Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          77bfYZ1lKAsuRh0cfI8rxEi+BS6IIwUSrtbO9i5G098=
Subject key identifier:   AB:E6:95:C2:F4:D3:1A:5E:40:31:83:B5:F5:F6:88:33:C1:29:7F:43
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       01962DF41DA0CC4E1E7ADA33265FF03AC8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: 082+Y/n9EZcCVF+3d+NqxFkN7D7dk+uGVxvMR96mEhI=)
                          2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:a0:cc:4e:1e:7a:da:33:26:5f:f0:3a:c8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=abe695c2f4d31a5e403183b5f5f68833c1297f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:21:da:18:a2:f5:30:17:12:1f:ad:4a:b6:
                    c4:c3:94:ce:62:e2:f5:d7:86:db:11:8d:2f:75:52:
                    78:70:ed:43:c4:6f:a4:29:7f:6d:ca:6e:71:ee:ce:
                    c8:7a:47:ff:8b:3c:30:c7:e9:11:58:54:3c:90:66:
                    a3:af:57:04:52:01:39:93:d7:85:b8:6d:84:cf:97:
                    db:82:d9:cc:ec:d7:02:8e:f5:67:76:2d:36:49:6b:
                    4c:65:53:fc:44:ca:81:22:f2:c4:cb:a6:1f:00:12:
                    b5:fc:98:a4:9e:00:f5:54:d8:18:f4:c0:38:e8:17:
                    30:42:2e:5a:f4:5d:98:84:b1:cf:74:cd:11:f2:82:
                    b5:de:c0:21:ce:d5:ec:cf:4c:14:0b:dd:15:0f:a2:
                    3c:7c:dc:c4:8f:52:b0:3b:ee:df:22:ba:00:f5:86:
                    ba:98:a3:ff:08:9f:4f:4c:88:2b:66:55:39:dc:66:
                    a2:40:57:5b:b4:02:ed:ae:46:06:59:5b:54:37:57:
                    9c:88:aa:07:7d:af:e5:a5:b5:cc:08:b1:e3:8c:05:
                    7c:fa:ec:58:39:46:d7:4d:61:22:27:0a:0e:ce:e2:
                    cb:fa:17:39:ee:7b:31:4d:59:a9:b7:a4:b6:56:fb:
                    63:80:1a:63:9d:06:21:25:f2:67:c1:22:11:c9:39:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:95:C2:F4:D3:1A:5E:40:31:83:B5:F5:F6:88:33:C1:29:7F:43
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:ae:f2:7b:c6:29:4d:78:84:58:17:b7:77:8e:d0:a3:4b:
         53:2a:d5:61:99:fe:a0:f3:fd:6c:a8:8e:be:c1:b2:99:3a:33:
         85:19:63:f8:3b:26:65:df:04:2e:5b:15:fa:63:01:50:77:c7:
         d7:60:e9:51:d2:4b:7f:21:b0:f9:4d:b9:db:3b:97:43:70:61:
         4c:b5:07:0a:6b:7c:4a:04:86:ac:59:de:2a:cd:49:17:5d:e9:
         4f:97:f4:e0:14:cf:12:e8:5f:76:36:d7:09:bb:ed:cb:a6:65:
         ec:77:66:db:91:19:13:4e:4e:25:aa:07:80:bd:53:f9:ea:cc:
         8a:0f:f6:c9:05:99:1e:3c:fe:25:fd:b1:da:8b:4d:e5:dc:b5:
         e4:f8:46:ef:01:6e:1a:7f:59:60:9c:d7:76:aa:75:c8:b9:ce:
         0e:92:70:d8:fe:e6:be:98:f5:25:c3:e2:0d:98:26:15:fa:b7:
         69:d4:1c:cb:6e:ad:b8:db:79:6e:b6:7e:cd:86:1c:7b:9a:e4:
         76:24:c5:af:02:fc:35:f0:c8:33:25:5d:a4:c6:37:2f:20:df:
         5c:b7:06:33:eb:7a:d4:c7:07:7f:bc:f7:0f:ff:88:53:38:2e:
         56:2f:35:e3:03:4e:33:ce:0d:35:7f:7c:ad:0a:12:91:38:2b:
         0f:84:d2:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B2gzE4eetozJl/wOsjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1
NGIwNTUwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
EyhhYmU2OTVjMmY0ZDMxYTVlNDAzMTgzYjVmNWY2ODgzM2MxMjk3ZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorAh2hii9TAXEh+tSrbEw5TOYuL1
14bbEY0vdVJ4cO1DxG+kKX9tym5x7s7Iekf/izwwx+kRWFQ8kGajr1cEUgE5k9eF
uG2Ez5fbgtnM7NcCjvVndi02SWtMZVP8RMqBIvLEy6YfABK1/JikngD1VNgY9MA4
6BcwQi5a9F2YhLHPdM0R8oK13sAhztXsz0wUC90VD6I8fNzEj1KwO+7fIroA9Ya6
mKP/CJ9PTIgrZlU53GaiQFdbtALtrkYGWVtUN1eciKoHfa/lpbXMCLHjjAV8+uxY
OUbXTWEiJwoOzuLL+hc57nsxTVmpt6S2VvtjgBpjnQYhJfJnwSIRyTlPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvmlcL00xpeQDGDtfX2iDPBKX9DMB8GA1UdIwQY
MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt
MmY3NTE5NTIxNmI5LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5
LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgqu8nvG
KU14hFgXt3eO0KNLUyrVYZn+oPP9bKiOvsGymTozhRlj+DsmZd8ELlsV+mMBUHfH
12DpUdJLfyGw+U252zuXQ3BhTLUHCmt8SgSGrFneKs1JF13pT5f04BTPEuhfdjbX
Cbvty6Zl7Hdm25EZE05OJaoHgL1T+erMig/2yQWZHjz+Jf2x2otN5dy15PhG7wFu
Gn9ZYJzXdqp1yLnODpJw2P7mvpj1JcPiDZgmFfq3adQcy26tuNt5brZ+zYYce5rk
diTFrwL8NfDIMyVdpMY3LyDfXLcGM+t61McHf7z3D/+IUzguVi814wNOM84NNX98
rQoSkTgrD4TSww==
-----END CERTIFICATE-----