Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File:                     8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier:          3Zzt34TAd2A6qmkuWWCLpb0t1gylcIQcq050tss3oL4=
Subject key identifier:   1A:A0:63:4C:63:07:65:0D:8D:19:97:FC:3D:EB:82:34:51:80:57:E2
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer:       /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial:       01962FAB812602A1B45839645A8F67A9E280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number:          4D
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: AHUQnWWq1sFcs4EK017/qk8MJe7ZL7xhpcSGyhAG64U=)
                          2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:81:26:02:a1:b4:58:39:64:5a:8f:67:a9:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=1aa0634c6307650d8d1997fc3deb8234518057e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:66:82:9a:0c:f9:ca:97:e0:c5:b4:97:ac:
                    31:3b:5a:c4:85:67:e7:79:ba:c8:b3:02:53:c9:f5:
                    90:43:3b:77:3d:dd:02:10:b9:60:20:60:03:0a:62:
                    9c:3d:0c:d1:bc:3e:04:f1:02:10:d2:89:46:d6:14:
                    f3:23:b4:5a:32:39:85:6d:fd:ff:f7:9f:d3:85:54:
                    15:76:67:f1:c1:ef:ce:3f:69:4e:38:39:44:24:73:
                    ff:88:60:76:c7:08:42:12:2d:8f:1d:be:33:f5:7d:
                    57:e0:e0:15:f1:c6:60:77:23:98:f1:63:8c:b3:c3:
                    42:c7:b8:76:46:cb:1c:25:1b:8c:3d:ec:3c:99:e3:
                    fc:dc:24:d8:7a:30:09:a3:4b:30:74:20:eb:97:07:
                    9f:3f:8b:e6:d1:36:d4:24:86:a0:0a:04:34:f2:30:
                    81:b5:ba:67:8e:48:c2:a6:50:80:be:4b:32:a3:00:
                    ba:78:b9:82:7e:f4:ec:b2:98:f9:2e:ac:88:7d:15:
                    89:23:69:d9:34:98:41:e1:cb:5d:dd:49:be:a8:38:
                    0f:62:96:74:10:a1:72:45:65:fe:08:ab:79:3f:ae:
                    2b:1b:a9:71:2f:08:b0:5f:c3:ec:8e:98:d3:4f:98:
                    7c:5d:e6:03:44:80:18:a4:c5:f1:a6:57:b8:10:1e:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A0:63:4C:63:07:65:0D:8D:19:97:FC:3D:EB:82:34:51:80:57:E2
            X509v3 Authority Key Identifier:
                keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:19:34:b9:72:ad:6a:06:06:10:f0:a4:e0:51:12:06:f3:
         72:c8:99:91:2c:fd:0d:bd:a6:51:c4:d1:ac:63:13:22:3e:28:
         40:a4:7e:9e:f0:73:1b:c8:f4:7f:41:b4:c3:9c:d0:6b:f6:42:
         8c:07:d3:e1:7e:c8:0a:b0:d4:55:b9:64:51:c9:99:f5:42:c3:
         f1:39:84:a9:da:cd:46:48:ef:28:5f:6a:04:64:54:55:91:61:
         1e:b0:84:e3:c6:9c:57:52:a2:3f:c6:2c:2b:60:eb:8f:18:2f:
         16:93:82:e1:17:69:f8:47:11:cd:be:0f:2d:3d:cd:68:cf:ed:
         14:8b:e9:47:23:06:bf:17:7e:d1:5c:c4:59:93:1c:a9:59:03:
         3a:33:d4:96:bd:c8:9a:52:03:be:e0:ab:16:cb:26:84:63:4c:
         f0:f4:b2:ec:4d:36:63:fa:29:fa:ff:cd:27:5b:cf:bf:03:a0:
         c2:c5:53:a7:94:a2:38:92:f1:b0:56:00:65:14:1e:d2:a5:7f:
         da:bc:5f:3e:f4:8a:3d:39:2d:f8:47:de:d9:d3:d0:de:ac:e8:
         51:9b:0c:0f:90:29:b6:ed:9a:9a:42:99:78:bf:f6:7c:27:5c:
         92:f5:7b:c0:07:f2:76:18:4f:c0:f3:a8:15:23:e6:99:cb:b6:
         a7:b7:27:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq4EmAqG0WDlkWo9nqeKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx
MjljNGEwHhcNMjUwNDEzMTUwMTMwWhcNMjUwNDE0MTUwMTMwWjAzMTEwLwYDVQQD
EygxYWEwNjM0YzYzMDc2NTBkOGQxOTk3ZmMzZGViODIzNDUxODA1N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEZmgpoM+cqX4MW0l6wxO1rEhWfn
ebrIswJTyfWQQzt3Pd0CELlgIGADCmKcPQzRvD4E8QIQ0olG1hTzI7RaMjmFbf3/
95/ThVQVdmfxwe/OP2lOODlEJHP/iGB2xwhCEi2PHb4z9X1X4OAV8cZgdyOY8WOM
s8NCx7h2RsscJRuMPew8meP83CTYejAJo0swdCDrlwefP4vm0TbUJIagCgQ08jCB
tbpnjkjCplCAvksyowC6eLmCfvTsspj5LqyIfRWJI2nZNJhB4ctd3Um+qDgPYpZ0
EKFyRWX+CKt5P64rG6lxLwiwX8PsjpjTT5h8XeYDRIAYpMXxple4EB4M9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqgY0xjB2UNjRmX/D3rgjRRgFfiMB8GA1UdIwQY
MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt
ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy
LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHa4ZNLly
rWoGBhDwpOBREgbzcsiZkSz9Db2mUcTRrGMTIj4oQKR+nvBzG8j0f0G0w5zQa/ZC
jAfT4X7ICrDUVblkUcmZ9ULD8TmEqdrNRkjvKF9qBGRUVZFhHrCE48acV1KiP8Ys
K2DrjxgvFpOC4Rdp+EcRzb4PLT3NaM/tFIvpRyMGvxd+0VzEWZMcqVkDOjPUlr3I
mlIDvuCrFssmhGNM8PSy7E02Y/op+v/NJ1vPvwOgwsVTp5SiOJLxsFYAZRQe0qV/
2rxfPvSKPTkt+Efe2dPQ3qzoUZsMD5Aptu2amkKZeL/2fCdckvV7wAfydhhPwPOo
FSPmmcu2p7cn5g==
-----END CERTIFICATE-----