Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File:                     sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier:          a4hzCnoqtfLhUe/u6JSptg+Wd2F2AUrkcufMqAL2y3Q=
Subject key identifier:   44:08:0B:1E:40:2A:68:4D:48:8C:A7:98:D7:CA:C8:FD:FF:BC:72:2E
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       01962ECF75F5594C018AFA132E0D8E7D7203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number:          0349
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: cofMrZUGj5NsQp1oLa40MN7rEkw.roa (hash: wmR8/1eMWv5ki7+/+pR2G+FNUzCKSL6K5OVlD8TTm08=)
                          2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: Nxed9TB6olWt75oFyQSY4RnJEVarrVbeJwJjG4W5FVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:75:f5:59:4c:01:8a:fa:13:2e:0d:8e:7d:72:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=44080b1e402a684d488ca798d7cac8fdffbc722e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:8c:77:63:cf:3d:83:0a:9c:07:89:07:fb:
                    58:32:92:74:af:82:f9:6d:8e:d2:d1:c1:94:4a:7c:
                    4f:fc:46:62:a0:3b:e0:ca:d1:ed:17:f6:c0:78:64:
                    0f:d6:ac:9a:0d:5e:29:f0:4d:2e:12:1e:47:54:7f:
                    c0:87:f8:6e:f1:76:a4:f8:6e:02:18:6c:bb:20:ae:
                    1b:5a:bb:53:c7:c8:e0:29:16:4f:c4:f8:7d:ba:7a:
                    e2:8d:33:90:05:44:d7:d0:d6:7e:8f:fd:7b:6e:8a:
                    bd:83:c5:c0:f5:a6:c4:1b:a2:19:f8:11:37:03:b5:
                    79:68:9c:33:73:a4:a4:17:b4:8c:26:5f:b8:9c:17:
                    f2:01:cd:7a:2e:a1:31:ec:91:91:22:74:c3:f7:91:
                    e6:96:d7:dd:3b:e5:af:63:e2:06:a2:a1:bf:5d:72:
                    f8:a4:bb:98:63:64:0e:5d:41:1a:61:4c:e4:92:ca:
                    41:b4:93:6f:bc:e5:d5:80:00:6e:d0:8a:a8:c4:ee:
                    2f:a2:8c:3d:61:39:6e:48:80:fb:4a:13:71:60:1e:
                    83:f3:a4:4e:d1:65:b3:16:40:c4:4e:f7:7a:d6:55:
                    f8:ba:57:5c:9d:ad:46:eb:91:5e:02:6e:c9:fb:f4:
                    27:0d:70:11:b3:d3:f3:24:d3:e6:79:ed:25:08:6e:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:0B:1E:40:2A:68:4D:48:8C:A7:98:D7:CA:C8:FD:FF:BC:72:2E
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:52:63:e8:b8:16:4b:65:7a:e5:f6:e9:3b:b5:e3:9d:27:75:
         03:4d:fe:b3:21:8f:19:35:10:95:54:c9:13:80:b4:e0:e0:7c:
         5b:10:69:bd:db:da:5a:34:9c:c2:dc:e5:70:b8:4f:0d:37:bf:
         45:81:04:81:73:a7:8e:2e:cd:1f:f6:81:2d:d4:f2:c3:1d:ac:
         47:0d:ff:86:19:0f:56:6f:1e:e4:b5:44:e3:7f:86:ee:b1:d2:
         eb:bc:7a:43:1c:c0:9e:61:91:1b:34:ca:c3:48:6c:93:79:e4:
         0b:31:3c:ce:c2:1f:51:26:aa:cb:01:dd:04:07:98:35:13:7e:
         e1:ea:84:39:f6:dd:57:db:b5:a2:6a:b8:86:61:3b:98:08:f3:
         4e:b5:98:c9:9b:10:11:a4:dc:13:00:87:8f:0a:b3:03:4f:83:
         4c:0e:8d:09:85:a1:01:b1:55:06:51:54:aa:77:ed:d5:29:b6:
         f8:c0:f6:d2:86:f8:65:46:17:01:6a:f2:80:5c:75:a8:54:9e:
         50:3c:73:05:d7:6c:9e:c9:d3:91:15:10:6a:1f:c6:cc:52:6e:
         ae:42:38:0a:f7:02:03:c6:3f:49:9b:d0:c8:8b:5d:39:cc:86:
         ed:19:cf:73:13:ea:71:11:e2:22:d2:e7:0b:e1:43:a3:4f:a3:
         32:ae:22:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3X1WUwBivoTLg2OfXIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi
ZjEwNGUwHhcNMjUwNDEzMTEwMTEwWhcNMjUwNDE0MTEwMTEwWjAzMTEwLwYDVQQD
Eyg0NDA4MGIxZTQwMmE2ODRkNDg4Y2E3OThkN2NhYzhmZGZmYmM3MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIyMd2PPPYMKnAeJB/tYMpJ0r4L5
bY7S0cGUSnxP/EZioDvgytHtF/bAeGQP1qyaDV4p8E0uEh5HVH/Ah/hu8Xak+G4C
GGy7IK4bWrtTx8jgKRZPxPh9unrijTOQBUTX0NZ+j/17boq9g8XA9abEG6IZ+BE3
A7V5aJwzc6SkF7SMJl+4nBfyAc16LqEx7JGRInTD95HmltfdO+WvY+IGoqG/XXL4
pLuYY2QOXUEaYUzkkspBtJNvvOXVgABu0IqoxO4voow9YTluSID7ShNxYB6D86RO
0WWzFkDETvd61lX4uldcna1G65FeAm7J+/QnDXARs9PzJNPmee0lCG5sYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQICx5AKmhNSIynmNfKyP3/vHIuMB8GA1UdIwQY
MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt
OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj
LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVJj6LgW
S2V65fbpO7XjnSd1A03+syGPGTUQlVTJE4C04OB8WxBpvdvaWjScwtzlcLhPDTe/
RYEEgXOnji7NH/aBLdTywx2sRw3/hhkPVm8e5LVE43+G7rHS67x6QxzAnmGRGzTK
w0hsk3nkCzE8zsIfUSaqywHdBAeYNRN+4eqEOfbdV9u1omq4hmE7mAjzTrWYyZsQ
EaTcEwCHjwqzA0+DTA6NCYWhAbFVBlFUqnft1Sm2+MD20ob4ZUYXAWrygFx1qFSe
UDxzBddsnsnTkRUQah/GzFJurkI4CvcCA8Y/SZvQyItdOcyG7RnPcxPqcRHiItLn
C+FDo0+jMq4ivg==
-----END CERTIFICATE-----