Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
File:                     D6j7U5miekMK5yfFMs0iSZnohk8.mft (raw, json)
Hash identifier:          c/3GuwXK/r2wepydrnP2mQga9XxY3s4UaMYA8K1x5KY=
Subject key identifier:   80:9C:5F:A7:AB:74:B7:53:19:9F:7A:F3:AB:2F:53:0C:A5:D5:5D:FE
Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
Certificate issuer:       /CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Certificate serial:       01962FAB3C6FCDD70BFA96602ADA11BD9271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
Manifest number:          0174
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 5jBhyCclhjBWCSh1O-0WT6aKzvs.roa (hash: MRjgNDdW46vQb+SgK5+muMmigtF72q9wmhV3HqxuIuc=)
                          2: D6j7U5miekMK5yfFMs0iSZnohk8.crl (hash: wBUJ9UINRgA0kURW/nt2HeHvLhtr59m1chcLVQK5rEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:6f:cd:d7:0b:fa:96:60:2a:da:11:bd:92:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=809c5fa7ab74b753199f7af3ab2f530ca5d55dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:e7:1a:26:8c:12:08:92:61:d2:c3:fc:f3:
                    c2:c3:60:c5:52:e7:45:77:cb:55:e7:68:86:c9:43:
                    f5:fe:3f:37:00:a8:03:d5:cd:b8:29:3c:0a:8d:5f:
                    c0:72:b2:35:2d:28:41:41:60:bf:90:ff:1e:85:c6:
                    45:0a:f3:8f:c0:f4:ca:4f:08:5e:11:b2:5f:88:8f:
                    b9:ec:11:37:0a:47:ca:8a:b4:8f:d4:15:91:31:19:
                    0b:98:a2:57:ba:a7:be:f4:df:1d:0c:ea:5d:19:ca:
                    d8:da:68:5d:95:69:c6:60:91:d3:71:48:6a:08:1f:
                    a2:1f:25:a5:51:b6:34:15:27:1d:00:1c:95:7c:c1:
                    7d:f2:7b:d7:cf:3b:df:3f:3d:ac:d7:40:0e:96:03:
                    3c:7b:47:af:ac:f8:8f:6c:03:21:ae:fb:48:77:86:
                    e1:29:28:25:40:7f:17:9c:72:d0:34:88:b8:13:14:
                    c7:3d:7d:5d:c3:b9:6d:08:d6:98:40:c0:01:05:ae:
                    7f:2a:5f:74:7d:80:ec:fc:56:6a:2b:d1:6c:61:b7:
                    f8:52:f1:27:a0:a2:02:55:7a:2c:5c:04:22:8f:de:
                    71:94:b7:d5:b9:33:cf:ff:c2:cd:48:db:2c:c6:84:
                    83:3f:c4:7b:9b:5f:1b:ea:0b:94:66:7f:72:61:d3:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9C:5F:A7:AB:74:B7:53:19:9F:7A:F3:AB:2F:53:0C:A5:D5:5D:FE
            X509v3 Authority Key Identifier:
                keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:98:e3:09:71:4b:46:88:fa:58:24:89:dd:61:7f:77:5d:da:
         f3:1b:94:3d:8c:94:5e:52:45:07:a3:59:b3:91:45:b2:2d:22:
         b8:fa:d7:05:63:d5:5b:18:d1:be:77:e4:7b:5a:62:ff:15:e1:
         35:aa:94:5a:14:c2:ad:cd:f1:cc:aa:b3:23:71:fa:58:f8:2b:
         dc:82:5a:11:6e:69:6e:fa:9d:1c:53:c0:ca:e7:5d:bf:6d:b7:
         c1:e6:db:47:8c:77:c2:7b:5b:c3:80:4a:ab:f6:21:d7:da:47:
         23:59:52:bb:39:57:d7:ee:d0:98:7d:76:d6:2f:77:f7:6b:ef:
         07:d6:e7:82:77:51:10:c7:bf:ea:ca:e1:4a:46:ba:cc:b3:18:
         2c:6c:57:ea:f6:4a:fe:75:e0:69:a4:61:31:c5:a9:0b:a8:9f:
         6b:07:ab:08:73:e8:28:21:5d:9c:b3:d0:e4:13:c0:28:6a:f8:
         dc:1c:3a:a8:3c:d5:3f:bd:b4:22:b4:06:7c:ed:c9:cc:59:30:
         4f:7d:39:62:0e:d1:59:ea:b5:e0:1e:92:95:7b:3e:9b:6d:34:
         9a:2e:b2:49:56:04:de:71:32:d5:5f:c8:38:db:2f:26:5b:35:
         c1:22:93:57:43:59:a2:fd:9f:4e:c1:8e:72:6b:f3:1f:95:87:
         94:03:63:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzxvzdcL+pZgKtoRvZJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYThmYjUzOTlhMjdhNDMwYWU3MjdjNTMyY2QyMjQ5OTll
ODg2NGYwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
Eyg4MDljNWZhN2FiNzRiNzUzMTk5ZjdhZjNhYjJmNTMwY2E1ZDU1ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR7nGiaMEgiSYdLD/PPCw2DFUudF
d8tV52iGyUP1/j83AKgD1c24KTwKjV/AcrI1LShBQWC/kP8ehcZFCvOPwPTKTwhe
EbJfiI+57BE3CkfKirSP1BWRMRkLmKJXuqe+9N8dDOpdGcrY2mhdlWnGYJHTcUhq
CB+iHyWlUbY0FScdAByVfMF98nvXzzvfPz2s10AOlgM8e0evrPiPbAMhrvtId4bh
KSglQH8XnHLQNIi4ExTHPX1dw7ltCNaYQMABBa5/Kl90fYDs/FZqK9FsYbf4UvEn
oKICVXosXAQij95xlLfVuTPP/8LNSNssxoSDP8R7m18b6guUZn9yYdOfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICcX6erdLdTGZ9686svUwyl1V3+MB8GA1UdIwQY
MBaAFA+o+1OZonpDCucnxTLNIkmZ6IZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZqN1U1bWlla01LNXlmRk1zMGlTWm5vaGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zODZmODEtYjEzOS00OGFmLWJjZWEt
YTcxZmI0NjM1MDY1LzEvRDZqN1U1bWlla01LNXlmRk1zMGlTWm5vaGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zODZmODEtYjEzOS00OGFmLWJjZWEtYTcxZmI0NjM1MDY1
LzEvRDZqN1U1bWlla01LNXlmRk1zMGlTWm5vaGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpjjCXFL
Roj6WCSJ3WF/d13a8xuUPYyUXlJFB6NZs5FFsi0iuPrXBWPVWxjRvnfke1pi/xXh
NaqUWhTCrc3xzKqzI3H6WPgr3IJaEW5pbvqdHFPAyuddv223webbR4x3wntbw4BK
q/Yh19pHI1lSuzlX1+7QmH121i9392vvB9bngndREMe/6srhSka6zLMYLGxX6vZK
/nXgaaRhMcWpC6ifawerCHPoKCFdnLPQ5BPAKGr43Bw6qDzVP720IrQGfO3JzFkw
T305Yg7RWeq14B6SlXs+m200mi6ySVYE3nEy1V/IONsvJls1wSKTV0NZov2fTsGO
cmvzH5WHlANjIw==
-----END CERTIFICATE-----