Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File:                     CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier:          oGhPZ58fQniqH/N+ig0MZMw2LQP4TQ+ezYW4k/ZoqJU=
Subject key identifier:   4B:A3:50:1F:B2:D3:A2:B9:10:4A:A3:13:97:FF:5D:BB:2F:6F:BF:46
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer:       /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial:       01962F3D2BD89D9F51C6DA94D9C6B3B48180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number:          083F
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: JfZ9Bt6e0xhk/VQSAmF7KphQQDm+gWinaH2T3ePPqZw=)
                          2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2b:d8:9d:9f:51:c6:da:94:d9:c6:b3:b4:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=4ba3501fb2d3a2b9104aa31397ff5dbb2f6fbf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:86:30:f2:fb:b7:4c:be:c0:74:b3:90:05:
                    85:5c:d2:12:b4:66:f6:3e:c2:cb:7a:85:de:ef:0a:
                    0b:21:23:5b:3a:c5:22:67:97:83:85:67:c0:9a:16:
                    5e:db:79:84:b4:03:2f:1a:fc:de:7a:dc:c9:40:90:
                    ad:36:8a:d0:65:c5:d3:46:f4:bb:a1:3e:1f:ca:38:
                    cb:1b:3b:fa:c8:5f:4f:91:f1:18:05:85:f1:b0:4a:
                    6f:bf:3c:64:87:e7:bc:94:eb:ee:d2:33:71:fc:4d:
                    2b:4a:38:85:0a:b7:a9:1c:1b:17:d9:f1:72:5e:4d:
                    10:97:fd:0a:cd:92:7c:72:a8:e4:65:6f:18:3d:53:
                    87:1f:9e:35:6f:50:ec:ec:81:e5:d6:68:62:a3:0c:
                    a7:04:fb:f3:da:cd:b1:8c:d5:c0:aa:88:3c:ef:81:
                    85:ba:5c:55:2b:a2:fe:01:33:86:9d:4b:57:cd:bf:
                    92:55:c4:7e:17:a9:f0:bf:58:c2:9e:ac:15:37:86:
                    5c:80:38:8e:fe:40:f4:20:ce:5c:96:3b:48:25:49:
                    1d:d4:42:c3:92:28:73:53:ef:2f:06:55:08:f6:ba:
                    e0:cb:40:5f:04:b8:ba:5e:97:ac:98:ab:82:0b:7a:
                    e1:77:dd:ae:da:07:6a:07:20:40:d0:18:26:b9:f5:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A3:50:1F:B2:D3:A2:B9:10:4A:A3:13:97:FF:5D:BB:2F:6F:BF:46
            X509v3 Authority Key Identifier:
                keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:41:f0:53:47:52:ff:33:e6:df:64:50:f5:80:b7:94:9b:
         81:7b:7f:48:87:00:b6:10:6b:4e:5d:5e:b4:a8:8a:65:16:8c:
         70:e7:17:28:72:08:85:cf:ed:68:d7:20:a4:56:20:77:d3:7f:
         c2:65:e2:41:39:ee:ba:54:48:0f:ab:5a:5b:0e:b5:ac:f8:4a:
         9d:f8:f9:21:d5:f2:7a:66:32:4e:76:d2:3f:b0:fa:ec:bd:9f:
         cf:89:e6:05:a5:2b:87:ea:57:c3:88:7a:4a:e1:02:1f:8a:9f:
         08:29:04:4a:ad:47:c2:e2:3c:fc:5f:dc:71:c5:d6:7e:fd:0d:
         7e:34:8a:90:69:47:5a:f1:04:3f:87:91:df:c3:70:e4:18:e4:
         3d:c2:a7:64:c1:81:a2:86:f0:46:ac:68:51:87:27:95:ef:36:
         f5:22:6e:14:b0:c6:2d:c9:66:65:e4:31:26:05:d5:26:1b:4e:
         0d:73:80:d0:24:c5:92:d3:6f:96:2f:1f:16:60:4d:75:93:c9:
         34:b4:47:b3:5e:b8:2c:56:fd:ed:7f:25:8e:30:02:e3:16:b8:
         c0:3b:85:79:fc:b7:9f:84:ac:30:cf:5c:e1:9c:19:b9:50:06:
         0f:78:52:4d:46:c0:45:82:2e:3d:c3:3e:bf:3c:ac:8f:ad:cd:
         bb:57:37:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPSvYnZ9RxtqU2caztIGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl
YzZhOGUwHhcNMjUwNDEzMTMwMTAwWhcNMjUwNDE0MTMwMTAwWjAzMTEwLwYDVQQD
Eyg0YmEzNTAxZmIyZDNhMmI5MTA0YWEzMTM5N2ZmNWRiYjJmNmZiZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMqGMPL7t0y+wHSzkAWFXNIStGb2
PsLLeoXe7woLISNbOsUiZ5eDhWfAmhZe23mEtAMvGvzeetzJQJCtNorQZcXTRvS7
oT4fyjjLGzv6yF9PkfEYBYXxsEpvvzxkh+e8lOvu0jNx/E0rSjiFCrepHBsX2fFy
Xk0Ql/0KzZJ8cqjkZW8YPVOHH541b1Ds7IHl1mhiowynBPvz2s2xjNXAqog874GF
ulxVK6L+ATOGnUtXzb+SVcR+F6nwv1jCnqwVN4ZcgDiO/kD0IM5cljtIJUkd1ELD
kihzU+8vBlUI9rrgy0BfBLi6XpesmKuCC3rhd92u2gdqByBA0BgmufXlhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEujUB+y06K5EEqjE5f/Xbsvb79GMB8GA1UdIwQY
MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt
OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk
LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKFB8FNH
Uv8z5t9kUPWAt5SbgXt/SIcAthBrTl1etKiKZRaMcOcXKHIIhc/taNcgpFYgd9N/
wmXiQTnuulRID6taWw61rPhKnfj5IdXyemYyTnbSP7D67L2fz4nmBaUrh+pXw4h6
SuECH4qfCCkESq1HwuI8/F/cccXWfv0NfjSKkGlHWvEEP4eR38Nw5BjkPcKnZMGB
oobwRqxoUYcnle829SJuFLDGLclmZeQxJgXVJhtODXOA0CTFktNvli8fFmBNdZPJ
NLRHs164LFb97X8ljjAC4xa4wDuFefy3n4SsMM9c4ZwZuVAGD3hSTUbARYIuPcM+
vzysj63Nu1c3PA==
-----END CERTIFICATE-----