Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File:                     3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier:          g9tn/dCyF3UUR3VoK5Esh58sKNULcumaDdnoKj6lAHE=
Subject key identifier:   A5:C8:57:95:DC:BD:02:3E:9D:68:0E:CE:21:34:EC:00:92:03:C0:7C
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer:       /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial:       01962F748881124C47F70E0DEE4D3573403A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: JM0kyLBqOq9fqqOkjm/CMhoLZQd0mNX6UYKqgI5osx4=)
                          2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
                          3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:88:81:12:4c:47:f7:0e:0d:ee:4d:35:73:40:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=a5c85795dcbd023e9d680ece2134ec009203c07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:08:52:df:a1:d5:4c:0c:7f:50:85:6f:39:
                    ee:66:9a:b9:46:a9:54:cf:01:91:d8:7c:16:0b:b4:
                    5c:b6:da:04:b1:5e:99:90:13:03:51:4a:fa:ce:98:
                    a3:46:bc:9a:09:1b:61:29:86:23:60:66:c1:c5:64:
                    7c:e9:db:28:47:8b:fb:b3:ef:d1:14:5f:f1:83:83:
                    cc:cb:a3:47:63:38:ef:22:d8:05:19:61:d8:49:4a:
                    ca:ae:21:d7:1c:51:95:74:62:52:06:cc:24:e8:7e:
                    c4:7a:5e:22:9d:c6:79:6b:6e:af:47:c3:bc:a1:ea:
                    db:fc:b0:7e:b9:95:d6:8f:38:74:2f:2f:cf:c8:e2:
                    89:f8:82:53:67:8c:1e:ca:9a:89:f0:6c:3c:02:e9:
                    5e:8a:3a:e6:dd:1c:ae:3f:9a:e9:9d:3e:33:79:ca:
                    dc:a7:7b:9a:b0:35:a1:d1:6d:4f:fd:71:f8:db:90:
                    4a:2b:f9:6f:c7:ec:45:c0:35:3d:b6:80:3f:4f:2a:
                    67:b8:9c:05:c2:6a:e4:a7:76:fc:7f:2e:a0:a1:be:
                    fd:cd:5d:2d:1d:30:a6:fa:31:a1:59:e0:b2:88:85:
                    fb:fb:56:30:21:cd:2e:1e:e4:3e:1e:a7:4b:a2:2c:
                    32:a0:40:55:94:12:82:79:a9:ff:22:f1:9d:e0:ae:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:57:95:DC:BD:02:3E:9D:68:0E:CE:21:34:EC:00:92:03:C0:7C
            X509v3 Authority Key Identifier:
                keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:3d:1d:be:5e:5a:ef:57:e9:2f:48:4a:2e:a2:db:c0:26:
         2c:c2:ce:a3:80:83:00:ca:6c:86:b8:77:40:1d:37:37:9a:20:
         e3:ef:99:ab:3b:de:74:db:f5:c6:20:5a:93:d3:80:7a:fa:c4:
         7c:13:c2:55:94:e2:ad:d9:36:86:06:ba:76:21:2a:00:09:f4:
         b9:32:16:05:1c:17:38:96:b1:82:e0:39:48:91:94:c5:c3:06:
         10:94:88:ed:a8:48:6b:95:12:46:ec:30:bc:85:21:87:0f:b3:
         47:aa:83:92:4d:ac:b7:82:da:e0:d9:8d:29:21:23:62:d6:fd:
         c1:29:66:0a:cd:80:13:dc:07:55:e8:d6:d4:be:ab:6d:d4:3a:
         aa:fe:5a:db:5a:3b:54:33:92:e8:e9:7b:70:1d:19:8f:91:14:
         91:16:9b:d2:c1:ed:25:50:ee:7c:25:52:db:d0:18:a3:f1:6b:
         59:55:ce:2a:a0:b5:35:3f:7a:b7:23:95:7d:d8:ca:72:e4:93:
         bc:08:28:20:c6:19:d4:fd:66:7c:b9:7b:e8:31:9d:bc:10:48:
         88:f3:15:56:32:33:c5:33:6b:aa:b0:e7:14:06:8c:a9:68:dd:
         68:9c:02:da:37:a1:94:b9:31:4e:d4:af:58:ba:8b:2e:0e:b0:
         7e:a8:49:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIiBEkxH9w4N7k01c0A6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjUwNDEzMTQwMTI4WhcNMjUwNDE0MTQwMTI4WjAzMTEwLwYDVQQD
EyhhNWM4NTc5NWRjYmQwMjNlOWQ2ODBlY2UyMTM0ZWMwMDkyMDNjMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUoIUt+h1UwMf1CFbznuZpq5RqlU
zwGR2HwWC7RcttoEsV6ZkBMDUUr6zpijRryaCRthKYYjYGbBxWR86dsoR4v7s+/R
FF/xg4PMy6NHYzjvItgFGWHYSUrKriHXHFGVdGJSBswk6H7Eel4incZ5a26vR8O8
oerb/LB+uZXWjzh0Ly/PyOKJ+IJTZ4weypqJ8Gw8Auleijrm3RyuP5rpnT4zecrc
p3uasDWh0W1P/XH425BKK/lvx+xFwDU9toA/TypnuJwFwmrkp3b8fy6gob79zV0t
HTCm+jGhWeCyiIX7+1YwIc0uHuQ+HqdLoiwyoEBVlBKCean/IvGd4K573wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXIV5XcvQI+nWgOziE07ACSA8B8MB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7Y9Hb5e
Wu9X6S9ISi6i28AmLMLOo4CDAMpshrh3QB03N5og4++ZqzvedNv1xiBak9OAevrE
fBPCVZTirdk2hga6diEqAAn0uTIWBRwXOJaxguA5SJGUxcMGEJSI7ahIa5USRuww
vIUhhw+zR6qDkk2st4La4NmNKSEjYtb9wSlmCs2AE9wHVejW1L6rbdQ6qv5a21o7
VDOS6Ol7cB0Zj5EUkRab0sHtJVDufCVS29AYo/FrWVXOKqC1NT96tyOVfdjKcuST
vAgoIMYZ1P1mfLl76DGdvBBIiPMVVjIzxTNrqrDnFAaMqWjdaJwC2jehlLkxTtSv
WLqLLg6wfqhJ6g==
-----END CERTIFICATE-----