Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File:                     0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier:          neC0zTdE7YUOQnfjMeFWs8OVjEvLDnOwZCGe07SAPe8=
Subject key identifier:   E4:43:14:92:66:97:34:8D:3A:AF:DD:A5:B4:1C:F9:04:68:E6:D0:72
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer:       /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial:       01962DF4092CFFA1916E7C7DBC95C9252AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number:          12D8
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: u+08TVqN54OdJGMShBhMY66iGvp8ejkp1vmgpYkKgXY=)
                          2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:09:2c:ff:a1:91:6e:7c:7d:bc:95:c9:25:2a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=e44314926697348d3aafdda5b41cf90468e6d072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:b2:05:72:94:83:6d:a0:ed:3a:64:91:76:
                    0b:2e:03:64:96:a9:41:20:4c:58:38:70:21:eb:13:
                    30:25:ad:f3:84:93:c8:81:3e:c4:be:72:b2:e7:e5:
                    01:6f:66:39:85:c5:63:77:24:98:f1:ee:42:fd:b5:
                    97:7b:35:1f:d9:7d:3b:2d:51:be:68:6b:4b:ef:c5:
                    89:de:bd:45:b9:c7:41:9e:aa:1e:55:57:ed:32:1d:
                    67:77:be:c7:62:a4:d1:03:28:b6:57:92:74:95:f5:
                    49:cb:6d:fb:57:ff:d3:b6:b2:3b:7b:52:cc:0c:b6:
                    9d:1f:84:58:28:28:c3:23:54:bd:e7:8b:05:c7:40:
                    32:75:79:c7:2f:9c:28:05:47:45:b7:08:aa:7a:35:
                    19:54:74:58:d7:21:d6:82:e0:4f:f6:a2:4f:78:41:
                    7b:f9:12:a0:dd:7f:e7:86:fc:1f:95:9b:24:6f:ab:
                    c0:61:c6:cc:b4:7f:8d:29:0d:f6:18:f9:78:89:12:
                    24:a8:32:da:42:a2:75:72:6c:0d:2b:08:d0:45:f6:
                    82:72:c1:99:cf:b7:0c:40:5c:42:5a:05:5e:ce:7f:
                    6c:c1:92:85:6d:98:f9:d7:ea:e4:71:b7:2d:66:ae:
                    0a:68:04:c0:11:39:e6:f2:80:b8:b1:07:66:3a:d9:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:43:14:92:66:97:34:8D:3A:AF:DD:A5:B4:1C:F9:04:68:E6:D0:72
            X509v3 Authority Key Identifier:
                keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:a9:c6:05:4a:f4:33:c7:59:98:99:bf:8a:af:b3:b3:c6:
         e6:80:e1:b1:79:58:af:0c:a4:87:4d:15:b5:7e:fe:d3:4b:21:
         e7:73:ce:b4:35:ae:dd:01:e0:db:d2:f4:e9:40:f8:e2:bd:a0:
         8e:07:08:a5:2b:8e:76:88:b1:23:54:f3:ae:65:b5:86:2d:7a:
         b6:82:77:dc:4b:fa:e1:62:55:4f:04:07:33:01:24:31:cc:0c:
         14:88:0c:75:d5:84:2a:8f:e9:95:63:15:2e:4c:57:9c:52:1c:
         36:96:2d:1b:49:76:00:12:e6:ed:55:e2:00:fd:0c:91:5b:cb:
         82:32:51:f8:6b:ba:55:2f:d8:35:9b:bb:e3:ed:1d:88:c8:72:
         47:2e:c2:08:40:7a:e9:5a:ed:9e:49:27:36:79:47:4d:a6:7c:
         fd:57:01:a3:74:23:9c:34:89:54:1d:21:7d:d2:5d:88:99:39:
         50:c5:1c:0e:a2:b9:cd:81:0d:a6:f1:02:7f:c8:36:b1:64:f9:
         e0:8f:c9:ad:e6:57:7c:e6:68:70:ed:6a:e3:05:38:32:30:b6:
         f6:84:7d:a7:54:2d:6e:20:40:8a:76:21:25:39:4c:1c:e0:54:
         ba:c1:cc:85:d2:8d:d6:68:64:c9:5b:52:89:07:a2:1a:a4:a0:
         ea:a5:0f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Aks/6GRbnx9vJXJJSr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0
OWEzM2UwHhcNMjUwNDEzMDcwMTI5WhcNMjUwNDE0MDcwMTI5WjAzMTEwLwYDVQQD
EyhlNDQzMTQ5MjY2OTczNDhkM2FhZmRkYTViNDFjZjkwNDY4ZTZkMDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPKyBXKUg22g7TpkkXYLLgNklqlB
IExYOHAh6xMwJa3zhJPIgT7EvnKy5+UBb2Y5hcVjdySY8e5C/bWXezUf2X07LVG+
aGtL78WJ3r1FucdBnqoeVVftMh1nd77HYqTRAyi2V5J0lfVJy237V//TtrI7e1LM
DLadH4RYKCjDI1S954sFx0AydXnHL5woBUdFtwiqejUZVHRY1yHWguBP9qJPeEF7
+RKg3X/nhvwflZskb6vAYcbMtH+NKQ32GPl4iRIkqDLaQqJ1cmwNKwjQRfaCcsGZ
z7cMQFxCWgVezn9swZKFbZj51+rkcbctZq4KaATAETnm8oC4sQdmOtkRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORDFJJmlzSNOq/dpbQc+QRo5tByMB8GA1UdIwQY
MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt
NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl
LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuapxgVK
9DPHWZiZv4qvs7PG5oDhsXlYrwykh00VtX7+00sh53POtDWu3QHg29L06UD44r2g
jgcIpSuOdoixI1TzrmW1hi16toJ33Ev64WJVTwQHMwEkMcwMFIgMddWEKo/plWMV
LkxXnFIcNpYtG0l2ABLm7VXiAP0MkVvLgjJR+Gu6VS/YNZu74+0diMhyRy7CCEB6
6VrtnkknNnlHTaZ8/VcBo3QjnDSJVB0hfdJdiJk5UMUcDqK5zYENpvECf8g2sWT5
4I/JreZXfOZocO1q4wU4MjC29oR9p1QtbiBAinYhJTlMHOBUusHMhdKN1mhkyVtS
iQeiGqSg6qUPeQ==
-----END CERTIFICATE-----