Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          36PsLlCFXZ4rEtufbAzlBUjHsveNfvyqEefFe83o98M=
Subject key identifier:   96:27:13:66:A7:AD:3C:43:1F:BF:3B:8B:C6:6C:22:0F:3D:5E:BD:83
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       01962E98BAB31FF7F90549A8E47F84710448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: uGmW6D1uJyB9MNdpsQPDOXIOrtJ8r2HJStWJZesmELI=)
                          2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
                          3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
                          4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ba:b3:1f:f7:f9:05:49:a8:e4:7f:84:71:04:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=96271366a7ad3c431fbf3b8bc66c220f3d5ebd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:a6:59:79:ae:1f:86:09:1b:01:ce:a3:46:
                    b2:df:a0:53:ec:53:38:48:0f:24:59:d3:da:84:bf:
                    32:64:22:18:88:a4:d0:ba:39:83:89:c6:9b:bc:79:
                    c5:da:61:02:bf:d5:81:9b:87:cc:7c:3d:22:c3:2e:
                    29:89:2e:aa:19:92:36:a1:50:15:ee:cb:41:7d:5c:
                    01:da:d9:10:00:b0:12:cf:d8:ec:16:82:cf:be:93:
                    a4:c4:27:b9:1b:24:e9:27:05:b8:ef:fd:18:c2:e0:
                    9e:4c:df:a8:2b:b4:ee:40:4f:85:09:fe:23:d0:63:
                    d8:bf:f0:da:e0:d7:2a:ad:3c:0e:83:50:26:cc:23:
                    88:93:db:93:2e:54:c8:b7:a6:c8:60:22:5b:d0:64:
                    0a:c3:95:ce:28:a0:d0:25:ff:17:ff:d7:b7:26:41:
                    46:65:b7:6d:18:63:1c:09:97:2b:d7:c8:81:98:50:
                    03:51:eb:ef:89:01:ba:70:5a:46:de:c7:ee:7a:7c:
                    95:ee:de:74:d9:82:63:bd:a5:d1:65:45:2a:e4:86:
                    cb:60:da:bb:32:64:3b:26:71:33:00:47:a9:81:7e:
                    a8:b8:6d:4a:67:4a:81:e5:ef:0e:c2:ae:e0:33:45:
                    bc:04:e2:8b:31:f7:9c:37:b8:2c:d2:f5:70:c1:63:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:13:66:A7:AD:3C:43:1F:BF:3B:8B:C6:6C:22:0F:3D:5E:BD:83
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:b8:81:2d:2c:b3:7f:9c:f5:0b:d3:7b:af:05:f6:b2:1f:f3:
         95:9e:42:b6:83:01:78:f6:ab:aa:d3:64:ac:21:50:76:32:e6:
         8d:af:22:e1:69:bd:96:52:f6:4e:f6:54:77:a9:ae:e3:dc:67:
         ff:cc:f9:e6:13:d1:22:55:f7:35:77:f0:54:ac:a7:a6:d3:76:
         90:93:b8:2f:6c:5b:b5:75:74:0c:0b:9c:bc:b1:7b:3f:6a:0e:
         19:a5:99:c9:78:d2:15:d2:42:68:10:b7:2d:1a:11:43:ae:92:
         d4:39:e4:26:17:74:29:f3:f7:2e:9e:7e:01:bd:32:7c:a7:40:
         46:93:ca:95:c5:50:42:86:00:1d:f1:ab:92:ab:10:d0:69:65:
         d3:8e:c1:df:e4:3c:1a:4a:ea:f3:a8:28:95:b4:96:63:74:bd:
         0c:d1:dd:75:e6:a4:8c:73:7b:13:a6:82:31:24:ec:47:d6:3e:
         dd:82:c1:9f:81:b6:be:2f:87:cd:08:1c:3f:ba:6c:9e:5c:6a:
         45:27:f1:ff:17:92:46:84:c6:7b:88:0d:27:f0:4a:12:0a:e6:
         b7:ae:0a:40:46:ac:e0:59:29:f0:ac:bf:d5:76:29:61:1e:fd:
         c9:74:60:20:e4:3a:63:96:33:77:54:58:f5:4a:7a:63:27:4a:
         68:bf:10:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLqzH/f5BUmo5H+EcQRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz
OGNiNjQwHhcNMjUwNDEzMTAwMTIzWhcNMjUwNDE0MTAwMTIzWjAzMTEwLwYDVQQD
Eyg5NjI3MTM2NmE3YWQzYzQzMWZiZjNiOGJjNjZjMjIwZjNkNWViZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2WmWXmuH4YJGwHOo0ay36BT7FM4
SA8kWdPahL8yZCIYiKTQujmDicabvHnF2mECv9WBm4fMfD0iwy4piS6qGZI2oVAV
7stBfVwB2tkQALASz9jsFoLPvpOkxCe5GyTpJwW47/0YwuCeTN+oK7TuQE+FCf4j
0GPYv/Da4NcqrTwOg1AmzCOIk9uTLlTIt6bIYCJb0GQKw5XOKKDQJf8X/9e3JkFG
ZbdtGGMcCZcr18iBmFADUevviQG6cFpG3sfuenyV7t502YJjvaXRZUUq5IbLYNq7
MmQ7JnEzAEepgX6ouG1KZ0qB5e8Owq7gM0W8BOKLMfecN7gs0vVwwWMCUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYnE2anrTxDH787i8ZsIg89Xr2DMB8GA1UdIwQY
MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt
OWRjZmQyZWYzMDIzLzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz
LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyriBLSyz
f5z1C9N7rwX2sh/zlZ5CtoMBeParqtNkrCFQdjLmja8i4Wm9llL2TvZUd6mu49xn
/8z55hPRIlX3NXfwVKynptN2kJO4L2xbtXV0DAucvLF7P2oOGaWZyXjSFdJCaBC3
LRoRQ66S1DnkJhd0KfP3Lp5+Ab0yfKdARpPKlcVQQoYAHfGrkqsQ0Gll047B3+Q8
Gkrq86golbSWY3S9DNHddeakjHN7E6aCMSTsR9Y+3YLBn4G2vi+HzQgcP7psnlxq
RSfx/xeSRoTGe4gNJ/BKEgrmt64KQEas4Fkp8Ky/1XYpYR79yXRgIOQ6Y5Yzd1RY
9Up6YydKaL8Q4g==
-----END CERTIFICATE-----