Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File:                     0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier:          g/GVxnv/SW8ES5IaExRI+PrEzXYOdKbRKSjmaIWV3CM=
Subject key identifier:   1B:4D:74:0E:A1:EB:AD:CF:BA:D4:AB:C8:98:5F:46:CD:93:55:CF:45
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer:       /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial:       01962F747244BFF5AF86A7B333A2EB0C965A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number:          0C71
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: wCWNnoDE7CBcVVpewFIOQQeQUcmo3cQ29HITET6BGq8=)
                          2: HME8zGcc-HAVtbr4sZdbeNLJU5A.roa (hash: TPPi4et5FVDHl+8Hye2r4DlU6tqPyGa2KXSYWnxyrpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:72:44:bf:f5:af:86:a7:b3:33:a2:eb:0c:96:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=1b4d740ea1ebadcfbad4abc8985f46cd9355cf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:aa:fb:ac:e4:c8:43:b2:e3:35:e4:51:87:
                    13:28:30:79:c9:93:20:89:c7:64:0d:f2:d1:35:ce:
                    f6:7e:fc:f1:22:f6:c9:8e:f5:09:d6:83:69:2f:52:
                    cf:8a:6d:22:e3:fd:c4:4a:09:97:31:87:d8:f5:59:
                    95:b2:e0:e3:2f:c9:05:b5:d6:22:8f:16:b0:49:9a:
                    66:41:17:36:eb:c9:47:3d:02:0f:9d:a1:44:38:60:
                    50:8d:c4:b2:48:e6:4b:b2:02:ce:e4:b8:36:0a:48:
                    4b:f2:2a:e1:8d:85:08:a9:d4:0e:7f:6c:6e:2d:f1:
                    90:ce:2a:88:59:25:6f:04:61:a7:cc:89:a2:59:b4:
                    f1:55:b1:c5:55:1a:4c:32:e1:8f:8e:27:ca:03:a6:
                    05:18:2e:23:e5:d7:c4:67:fa:5d:84:3b:2c:63:30:
                    6f:72:56:dc:19:65:33:57:91:bf:b2:f8:a6:3a:07:
                    08:60:c7:f8:5e:96:ff:fb:01:d9:1f:d1:89:c0:d4:
                    5e:0d:06:cf:1c:98:6d:09:a1:a9:6c:44:45:55:68:
                    e6:40:1e:27:fd:e7:da:87:82:08:c1:17:88:ef:6e:
                    60:df:48:9b:e2:da:b8:cc:99:76:c9:d5:9c:2a:75:
                    ea:a2:9c:cb:60:a2:7f:c4:ff:e7:4e:e6:87:81:5a:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:74:0E:A1:EB:AD:CF:BA:D4:AB:C8:98:5F:46:CD:93:55:CF:45
            X509v3 Authority Key Identifier:
                keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:1f:bb:e7:b3:7e:ad:db:dc:e4:90:30:28:75:13:e4:a1:
         b4:8a:9c:2e:8b:21:a6:44:b5:69:f1:6c:c0:63:6d:8f:d5:ae:
         eb:8d:e1:1a:6e:be:31:06:3a:c2:27:c2:4e:ab:64:56:fe:2c:
         0a:f8:53:d8:8b:c6:df:c6:80:ec:c4:bd:7a:39:03:f4:fd:7e:
         03:42:67:5a:f4:ff:f9:4d:4c:10:3c:f2:df:31:a6:22:33:05:
         fc:48:e5:fa:36:13:d7:36:70:72:c3:36:19:94:dc:dd:b8:da:
         2a:86:f9:2f:3b:1e:15:e0:ea:df:f4:e2:7d:73:3e:71:99:e1:
         aa:9a:9e:db:6b:0b:68:01:38:65:7c:bd:a1:6a:53:cf:63:89:
         2f:8b:fc:2e:77:3a:06:67:75:48:73:7e:a6:0c:fd:9f:d0:d3:
         ad:56:dc:5d:09:fd:24:71:d3:99:5b:cb:2f:88:ff:98:aa:32:
         e8:bc:fc:8e:52:6e:e4:db:43:2e:d9:84:0d:86:4d:33:06:67:
         87:46:b8:17:20:34:66:58:73:d7:4a:2a:69:72:41:c1:d1:51:
         da:2d:97:f8:1b:0a:01:71:27:c5:d3:02:89:c5:19:82:d0:45:
         ca:a0:e3:d4:37:0e:d1:2b:06:d9:0d:ff:0f:83:9c:dc:ec:e7:
         03:7b:06:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHJEv/WvhqezM6LrDJZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYzNkMzU4ODEyZTYwYjY4MGU0ZTExNjMyZjEzOTU2MGJm
NTI1ZmIwHhcNMjUwNDEzMTQwMTIyWhcNMjUwNDE0MTQwMTIyWjAzMTEwLwYDVQQD
EygxYjRkNzQwZWExZWJhZGNmYmFkNGFiYzg5ODVmNDZjZDkzNTVjZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZaq+6zkyEOy4zXkUYcTKDB5yZMg
icdkDfLRNc72fvzxIvbJjvUJ1oNpL1LPim0i4/3ESgmXMYfY9VmVsuDjL8kFtdYi
jxawSZpmQRc268lHPQIPnaFEOGBQjcSySOZLsgLO5Lg2CkhL8irhjYUIqdQOf2xu
LfGQziqIWSVvBGGnzImiWbTxVbHFVRpMMuGPjifKA6YFGC4j5dfEZ/pdhDssYzBv
clbcGWUzV5G/svimOgcIYMf4Xpb/+wHZH9GJwNReDQbPHJhtCaGpbERFVWjmQB4n
/efah4IIwReI725g30ib4tq4zJl2ydWcKnXqopzLYKJ/xP/nTuaHgVoT0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtNdA6h663PutSryJhfRs2TVc9FMB8GA1UdIwQY
MBaAFNDD01iBLmC2gOThFjLxOVYL9SX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1QVFdJRXVZTGFBNU9FV012RTVWZ3YxSmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kYTVlM2ItY2EwYi00ZmNlLWIxZTIt
NWRkMzM2ZjM4MDYwLzEvME1QVFdJRXVZTGFBNU9FV012RTVWZ3YxSmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kYTVlM2ItY2EwYi00ZmNlLWIxZTItNWRkMzM2ZjM4MDYw
LzEvME1QVFdJRXVZTGFBNU9FV012RTVWZ3YxSmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSYfu+ez
fq3b3OSQMCh1E+ShtIqcLoshpkS1afFswGNtj9Wu643hGm6+MQY6wifCTqtkVv4s
CvhT2IvG38aA7MS9ejkD9P1+A0JnWvT/+U1MEDzy3zGmIjMF/Ejl+jYT1zZwcsM2
GZTc3bjaKob5LzseFeDq3/TifXM+cZnhqpqe22sLaAE4ZXy9oWpTz2OJL4v8Lnc6
Bmd1SHN+pgz9n9DTrVbcXQn9JHHTmVvLL4j/mKoy6Lz8jlJu5NtDLtmEDYZNMwZn
h0a4FyA0Zlhz10oqaXJBwdFR2i2X+BsKAXEnxdMCicUZgtBFyqDj1DcO0SsG2Q3/
D4Oc3OznA3sGiw==
-----END CERTIFICATE-----