Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
File:                     0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json)
Hash identifier:          EXcD4EcM4VNdpXT+gz2yBHJPnPIlS8LmCUAKVMPRbHo=
Subject key identifier:   CF:9C:F1:76:CF:BB:8E:1E:D9:50:EA:7D:14:5F:3F:53:EA:E7:80:AC
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Certificate issuer:       /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial:       01962E61F90D7076E4DD6440314A433D633E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
Manifest number:          1009
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: yfXVeVZUmMsJdbopON+VEFuaDZeF/shaibRFYl4wxkE=)
                          2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=)
                          3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=)
                          4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=)
                          5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=)
                          6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=)
                          7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=)
                          8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=)
                          9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=)
                          10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=)
                          11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=)
                          12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=)
                          13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:0d:70:76:e4:dd:64:40:31:4a:43:3d:63:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=cf9cf176cfbb8e1ed950ea7d145f3f53eae780ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:91:b3:8f:b1:87:3b:6e:9f:79:74:cd:4f:
                    43:46:1c:34:f4:46:cb:22:d4:70:8c:ed:58:9d:56:
                    b5:f5:ad:7b:b4:dc:57:71:5e:95:6c:82:77:2f:bc:
                    71:62:a3:7c:83:6c:b4:0b:bb:96:3c:8e:7d:86:d1:
                    c4:d4:23:bf:e8:33:a5:7a:85:21:d9:d8:85:72:fc:
                    6a:d0:a2:fb:59:d9:12:74:ae:5c:3a:cc:8f:69:b3:
                    18:b2:54:3f:e5:e5:46:93:c1:b0:26:52:cf:62:f0:
                    a6:cf:c3:d8:78:45:78:e2:71:8a:a1:31:86:8d:8d:
                    b0:5b:ad:ed:5e:3a:e9:6d:e2:c6:65:55:24:b4:f6:
                    6e:2e:fa:f2:1f:87:5b:40:ab:a9:aa:b5:80:10:0e:
                    a1:64:82:e2:a9:4b:f3:67:2c:5d:7c:e0:bc:ba:b3:
                    82:42:37:7a:11:bb:8a:36:da:13:03:38:61:34:e0:
                    62:e1:0e:a8:6f:61:6f:66:29:05:5e:72:5e:40:ba:
                    21:78:30:9a:1d:1d:c6:a7:b8:1d:f0:fd:f5:45:03:
                    0f:84:b3:23:87:fc:b4:c4:58:a4:63:9f:d0:b7:87:
                    ac:27:fa:14:fc:b3:d2:e1:ca:4e:35:ba:2b:98:2f:
                    36:8f:96:e4:eb:67:01:9d:85:38:f9:47:78:6c:aa:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:F1:76:CF:BB:8E:1E:D9:50:EA:7D:14:5F:3F:53:EA:E7:80:AC
            X509v3 Authority Key Identifier:
                keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:40:c4:27:27:2d:a0:fc:81:de:33:dd:a6:42:87:05:81:
         f6:e8:a5:3a:5f:fc:09:f5:5e:aa:b5:6f:81:74:66:15:54:59:
         c4:6b:ff:5a:6e:7f:e4:58:2e:99:de:52:b5:fb:6c:e7:ce:15:
         29:cd:07:f9:49:51:32:7d:73:d7:6b:6d:ec:b8:5a:2e:b3:35:
         53:02:42:d5:ac:9d:de:f6:31:7a:a9:c0:f4:20:06:d3:9c:57:
         18:7c:1d:a0:65:64:80:dd:22:77:2d:e2:35:5b:a2:28:3c:b3:
         35:7f:3f:d2:20:58:ac:df:3d:b6:1c:f2:55:3e:62:4b:ab:7d:
         f9:d6:ae:d0:8d:32:2c:95:4e:8c:87:99:14:3f:5a:fc:e6:83:
         cc:1f:59:79:7c:5a:39:bc:8a:81:b8:db:42:c5:b6:f0:06:ae:
         d8:c6:e5:c6:32:97:29:16:88:b1:f7:bf:3a:01:87:5b:0b:a7:
         f2:46:1f:98:49:da:62:85:df:ed:16:10:e7:4f:91:ec:2b:68:
         da:13:44:c8:b2:b3:72:fd:0f:6e:90:a8:1f:73:70:84:41:2b:
         51:0e:92:c2:48:d0:11:ad:96:90:ac:48:14:e1:53:e0:38:12:
         6a:e4:1e:e6:5e:83:5d:0c:01:ae:5d:a5:12:3f:1a:38:73:fa:
         ff:ce:2f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfkNcHbk3WRAMUpDPWM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjUwNDEzMDkwMTM0WhcNMjUwNDE0MDkwMTM0WjAzMTEwLwYDVQQD
EyhjZjljZjE3NmNmYmI4ZTFlZDk1MGVhN2QxNDVmM2Y1M2VhZTc4MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdmRs4+xhztun3l0zU9DRhw09EbL
ItRwjO1YnVa19a17tNxXcV6VbIJ3L7xxYqN8g2y0C7uWPI59htHE1CO/6DOleoUh
2diFcvxq0KL7WdkSdK5cOsyPabMYslQ/5eVGk8GwJlLPYvCmz8PYeEV44nGKoTGG
jY2wW63tXjrpbeLGZVUktPZuLvryH4dbQKupqrWAEA6hZILiqUvzZyxdfOC8urOC
Qjd6EbuKNtoTAzhhNOBi4Q6ob2FvZikFXnJeQLoheDCaHR3Gp7gd8P31RQMPhLMj
h/y0xFikY5/Qt4esJ/oU/LPS4cpONbormC82j5bk62cBnYU4+Ud4bKod3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+c8XbPu44e2VDqfRRfP1Pq54CsMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZtAxCcn
LaD8gd4z3aZChwWB9uilOl/8CfVeqrVvgXRmFVRZxGv/Wm5/5Fgumd5Stfts584V
Kc0H+UlRMn1z12tt7LhaLrM1UwJC1ayd3vYxeqnA9CAG05xXGHwdoGVkgN0idy3i
NVuiKDyzNX8/0iBYrN89thzyVT5iS6t9+dau0I0yLJVOjIeZFD9a/OaDzB9ZeXxa
ObyKgbjbQsW28Aau2MblxjKXKRaIsfe/OgGHWwun8kYfmEnaYoXf7RYQ50+R7Cto
2hNEyLKzcv0PbpCoH3NwhEErUQ6SwkjQEa2WkKxIFOFT4DgSauQe5l6DXQwBrl2l
Ej8aOHP6/84v0w==
-----END CERTIFICATE-----