Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File:                     3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier:          SObpJtE/r4ME432WRCxB6Q6MM7r7ucrfmK3ojTPYAhE=
Subject key identifier:   28:08:AE:24:24:14:F5:8F:A6:63:C7:86:F7:90:AD:DA:B1:71:51:30
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer:       /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial:       01962F0652DE692F77065B8950793B18A87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number:          05E3
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: 4B2fynSkRkNDOKF0ClHwSB8Co/GQAYJiKfLaEcr3mT4=)
                          2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:de:69:2f:77:06:5b:89:50:79:3b:18:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=2808ae242414f58fa663c786f790addab1715130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:e4:15:a7:97:a3:32:ea:9e:20:d6:6f:d4:
                    8c:44:17:6f:38:8b:c3:34:9a:41:6d:79:8b:3d:64:
                    5f:d7:55:cb:56:db:5a:45:f4:8b:9c:66:36:8d:6d:
                    c3:3a:b4:5b:46:55:0a:66:c9:85:67:75:ec:3d:bc:
                    8b:a7:28:a5:35:d1:80:d4:30:ba:bc:5c:4b:46:8f:
                    ce:1c:e1:25:46:43:8f:ed:14:8f:65:23:cd:aa:d2:
                    fe:ad:39:1c:b7:6f:e5:49:34:61:0a:45:c1:4e:0e:
                    5b:77:96:0c:ff:2c:4b:99:0f:2d:4f:6c:54:f9:76:
                    de:43:9d:f7:f2:ec:a5:9f:82:38:14:b6:d3:8f:36:
                    ee:14:f8:59:82:f3:d2:34:20:23:1b:ab:75:14:7b:
                    1f:ae:24:43:79:87:63:b3:1e:6e:83:24:76:9e:53:
                    29:f7:e6:46:25:56:70:5a:87:f1:a5:f9:d1:e6:4b:
                    48:ec:69:6d:6a:8c:89:23:9b:fc:3f:27:16:24:46:
                    42:cb:59:c6:63:db:fe:6c:97:1c:8a:af:86:8f:29:
                    d3:d9:1a:67:c3:28:d1:b3:50:5c:7d:ae:5e:40:01:
                    d5:c6:32:ce:3f:53:8a:bf:d5:b5:f4:f0:e7:dc:3d:
                    56:5d:be:96:37:f1:1c:69:d6:f2:bc:4d:b1:d8:21:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:AE:24:24:14:F5:8F:A6:63:C7:86:F7:90:AD:DA:B1:71:51:30
            X509v3 Authority Key Identifier:
                keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:61:89:a9:9e:7d:10:30:fc:e5:da:91:18:bb:98:6e:ca:3b:
         ed:e9:ce:2f:13:f6:1a:c9:3a:d2:a9:26:82:90:62:b3:69:aa:
         ca:44:a2:f2:0b:ba:e1:24:c2:72:c3:99:4d:df:e0:4a:bd:94:
         13:07:19:23:06:67:c7:cc:44:25:b3:e5:e4:ed:84:8b:b8:52:
         d7:51:ed:a4:09:69:62:55:42:58:4b:07:8b:43:d0:ab:f6:84:
         c0:e4:91:d9:67:0c:a8:0b:c3:a2:67:55:43:bd:f3:93:62:31:
         33:ff:5f:c6:ee:16:fa:21:fa:a4:26:0b:f4:a8:1f:d1:30:b9:
         f7:bb:2c:c2:3d:93:cc:62:3e:fc:b0:2e:d5:e3:2e:05:95:82:
         e0:63:92:1d:05:22:a3:68:fe:7e:68:1a:35:74:b2:0f:28:81:
         45:19:ea:7e:49:f1:24:2e:e5:50:d6:d3:cc:23:9e:62:09:54:
         a0:d3:fe:c2:e9:d1:84:a9:a6:98:51:35:c0:34:18:a3:82:70:
         70:f1:85:f2:57:66:e2:8c:4d:42:a2:6b:a0:9f:05:b2:9a:37:
         af:95:f1:37:4b:d9:55:1e:1a:77:e8:e9:ce:66:fa:ca:6c:eb:
         44:ad:26:a2:b9:8a:8d:fd:fa:b2:c7:a6:05:4a:81:90:b2:8e:
         dd:74:81:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlLeaS93BluJUHk7GKh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm
ZTlhY2YwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
EygyODA4YWUyNDI0MTRmNThmYTY2M2M3ODZmNzkwYWRkYWIxNzE1MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5/kFaeXozLqniDWb9SMRBdvOIvD
NJpBbXmLPWRf11XLVttaRfSLnGY2jW3DOrRbRlUKZsmFZ3XsPbyLpyilNdGA1DC6
vFxLRo/OHOElRkOP7RSPZSPNqtL+rTkct2/lSTRhCkXBTg5bd5YM/yxLmQ8tT2xU
+XbeQ5338uyln4I4FLbTjzbuFPhZgvPSNCAjG6t1FHsfriRDeYdjsx5ugyR2nlMp
9+ZGJVZwWofxpfnR5ktI7GltaoyJI5v8PycWJEZCy1nGY9v+bJcciq+GjynT2Rpn
wyjRs1Bcfa5eQAHVxjLOP1OKv9W19PDn3D1WXb6WN/EcadbyvE2x2CGTwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgIriQkFPWPpmPHhveQrdqxcVEwMB8GA1UdIwQY
MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt
ZmU4NDQwNjBhNDZkLzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk
LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGGJqZ59
EDD85dqRGLuYbso77enOLxP2Gsk60qkmgpBis2mqykSi8gu64STCcsOZTd/gSr2U
EwcZIwZnx8xEJbPl5O2Ei7hS11HtpAlpYlVCWEsHi0PQq/aEwOSR2WcMqAvDomdV
Q73zk2IxM/9fxu4W+iH6pCYL9Kgf0TC597sswj2TzGI+/LAu1eMuBZWC4GOSHQUi
o2j+fmgaNXSyDyiBRRnqfknxJC7lUNbTzCOeYglUoNP+wunRhKmmmFE1wDQYo4Jw
cPGF8ldm4oxNQqJroJ8Fspo3r5XxN0vZVR4ad+jpzmb6ymzrRK0mormKjf36ssem
BUqBkLKO3XSBCw==
-----END CERTIFICATE-----