Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
File:                     3ikhmJ19kMZOuzVliDH-ao9JyTg.mft (raw, json)
Hash identifier:          VexhKnBTIX9qe94N3vJ39OwDTV7tsgNwb/PYMG+CF2c=
Subject key identifier:   0C:6F:49:2D:E0:16:16:AB:B9:31:56:30:6C:F6:3A:3B:A6:5B:D3:41
Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
Certificate issuer:       /CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Certificate serial:       01962F067C864EF55FC0E2F94ECAA5BB87E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
Manifest number:          095B
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: 3ikhmJ19kMZOuzVliDH-ao9JyTg.crl (hash: 3xXmcZ9RTsxRmvqOmmrudfgzIrRjr5bzyKroCCGE6Js=)
                          2: TOKJ7leUflS6UttAZzwZcKF4cuU.roa (hash: FbxsOsIky6908M3EghoAhEv3FVACCPzpDuJvnzX9foU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:86:4e:f5:5f:c0:e2:f9:4e:ca:a5:bb:87:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=0c6f492de01616abb93156306cf63a3ba65bd341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:83:29:9f:ad:55:fc:ad:a2:1b:7a:a5:f0:
                    07:bf:4f:53:8b:e4:c2:ed:ee:18:7c:5f:c8:35:ea:
                    d9:4c:ae:5b:52:c8:69:20:4b:19:28:da:8d:67:21:
                    c3:b5:ad:e9:35:79:a6:51:18:51:e7:dc:51:1e:4a:
                    55:fb:b7:52:43:77:c6:cc:06:e0:b9:7e:bd:25:33:
                    24:85:32:9e:8c:d5:5d:fc:e6:60:84:e4:82:46:79:
                    8c:9d:ca:91:52:d6:1c:fc:f5:c0:f5:e1:8e:34:61:
                    82:15:59:7b:83:60:67:fc:7e:d1:76:bf:20:c7:50:
                    ee:c1:77:d3:1c:c8:05:6b:8d:e1:b2:e8:21:cb:73:
                    90:8d:b1:d3:84:2b:f2:ad:4e:e1:67:f1:21:82:f9:
                    fe:37:30:23:c1:12:a2:c3:0f:07:a1:99:f7:06:3a:
                    3b:ea:77:78:bf:99:12:e2:63:99:e7:c0:01:da:85:
                    e6:73:8b:7d:ae:0d:bd:d3:59:98:8e:ce:55:96:fc:
                    79:4f:a1:b0:43:b7:da:58:cc:ef:a1:22:87:b5:22:
                    39:da:8a:07:d4:20:b2:d3:23:bc:ff:78:6a:52:55:
                    43:f5:a5:8a:ce:f1:8b:54:19:c4:3e:0c:88:4f:85:
                    23:5b:0a:d7:6e:97:7b:55:c1:82:a6:63:b8:65:4c:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6F:49:2D:E0:16:16:AB:B9:31:56:30:6C:F6:3A:3B:A6:5B:D3:41
            X509v3 Authority Key Identifier:
                keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:40:09:89:78:35:8b:64:62:f7:8a:78:99:8b:4b:df:cf:
         f7:0a:99:07:4a:e7:d5:9b:a5:91:d7:89:e7:3f:b5:bb:13:8c:
         83:59:0b:80:68:5d:d3:43:c9:75:28:c7:60:4d:5e:fa:bb:70:
         05:2d:c1:3d:0e:1f:16:d0:6a:11:a2:1b:d7:75:a6:16:04:9c:
         1a:61:c2:02:10:cf:a2:6a:a1:1e:18:84:9e:2d:6f:c2:99:5b:
         8e:e4:0f:5e:f1:cd:52:2b:8f:c5:b7:5d:44:ed:ce:b9:3e:81:
         dc:af:f6:e4:db:71:bd:b7:87:45:52:5b:d5:2e:84:2a:cf:8e:
         c9:a0:a6:e0:45:80:c0:a6:fd:2a:0c:d6:5e:ce:a8:b9:68:81:
         f3:87:06:f5:78:bc:b7:f5:3a:59:11:ae:dc:04:32:f2:a8:4a:
         6c:bb:7c:f0:da:44:f0:57:ca:a5:e3:5e:1c:83:99:80:ce:43:
         21:92:39:c3:55:ff:98:a0:cd:2c:6c:02:0a:59:ab:c9:42:dc:
         a0:03:d3:b2:1c:06:fc:fa:17:19:af:9b:dc:82:c0:82:e4:80:
         5e:49:d2:cd:89:97:18:e5:b3:d2:ee:80:d0:30:67:9f:e8:4f:
         8e:97:df:f1:52:f8:7c:2c:84:1f:d4:93:72:86:1b:61:bc:76:
         47:40:55:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnyGTvVfwOL5Tsqlu4flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjkyMTk4OWQ3ZDkwYzY0ZWJiMzU2NTg4MzFmZTZhOGY0
OWM5MzgwHhcNMjUwNDEzMTIwMTE2WhcNMjUwNDE0MTIwMTE2WjAzMTEwLwYDVQQD
EygwYzZmNDkyZGUwMTYxNmFiYjkzMTU2MzA2Y2Y2M2EzYmE2NWJkMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiSDKZ+tVfytoht6pfAHv09Ti+TC
7e4YfF/INerZTK5bUshpIEsZKNqNZyHDta3pNXmmURhR59xRHkpV+7dSQ3fGzAbg
uX69JTMkhTKejNVd/OZghOSCRnmMncqRUtYc/PXA9eGONGGCFVl7g2Bn/H7Rdr8g
x1DuwXfTHMgFa43hsughy3OQjbHThCvyrU7hZ/Ehgvn+NzAjwRKiww8HoZn3Bjo7
6nd4v5kS4mOZ58AB2oXmc4t9rg2901mYjs5Vlvx5T6GwQ7faWMzvoSKHtSI52ooH
1CCy0yO8/3hqUlVD9aWKzvGLVBnEPgyIT4UjWwrXbpd7VcGCpmO4ZUzg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxvSS3gFharuTFWMGz2OjumW9NBMB8GA1UdIwQY
MBaAFN4pIZidfZDGTrs1ZYgx/mqPSck4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTct
MGI1ZWNiNDc0ZjE1LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTctMGI1ZWNiNDc0ZjE1
LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZxACYl4
NYtkYveKeJmLS9/P9wqZB0rn1ZulkdeJ5z+1uxOMg1kLgGhd00PJdSjHYE1e+rtw
BS3BPQ4fFtBqEaIb13WmFgScGmHCAhDPomqhHhiEni1vwplbjuQPXvHNUiuPxbdd
RO3OuT6B3K/25NtxvbeHRVJb1S6EKs+OyaCm4EWAwKb9KgzWXs6ouWiB84cG9Xi8
t/U6WRGu3AQy8qhKbLt88NpE8FfKpeNeHIOZgM5DIZI5w1X/mKDNLGwCClmryULc
oAPTshwG/PoXGa+b3ILAguSAXknSzYmXGOWz0u6A0DBnn+hPjpff8VL4fCyEH9ST
coYbYbx2R0BVuw==
-----END CERTIFICATE-----