Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
File:                     0tiRsOMo58hWrUt6B2TYLYVgltY.mft (raw, json)
Hash identifier:          +x3zTAMx4MSu2vDSe5tXvOSc36HVrnhpOZarBmAnhUg=
Subject key identifier:   1D:1F:62:94:5B:30:D0:62:1C:0F:40:AF:8C:FB:CD:52:24:5D:2D:38
Authority key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
Certificate issuer:       /CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Certificate serial:       01962ECF9C6B445A8306D96902B6AD19E3D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
Manifest number:          013D
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 0tiRsOMo58hWrUt6B2TYLYVgltY.crl (hash: eyBTRYyEiPyfMk7U6HWIHvcesHaEkfeRV+wLD9lJVnw=)
                          2: LL8JcAdqtBuww975zCJ3NT8wbIo.roa (hash: OazqFiciLO+01js5WnVLTxcyLBf+8JShIpJGoJGbyKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9c:6b:44:5a:83:06:d9:69:02:b6:ad:19:e3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=1d1f62945b30d0621c0f40af8cfbcd52245d2d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:56:a3:4a:0a:82:c0:66:80:ad:25:4a:07:
                    45:a9:50:f8:1e:bb:23:d5:33:18:85:c9:78:de:83:
                    f6:6f:1d:93:66:df:ce:31:ac:50:b8:39:50:ba:d5:
                    15:5a:94:27:02:76:76:76:00:9c:4e:30:97:e8:e8:
                    40:68:a1:60:6f:d9:08:78:7b:2d:12:07:40:7a:19:
                    23:72:7b:e9:4a:90:f4:f5:3c:f2:e2:c1:53:fd:18:
                    b3:70:d4:5a:25:b7:2b:8f:38:4f:f9:64:77:43:64:
                    4c:95:41:7f:83:d2:b6:f8:33:5d:e5:1b:bb:0c:3a:
                    3b:f6:5f:fc:fc:ed:66:2a:47:c7:42:2d:88:e4:3e:
                    a5:8f:66:7c:a0:24:1a:22:48:0a:03:e7:5b:37:1b:
                    0e:c3:f2:d5:2d:84:f5:71:52:dc:c3:9b:e5:3c:43:
                    f7:e7:f5:04:32:cd:b8:d0:1e:97:c5:1a:e6:02:ab:
                    12:2d:86:14:d0:d2:af:57:c0:53:db:7f:41:6e:49:
                    a3:43:a7:79:9b:7d:a2:bc:a0:23:33:f4:64:2d:61:
                    47:8b:b9:85:ca:06:e2:7b:1d:76:29:05:3e:08:f6:
                    38:fe:75:f0:e5:bb:5a:e0:1e:d4:2c:33:5c:87:03:
                    07:79:26:38:ee:e1:ca:29:8b:4b:8a:31:5f:6b:3f:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1F:62:94:5B:30:D0:62:1C:0F:40:AF:8C:FB:CD:52:24:5D:2D:38
            X509v3 Authority Key Identifier:
                keyid:D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7c:70:dd:fc:98:28:3f:22:6a:34:a1:f5:46:ab:dd:1a:bc:
         5a:c2:2d:f2:5d:37:35:b1:10:ba:1c:65:d0:2b:0a:e1:f7:a6:
         66:93:aa:c3:3a:dd:5f:7b:ba:e9:3b:4b:ef:c6:dc:de:1f:70:
         b3:5b:ef:ce:5b:9f:3d:a1:5c:8d:6e:0d:cd:53:ea:77:36:48:
         9c:56:d0:be:5b:11:65:e2:f5:ea:a4:6a:e8:2c:9f:75:aa:f5:
         d6:3f:86:58:a7:10:e2:ce:2b:9b:a3:32:78:57:4a:73:65:1f:
         d2:9d:43:07:de:c0:ed:12:92:bd:24:f6:39:b8:e2:49:43:de:
         12:3b:c0:8f:7c:07:7b:50:3f:2a:52:bf:d9:97:45:e1:0d:97:
         01:15:67:21:a5:75:1c:c3:5d:5d:bd:7b:d0:87:11:45:3b:aa:
         17:ee:1a:84:36:74:63:71:65:7b:5d:82:c0:1f:b7:0b:2f:76:
         20:02:3a:ec:f0:53:29:55:79:20:67:10:61:d4:7b:34:a3:5e:
         54:ca:87:87:c4:a8:b5:34:65:3b:35:34:77:5d:8e:e2:7e:c9:
         bc:53:ca:3b:c2:1f:2b:0d:0f:95:a0:f6:5a:a2:e2:2b:f9:30:
         1f:34:ee:db:40:69:5e:17:cf:c9:06:4b:4f:89:ec:c1:2c:19:
         e9:31:3d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5xrRFqDBtlpAratGePUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZDg5MWIwZTMyOGU3Yzg1NmFkNGI3YTA3NjRkODJkODU2
MDk2ZDYwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
EygxZDFmNjI5NDViMzBkMDYyMWMwZjQwYWY4Y2ZiY2Q1MjI0NWQyZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuNWo0oKgsBmgK0lSgdFqVD4Hrsj
1TMYhcl43oP2bx2TZt/OMaxQuDlQutUVWpQnAnZ2dgCcTjCX6OhAaKFgb9kIeHst
EgdAehkjcnvpSpD09Tzy4sFT/RizcNRaJbcrjzhP+WR3Q2RMlUF/g9K2+DNd5Ru7
DDo79l/8/O1mKkfHQi2I5D6lj2Z8oCQaIkgKA+dbNxsOw/LVLYT1cVLcw5vlPEP3
5/UEMs240B6XxRrmAqsSLYYU0NKvV8BT239BbkmjQ6d5m32ivKAjM/RkLWFHi7mF
ygbiex12KQU+CPY4/nXw5bta4B7ULDNchwMHeSY47uHKKYtLijFfaz+PwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0fYpRbMNBiHA9Ar4z7zVIkXS04MB8GA1UdIwQY
MBaAFNLYkbDjKOfIVq1Legdk2C2FYJbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHRpUnNPTW81OGhXclV0NkIyVFlMWVZnbHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZmQ4NWQtMDE1Mi00ZWYyLTllYmYt
MWUyNDBiOTdkMmM0LzEvMHRpUnNPTW81OGhXclV0NkIyVFlMWVZnbHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZmQ4NWQtMDE1Mi00ZWYyLTllYmYtMWUyNDBiOTdkMmM0
LzEvMHRpUnNPTW81OGhXclV0NkIyVFlMWVZnbHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3xw3fyY
KD8iajSh9Uar3Rq8WsIt8l03NbEQuhxl0CsK4femZpOqwzrdX3u66TtL78bc3h9w
s1vvzlufPaFcjW4NzVPqdzZInFbQvlsRZeL16qRq6Cyfdar11j+GWKcQ4s4rm6My
eFdKc2Uf0p1DB97A7RKSvST2ObjiSUPeEjvAj3wHe1A/KlK/2ZdF4Q2XARVnIaV1
HMNdXb170IcRRTuqF+4ahDZ0Y3Fle12CwB+3Cy92IAI67PBTKVV5IGcQYdR7NKNe
VMqHh8SotTRlOzU0d12O4n7JvFPKO8IfKw0PlaD2WqLiK/kwHzTu20BpXhfPyQZL
T4nswSwZ6TE9ug==
-----END CERTIFICATE-----