDYJnGGn7gAW4yL0QD56rSSy0QI7qZ
sUfk66GSxTiyjvGOTOi7SrN2kdQfbub2jkqe8ADvOFJvx86ZOLmU3VMNvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIo1jWJLJHY/dfcEGWkE7Pba4ovuMB8GA1UdIwQY
MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm
LTJiNGEzNTM4YzVlMy8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA2LzJjMGQ4MC0zOTM3LTQ0NTUtYjljZi0yYjRhMzUzOGM1
ZTMvMS8xLU4xNjRTMHFOX0lhckctQnRxOW4xbUY4b280LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkhu
0F7l+4pkJTo5FW/D3UzwhWYG4GuoJqnZXG2c3f9NZTIlDWhQ7UIMRWkg9VPb+vpj
0S+qH5lN4jm+MvQoT9WxpDCU63a6M0VfRR3fB+XdhPZQuuoeh2jtssgHjIm0x9qI
e0U+3m/+6t7qbsb7iNDTkd2LnkgbKv67DJwZeZ7qlO/ADVZpfTNcoE5V8QOtcUFB
trolIj76/ighEGIT6SygmxODW7BnrzxKQKUBT7MVS5ZGJxCFgCBNjCY8cQkvqGKH
nEdeH0twM0LXHIIuo/DOB/cOUpYjkryOcfyZkOMoTNbIhC5kWMbGXUh8+BnfnpeX
jDTDKgLMPp10BNBd6g==
-----END CERTIFICATE-----