Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File:                     3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier:          NSfkaLNYjlv2JA9NrbTcXi62X88GLP/bs9WZA1x1DI8=
Subject key identifier:   98:6F:57:B6:1D:55:33:9B:B9:E3:C0:B8:B3:BB:C0:10:53:D6:A1:E1
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer:       /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial:       01962F0658E541D070D69FF94D4A19F2632B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number:          0AEA
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: dTyd6vipA6Kkp0XORjaq7vcek8NfkQdaRLnuprmU20I=)
                          2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:e5:41:d0:70:d6:9f:f9:4d:4a:19:f2:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=986f57b61d55339bb9e3c0b8b3bbc01053d6a1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:d4:4a:33:5b:3f:89:a5:ed:eb:d3:4b:ca:
                    1d:18:68:c9:ba:0b:1a:2c:81:79:7f:0a:03:47:e0:
                    d2:0f:a4:da:47:9d:f4:19:1e:96:3f:d3:c3:c7:a8:
                    ab:58:7a:27:0e:f8:87:76:f2:4c:ce:3a:e2:49:92:
                    4d:ef:ab:56:11:3b:a6:2d:52:94:43:c3:73:7d:b9:
                    c2:a6:af:98:6c:e6:8d:ee:50:fa:20:3f:85:eb:52:
                    6a:bd:e0:37:06:7a:e0:88:22:0f:85:8e:b3:ae:7a:
                    57:dd:d7:94:64:61:21:09:61:52:a8:d8:58:64:f1:
                    bf:35:1e:ce:ea:ea:0b:3c:fe:ef:57:f8:ae:0a:c6:
                    c7:f2:3e:a3:e3:c9:60:a2:66:a7:c3:34:86:82:57:
                    88:c0:fb:c4:ac:74:1e:28:07:f1:23:ca:a4:66:a9:
                    94:02:6b:d0:c5:93:fd:6e:07:2b:ae:c5:2c:80:36:
                    5f:ad:be:d4:48:1d:c0:bf:67:45:76:da:da:de:0e:
                    0b:c9:eb:d3:82:e7:d1:88:e9:05:90:e0:86:0c:45:
                    8b:3a:0c:14:b3:ad:e7:9a:a1:eb:11:4d:d1:28:23:
                    3b:37:16:c4:e2:9a:72:c0:2b:61:4c:e8:9e:a4:1b:
                    64:5d:bf:2f:40:1d:bd:ff:d2:a3:cf:61:bb:1c:43:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:57:B6:1D:55:33:9B:B9:E3:C0:B8:B3:BB:C0:10:53:D6:A1:E1
            X509v3 Authority Key Identifier:
                keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:a9:f2:02:59:30:f1:82:d0:53:a3:37:c2:94:7d:ae:a3:
         30:37:ce:03:1d:cd:85:e3:cd:bc:a5:56:ee:c6:84:30:09:a1:
         60:bf:b7:9a:52:59:3f:9c:42:68:f7:28:a1:1e:57:81:26:50:
         c9:1a:fc:e1:11:86:cc:f1:94:98:8c:f5:9b:4f:78:d3:29:a1:
         37:02:7b:eb:bd:ff:7d:97:8c:e1:c7:a4:05:01:18:c0:a4:87:
         98:97:cd:bb:83:51:8b:34:08:db:10:ec:41:fc:d4:66:bd:35:
         e7:ac:25:95:62:bc:f6:18:51:77:8e:e7:53:48:7b:e2:87:3c:
         3f:dd:dc:5e:a8:ee:3a:d8:cf:9d:2a:b7:3c:a7:01:c0:21:47:
         1f:26:8d:23:0a:df:2d:72:16:c3:9b:f3:c0:10:95:92:90:2f:
         e0:5c:8a:2f:32:40:43:f5:16:f7:e0:b9:6d:17:cc:97:df:b2:
         01:66:3a:5c:8a:88:b9:49:cf:cd:06:ee:fd:ba:d1:49:a1:76:
         6b:84:b4:c4:ad:5d:13:19:e5:e6:45:1c:c7:23:7a:2b:35:8d:
         9f:0b:61:a0:65:e3:1f:db:33:b1:42:fe:7a:cf:05:34:f7:09:
         95:73:43:cd:56:cc:f4:24:ed:7a:c0:03:d2:f7:dd:2d:4e:b9:
         12:c7:ca:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBljlQdBw1p/5TUoZ8mMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0
ZDk2YzgwHhcNMjUwNDEzMTIwMTA3WhcNMjUwNDE0MTIwMTA3WjAzMTEwLwYDVQQD
Eyg5ODZmNTdiNjFkNTUzMzliYjllM2MwYjhiM2JiYzAxMDUzZDZhMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurrUSjNbP4ml7evTS8odGGjJugsa
LIF5fwoDR+DSD6TaR530GR6WP9PDx6irWHonDviHdvJMzjriSZJN76tWETumLVKU
Q8NzfbnCpq+YbOaN7lD6ID+F61JqveA3BnrgiCIPhY6zrnpX3deUZGEhCWFSqNhY
ZPG/NR7O6uoLPP7vV/iuCsbH8j6j48lgomanwzSGgleIwPvErHQeKAfxI8qkZqmU
AmvQxZP9bgcrrsUsgDZfrb7USB3Av2dFdtra3g4LyevTgufRiOkFkOCGDEWLOgwU
s63nmqHrEU3RKCM7NxbE4ppywCthTOiepBtkXb8vQB29/9Kjz2G7HEPbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhvV7YdVTObuePAuLO7wBBT1qHhMB8GA1UdIwQY
MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt
ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4
LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAqp8gJZ
MPGC0FOjN8KUfa6jMDfOAx3NhePNvKVW7saEMAmhYL+3mlJZP5xCaPcooR5XgSZQ
yRr84RGGzPGUmIz1m0940ymhNwJ7673/fZeM4cekBQEYwKSHmJfNu4NRizQI2xDs
QfzUZr0156wllWK89hhRd47nU0h74oc8P93cXqjuOtjPnSq3PKcBwCFHHyaNIwrf
LXIWw5vzwBCVkpAv4FyKLzJAQ/UW9+C5bRfMl9+yAWY6XIqIuUnPzQbu/brRSaF2
a4S0xK1dExnl5kUcxyN6KzWNnwthoGXjH9szsUL+es8FNPcJlXNDzVbM9CTtesAD
0vfdLU65EsfKRg==
-----END CERTIFICATE-----