Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File:                     3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier:          2wJYbHGRIaeCHVKdol3A5T+ICFGo5gLrV+bZ3/yQ/7Y=
Subject key identifier:   0E:9C:92:B6:C8:10:67:8A:6B:10:2A:F8:E4:B5:6A:9B:66:BD:E5:C6
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer:       /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial:       01962E989F583EC905C4A6CF546B6B14BED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: O8qYQPP5iSjMCcOGsFU6K9OI9R7wY3iyATied3BaznI=)
                          2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9f:58:3e:c9:05:c4:a6:cf:54:6b:6b:14:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=0e9c92b6c810678a6b102af8e4b56a9b66bde5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:57:9f:07:5c:21:9e:3a:25:0e:1a:0a:88:
                    70:8f:13:0e:46:e6:85:c6:da:70:23:30:1c:a2:50:
                    e7:1c:91:1e:0a:42:42:4e:14:f6:37:57:51:18:07:
                    3d:d9:8a:10:58:fe:c1:d9:b7:5e:54:cd:c5:f0:f3:
                    ac:d9:78:56:a1:9c:e6:8e:6f:ab:57:af:5c:15:c2:
                    31:11:03:b8:ee:71:19:f8:8e:85:b7:8a:80:db:58:
                    bc:6f:61:57:43:6a:24:22:02:3c:13:20:79:19:9b:
                    0e:0b:d4:b1:51:43:96:ed:54:d7:b7:40:66:9b:1e:
                    b9:e0:6c:4a:55:39:2f:d5:7b:a8:d2:d8:f9:a7:72:
                    1f:da:85:9f:3c:18:6f:84:93:db:18:e5:ca:dc:14:
                    d7:44:62:72:b9:ef:87:61:f6:4d:22:be:f0:8b:55:
                    7b:c6:fb:e4:0e:68:8c:a4:38:ef:cd:4a:a5:01:d8:
                    f8:c4:f6:23:de:b4:80:03:3e:92:24:77:5f:c2:d3:
                    80:3c:4b:30:ed:9a:f5:7a:26:99:98:66:36:96:24:
                    e4:6f:f9:f0:3c:8e:82:73:f1:24:3b:c5:c4:4f:5c:
                    cf:07:4c:d0:92:46:ee:5e:a7:06:42:da:92:86:21:
                    87:d0:ed:bc:6d:c5:3f:71:91:98:f2:b9:f4:9e:aa:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:92:B6:C8:10:67:8A:6B:10:2A:F8:E4:B5:6A:9B:66:BD:E5:C6
            X509v3 Authority Key Identifier:
                keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:26:af:cd:78:53:31:0b:df:b4:06:d7:15:a6:9c:c2:f3:28:
         e4:97:19:66:b6:b1:7c:71:f6:5f:98:b1:bd:96:87:92:0a:ff:
         e9:33:68:30:bc:d2:d3:5a:8f:3b:b4:7d:c9:db:70:3b:13:05:
         aa:08:00:0d:20:94:fd:d7:ad:aa:6c:3b:ed:02:c9:ac:fe:d6:
         ba:70:45:3c:75:b3:3c:44:ad:fa:eb:44:0c:97:b5:bd:0a:70:
         f8:8d:76:58:14:ef:d1:a5:75:0e:74:3f:bf:5c:8a:77:31:35:
         7c:ee:cb:2b:a2:79:ce:f2:b3:a1:40:85:be:15:47:e8:66:ff:
         c9:dc:7e:38:b4:e1:60:f5:43:58:58:2f:ab:ae:4f:99:b9:33:
         44:2d:bb:7e:98:8e:18:2b:6d:f1:48:ed:c1:0f:0e:60:74:18:
         74:db:f8:c3:43:11:0e:83:a8:b7:48:85:02:7a:a1:4c:ba:3b:
         b1:fb:a4:d6:32:02:62:4d:0c:b2:a8:4b:fd:00:fc:19:e2:cd:
         fd:81:20:f7:f7:46:fe:8b:7a:7b:48:cb:e9:b9:0a:c9:69:0f:
         72:bf:12:0d:22:b3:2e:84:de:0d:62:87:29:0e:c7:bb:76:c3:
         fb:b6:50:65:57:ea:1e:0f:55:64:d7:26:fa:87:25:e6:81:fc:
         53:a0:78:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJ9YPskFxKbPVGtrFL7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk
NjExMjAwHhcNMjUwNDEzMTAwMTE2WhcNMjUwNDE0MTAwMTE2WjAzMTEwLwYDVQQD
EygwZTljOTJiNmM4MTA2NzhhNmIxMDJhZjhlNGI1NmE5YjY2YmRlNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqatXnwdcIZ46JQ4aCohwjxMORuaF
xtpwIzAcolDnHJEeCkJCThT2N1dRGAc92YoQWP7B2bdeVM3F8POs2XhWoZzmjm+r
V69cFcIxEQO47nEZ+I6Ft4qA21i8b2FXQ2okIgI8EyB5GZsOC9SxUUOW7VTXt0Bm
mx654GxKVTkv1Xuo0tj5p3If2oWfPBhvhJPbGOXK3BTXRGJyue+HYfZNIr7wi1V7
xvvkDmiMpDjvzUqlAdj4xPYj3rSAAz6SJHdfwtOAPEsw7Zr1eiaZmGY2liTkb/nw
PI6Cc/EkO8XET1zPB0zQkkbuXqcGQtqShiGH0O28bcU/cZGY8rn0nqo6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6ckrbIEGeKaxAq+OS1aptmveXGMB8GA1UdIwQY
MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt
YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4
LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSavzXhT
MQvftAbXFaacwvMo5JcZZraxfHH2X5ixvZaHkgr/6TNoMLzS01qPO7R9ydtwOxMF
qggADSCU/detqmw77QLJrP7WunBFPHWzPESt+utEDJe1vQpw+I12WBTv0aV1DnQ/
v1yKdzE1fO7LK6J5zvKzoUCFvhVH6Gb/ydx+OLThYPVDWFgvq65PmbkzRC27fpiO
GCtt8UjtwQ8OYHQYdNv4w0MRDoOot0iFAnqhTLo7sfuk1jICYk0MsqhL/QD8GeLN
/YEg9/dG/ot6e0jL6bkKyWkPcr8SDSKzLoTeDWKHKQ7Hu3bD+7ZQZVfqHg9VZNcm
+ocl5oH8U6B41w==
-----END CERTIFICATE-----