Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
File:                     f3YJUscz9vLuklTtzRTg2qeLOIw.mft (raw, json)
Hash identifier:          4kuZl5/9cGCRj2qeInQH2fSX7helB2B7LadML8Gttb8=
Subject key identifier:   E3:53:E8:40:C8:55:CC:5D:41:F5:CD:36:CA:2E:9B:A6:F5:03:17:92
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Certificate issuer:       /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial:       01962ECF74364B433E1ABA9A93373EA6BBDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
Manifest number:          02CE
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (hash: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=)
                          2: f3YJUscz9vLuklTtzRTg2qeLOIw.crl (hash: uSMcyQcwO5bJe8O1murRjhCU8f3S44xua1efnWh6q8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:36:4b:43:3e:1a:ba:9a:93:37:3e:a6:bb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=e353e840c855cc5d41f5cd36ca2e9ba6f5031792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:39:ff:e6:ab:a8:55:cc:5e:7e:c6:88:82:
                    3c:11:8f:c5:91:94:22:25:76:58:6a:5d:09:d1:78:
                    75:d2:57:22:38:cf:f5:35:37:de:3a:cd:fe:02:82:
                    98:f6:8a:8a:39:e2:96:0c:97:68:a9:2f:f9:eb:a7:
                    cc:97:65:0d:68:0d:9c:95:0f:e0:1a:e2:62:07:da:
                    67:95:1c:4d:b0:6a:05:c3:31:81:3c:8a:3a:a7:16:
                    f3:ae:da:50:d1:0c:a8:48:a9:00:87:89:50:46:51:
                    c5:f6:41:b2:1c:2a:7b:60:9f:b3:58:47:8c:66:71:
                    ca:f4:24:7b:92:04:22:b3:be:33:1a:02:3a:b8:bb:
                    13:be:6e:ad:93:ba:96:ae:f5:e1:c1:17:0b:6d:21:
                    9d:eb:9d:5a:4d:65:d2:0a:43:3c:ce:81:e0:b5:50:
                    42:f0:c7:bc:53:51:c0:3d:98:25:71:4d:07:d0:3e:
                    08:11:fe:e0:35:af:26:49:4f:32:11:26:44:ef:72:
                    03:59:3f:f2:33:07:51:f3:a9:4d:4a:6f:b4:19:4a:
                    0b:b2:59:a2:a4:8c:f3:a8:96:9c:85:e0:f5:7d:02:
                    86:50:d9:2f:d0:f6:7b:7e:d1:97:fe:b9:e2:c9:3f:
                    c1:07:2c:5f:1c:e9:0c:60:5a:92:a4:5e:b7:83:87:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:E8:40:C8:55:CC:5D:41:F5:CD:36:CA:2E:9B:A6:F5:03:17:92
            X509v3 Authority Key Identifier:
                keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:f7:86:e9:b2:a5:24:e7:60:c0:0a:21:69:95:76:fc:fd:
         0f:0e:e7:89:d2:72:2a:50:7e:4f:5f:c8:38:79:dc:55:94:12:
         bc:b0:0b:d6:73:9e:ae:d4:66:87:4f:31:dc:61:e5:03:a5:7c:
         0e:f5:51:86:81:ce:a0:bb:a4:ee:08:4d:57:91:83:40:e9:b6:
         d7:3d:49:62:e7:4a:cb:90:33:6b:61:45:8d:8b:52:41:87:b9:
         b6:c2:6a:59:7a:6f:47:e6:3f:7e:64:37:e7:36:2c:46:a4:26:
         08:d8:f8:25:c3:47:2a:1c:01:d8:a3:b3:f8:23:fc:2e:cd:34:
         78:fd:ca:06:ba:69:80:63:e5:33:13:82:a3:be:a7:3f:af:3f:
         3e:ba:71:2a:79:d4:f0:7a:d5:ff:1c:85:a3:bf:38:6a:bb:fc:
         27:46:29:c6:29:f3:eb:4e:0e:f3:58:33:20:0a:ce:18:20:cd:
         9b:a1:eb:e4:13:87:89:c7:6f:04:7f:c0:86:00:5e:0f:a5:6e:
         ca:27:ee:18:81:e3:08:b5:2a:8a:72:d6:dd:c1:03:63:1b:b3:
         72:c6:1e:bf:bc:42:a0:bc:1d:60:98:a3:23:72:b8:fd:0e:24:
         3d:b5:18:06:79:a6:15:0a:ea:82:78:c9:d9:84:35:3a:4c:85:
         d6:f3:97:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3Q2S0M+Grqakzc+prvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzYwOTUyYzczM2Y2ZjJlZTkyNTRlZGNkMTRlMGRhYTc4
YjM4OGMwHhcNMjUwNDEzMTEwMTA5WhcNMjUwNDE0MTEwMTA5WjAzMTEwLwYDVQQD
EyhlMzUzZTg0MGM4NTVjYzVkNDFmNWNkMzZjYTJlOWJhNmY1MDMxNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1185/+arqFXMXn7GiII8EY/FkZQi
JXZYal0J0Xh10lciOM/1NTfeOs3+AoKY9oqKOeKWDJdoqS/566fMl2UNaA2clQ/g
GuJiB9pnlRxNsGoFwzGBPIo6pxbzrtpQ0QyoSKkAh4lQRlHF9kGyHCp7YJ+zWEeM
ZnHK9CR7kgQis74zGgI6uLsTvm6tk7qWrvXhwRcLbSGd651aTWXSCkM8zoHgtVBC
8Me8U1HAPZglcU0H0D4IEf7gNa8mSU8yESZE73IDWT/yMwdR86lNSm+0GUoLslmi
pIzzqJacheD1fQKGUNkv0PZ7ftGX/rniyT/BByxfHOkMYFqSpF63g4dLJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONT6EDIVcxdQfXNNsoum6b1AxeSMB8GA1UdIwQY
MBaAFH92CVLHM/by7pJU7c0U4NqniziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNjRhNTktOWZlZC00MWRhLWI4MzUt
OWFlODgwOWM4NTE1LzEvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNjRhNTktOWZlZC00MWRhLWI4MzUtOWFlODgwOWM4NTE1
LzEvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWL3humy
pSTnYMAKIWmVdvz9Dw7nidJyKlB+T1/IOHncVZQSvLAL1nOertRmh08x3GHlA6V8
DvVRhoHOoLuk7ghNV5GDQOm21z1JYudKy5Aza2FFjYtSQYe5tsJqWXpvR+Y/fmQ3
5zYsRqQmCNj4JcNHKhwB2KOz+CP8Ls00eP3KBrppgGPlMxOCo76nP68/PrpxKnnU
8HrV/xyFo784arv8J0Ypxinz604O81gzIArOGCDNm6Hr5BOHicdvBH/AhgBeD6Vu
yifuGIHjCLUqinLW3cEDYxuzcsYev7xCoLwdYJijI3K4/Q4kPbUYBnmmFQrqgnjJ
2YQ1OkyF1vOXIA==
-----END CERTIFICATE-----