Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File:                     0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier:          XU202RLGWo+qZ/iXe/5lYRuO1pJbwQEWMCuVXFDC/0E=
Subject key identifier:   03:C3:99:FF:01:DB:45:69:45:AB:80:C5:25:9C:4B:16:A9:58:4C:E8
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer:       /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial:       01962E2B4281B253CC93B2B7D342D494EEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number:          0836
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: LTMx6ttz/l0rINLfCBSuerao/KH44ssqQXPDBQiPRL8=)
                          2: 99RaY9xH4qOYuC0KdiJQrFMbC5E.roa (hash: TZUHN/mcHmz7AzTn504QkH94CMbEPlnfBvzJqjhXWtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:81:b2:53:cc:93:b2:b7:d3:42:d4:94:ee:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=03c399ff01db456945ab80c5259c4b16a9584ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:a3:d8:18:f5:4b:02:5a:f8:f8:8e:19:6c:
                    d6:27:28:be:7a:cc:c9:72:00:1c:77:43:58:40:82:
                    44:e9:c7:04:b3:c9:70:7d:f5:0e:c3:f2:7e:d1:4b:
                    68:50:ba:34:b3:98:ec:37:4a:e9:5e:42:bd:3b:2b:
                    8b:7b:6b:d0:68:c3:a5:22:31:1e:b3:26:8c:cf:10:
                    f5:5a:8b:3d:f3:7d:af:bb:d4:72:69:6b:ff:b3:14:
                    e9:b2:a0:3c:78:57:c2:39:2a:e0:e1:e7:b2:e3:ee:
                    0a:e8:17:31:9b:be:69:03:ae:00:e1:19:c3:3a:e8:
                    cb:de:b0:5f:94:2c:07:1b:62:fb:91:fa:74:c1:4b:
                    94:c3:47:f6:4d:38:36:44:bd:2b:36:37:d7:c7:6a:
                    9e:0e:5c:d0:6f:10:2e:ec:0d:5f:9f:b5:2c:00:af:
                    12:c4:ce:7a:ba:a6:b2:4f:f7:5b:67:2e:6e:ed:39:
                    f5:f3:9d:eb:f1:62:b9:4a:b0:64:80:c0:3e:76:03:
                    7d:be:96:3f:13:5c:23:11:73:06:89:20:81:63:ab:
                    ef:9d:b6:db:04:1a:88:39:bf:b1:3e:f3:8f:b4:b0:
                    97:39:b1:7e:26:4f:60:b4:b2:10:04:91:53:2d:4c:
                    e2:a6:b1:cc:45:4b:ac:3c:f6:65:a1:b9:f8:19:ab:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:99:FF:01:DB:45:69:45:AB:80:C5:25:9C:4B:16:A9:58:4C:E8
            X509v3 Authority Key Identifier:
                keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8e:dc:e4:9c:94:1d:e1:31:b4:8b:8e:3d:ff:4a:5e:a7:63:
         49:bd:30:ae:b1:96:da:54:02:43:05:43:2a:2f:6c:81:89:9e:
         db:1c:f4:1c:c9:0d:94:30:7d:26:87:4b:84:53:48:0f:8f:54:
         10:a2:42:40:c9:a7:fe:e1:5b:fd:b0:65:92:77:c3:d2:c4:ac:
         b4:99:e0:fd:1d:3a:e9:4d:c6:4c:66:9f:54:b5:39:7e:d6:29:
         6e:4b:dc:85:ab:3f:ae:5f:de:b4:fb:4a:57:b6:98:18:29:35:
         62:5d:54:1f:2e:6f:f7:e5:3d:04:89:b6:4d:bb:24:ab:d8:85:
         31:36:4c:92:94:e5:e4:fa:59:8e:47:7e:5c:52:b0:8f:85:4f:
         0e:cf:9c:23:6c:49:13:61:a5:98:df:7d:69:c7:2b:6e:bb:47:
         87:dc:b0:f1:78:0a:c6:da:1b:36:f5:b6:dd:c3:6c:61:84:d2:
         14:b5:7f:3d:12:df:21:5e:41:5e:22:70:0f:09:c9:72:55:84:
         a3:88:19:74:e4:c3:a7:8d:35:f7:f9:2d:71:7c:37:6e:6e:03:
         77:8b:a2:8e:5b:20:33:44:70:76:ed:84:c5:7d:8b:c1:7e:84:
         ad:7c:fc:88:f7:5c:c7:6b:60:e0:e9:36:df:f0:92:2f:41:fd:
         63:4e:28:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0KBslPMk7K300LUlO7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2I2NDc3ZTFjODRmNTI5MDdjZDYwYzYzZWE4M2VmNWU0
YWM3ODIwHhcNMjUwNDEzMDgwMTQ5WhcNMjUwNDE0MDgwMTQ5WjAzMTEwLwYDVQQD
EygwM2MzOTlmZjAxZGI0NTY5NDVhYjgwYzUyNTljNGIxNmE5NTg0Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h+j2Bj1SwJa+PiOGWzWJyi+eszJ
cgAcd0NYQIJE6ccEs8lwffUOw/J+0UtoULo0s5jsN0rpXkK9OyuLe2vQaMOlIjEe
syaMzxD1Wos9832vu9RyaWv/sxTpsqA8eFfCOSrg4eey4+4K6Bcxm75pA64A4RnD
OujL3rBflCwHG2L7kfp0wUuUw0f2TTg2RL0rNjfXx2qeDlzQbxAu7A1fn7UsAK8S
xM56uqayT/dbZy5u7Tn1853r8WK5SrBkgMA+dgN9vpY/E1wjEXMGiSCBY6vvnbbb
BBqIOb+xPvOPtLCXObF+Jk9gtLIQBJFTLUziprHMRUusPPZlobn4GavOqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPDmf8B20VpRauAxSWcSxapWEzoMB8GA1UdIwQY
MBaAFNI7ZHfhyE9SkHzWDGPqg+9eSseCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGp0a2QtSElUMUtRZk5ZTVktcUQ3MTVLeDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NTU5ZmQtYjQwOS00NzljLWE0MGYt
MjI1NTU4NWRkZWNiLzEvMGp0a2QtSElUMUtRZk5ZTVktcUQ3MTVLeDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80NTU5ZmQtYjQwOS00NzljLWE0MGYtMjI1NTU4NWRkZWNi
LzEvMGp0a2QtSElUMUtRZk5ZTVktcUQ3MTVLeDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY7c5JyU
HeExtIuOPf9KXqdjSb0wrrGW2lQCQwVDKi9sgYme2xz0HMkNlDB9JodLhFNID49U
EKJCQMmn/uFb/bBlknfD0sSstJng/R066U3GTGafVLU5ftYpbkvchas/rl/etPtK
V7aYGCk1Yl1UHy5v9+U9BIm2Tbskq9iFMTZMkpTl5PpZjkd+XFKwj4VPDs+cI2xJ
E2GlmN99accrbrtHh9yw8XgKxtobNvW23cNsYYTSFLV/PRLfIV5BXiJwDwnJclWE
o4gZdOTDp4019/ktcXw3bm4Dd4uijlsgM0Rwdu2ExX2LwX6ErXz8iPdcx2tg4Ok2
3/CSL0H9Y04oQA==
-----END CERTIFICATE-----