Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File:                     3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier:          B69aE5tjTdgP1ylqXr/my0x4EoVYW07a46ElKdNllH4=
Subject key identifier:   A6:9F:63:A3:1C:68:60:12:99:71:78:34:31:2E:35:79:8C:50:43:24
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer:       /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial:       01962FAB67837668E72133581E96E09C3EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: dQobpKuEk8btxRMe63ctE0xj/yegqZCmu9+Y/h0U6nI=)
                          2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:67:83:76:68:e7:21:33:58:1e:96:e0:9c:3e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=a69f63a31c68601299717834312e35798c504324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:73:fa:8f:5f:7f:ec:6c:0a:ac:a9:6e:9a:
                    7d:0d:07:78:d9:c9:1e:e0:da:3c:90:e7:ba:6e:ec:
                    8b:f4:ef:bf:b7:70:2b:af:0d:49:4f:de:49:0c:fd:
                    b7:8c:dd:23:46:4b:c4:82:a2:e5:26:3b:49:b7:99:
                    a8:6c:27:ed:8b:c5:66:3f:05:c3:1d:b1:f4:48:6c:
                    63:0d:79:f9:8f:db:6b:87:5b:b3:c1:bc:9f:55:06:
                    7b:b5:fb:14:e2:5a:75:4b:2e:4c:5a:61:3d:72:9a:
                    01:9d:3c:73:4b:a3:07:1c:29:5f:c9:55:57:36:7a:
                    68:5e:54:74:9f:c6:c5:08:00:51:d8:10:3d:82:3a:
                    b2:9c:20:a5:66:de:20:1d:31:71:a3:f2:24:f0:83:
                    a0:47:c4:52:ab:c0:aa:17:b9:67:fa:e2:6a:9b:4f:
                    5f:af:19:49:32:41:62:d1:75:46:ea:34:a2:bb:9c:
                    e9:25:3f:f1:ea:04:c3:c6:a0:2c:9a:01:f9:be:f2:
                    1d:02:af:ad:1e:de:4a:e0:4e:bb:48:79:af:ae:a9:
                    4a:af:cb:15:48:48:81:7a:8e:34:a4:a9:c4:8f:3c:
                    88:c9:e9:85:58:e5:eb:a5:fa:80:d3:4f:de:c6:86:
                    c8:50:10:59:d5:75:cf:49:27:ba:1d:ff:57:2c:81:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:63:A3:1C:68:60:12:99:71:78:34:31:2E:35:79:8C:50:43:24
            X509v3 Authority Key Identifier:
                keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:a0:95:73:b6:ef:dc:fe:05:9b:ec:a0:26:ec:28:92:00:
         3f:9c:6f:29:7b:12:69:5f:36:d9:1d:b3:e5:2d:85:8a:1f:74:
         01:cc:93:32:41:ce:94:ed:d0:4d:e7:00:00:4c:28:33:e9:75:
         85:33:58:10:d6:91:f7:66:82:72:a3:a6:02:55:99:a9:dc:41:
         50:9a:d7:c3:13:3c:6a:73:f6:12:94:3e:31:9e:54:9a:af:73:
         b3:03:81:90:2a:2c:45:80:d6:23:31:73:8c:be:26:c3:69:05:
         26:68:b4:de:f1:64:dc:c8:ba:7a:84:12:76:5f:d6:99:7a:69:
         e1:bd:85:f5:d8:19:c6:06:fa:e6:6c:5f:e3:85:c8:11:57:05:
         3b:a8:b0:39:bb:11:3f:0d:f9:de:75:e4:e3:65:a6:f2:60:9d:
         97:96:00:eb:85:37:3d:cf:d0:16:6f:ad:e9:e0:50:c4:4f:71:
         39:14:16:6c:ca:fd:5e:a6:ae:2d:d7:01:67:7e:4d:76:80:53:
         3d:e1:67:19:33:a0:08:97:69:18:43:02:c0:b9:b8:d0:21:61:
         82:92:9a:8c:4a:b9:73:aa:be:22:cf:96:c7:99:e1:35:25:86:
         e3:68:0f:af:f2:b5:74:59:83:5f:88:5c:16:64:26:77:bd:38:
         a0:19:0a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2eDdmjnITNYHpbgnD7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmJhYTYwMTIzNmFiOWJlYTI5ZjgwN2E2NjkyMGVkNTY1
NmExOTYwHhcNMjUwNDEzMTUwMTI0WhcNMjUwNDE0MTUwMTI0WjAzMTEwLwYDVQQD
EyhhNjlmNjNhMzFjNjg2MDEyOTk3MTc4MzQzMTJlMzU3OThjNTA0MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuVz+o9ff+xsCqypbpp9DQd42cke
4No8kOe6buyL9O+/t3Arrw1JT95JDP23jN0jRkvEgqLlJjtJt5mobCfti8VmPwXD
HbH0SGxjDXn5j9trh1uzwbyfVQZ7tfsU4lp1Sy5MWmE9cpoBnTxzS6MHHClfyVVX
NnpoXlR0n8bFCABR2BA9gjqynCClZt4gHTFxo/Ik8IOgR8RSq8CqF7ln+uJqm09f
rxlJMkFi0XVG6jSiu5zpJT/x6gTDxqAsmgH5vvIdAq+tHt5K4E67SHmvrqlKr8sV
SEiBeo40pKnEjzyIyemFWOXrpfqA00/exobIUBBZ1XXPSSe6Hf9XLIEJWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKafY6McaGASmXF4NDEuNXmMUEMkMB8GA1UdIwQY
MBaAFNxrqmASNqub6in4B6ZpIO1WVqGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEt
MzRhMTIzN2YxNjcwLzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEtMzRhMTIzN2YxNjcw
LzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROmglXO2
79z+BZvsoCbsKJIAP5xvKXsSaV822R2z5S2Fih90AcyTMkHOlO3QTecAAEwoM+l1
hTNYENaR92aCcqOmAlWZqdxBUJrXwxM8anP2EpQ+MZ5Umq9zswOBkCosRYDWIzFz
jL4mw2kFJmi03vFk3Mi6eoQSdl/WmXpp4b2F9dgZxgb65mxf44XIEVcFO6iwObsR
Pw353nXk42Wm8mCdl5YA64U3Pc/QFm+t6eBQxE9xORQWbMr9XqauLdcBZ35NdoBT
PeFnGTOgCJdpGEMCwLm40CFhgpKajEq5c6q+Is+Wx5nhNSWG42gPr/K1dFmDX4hc
FmQmd704oBkKJg==
-----END CERTIFICATE-----