Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File:                     ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier:          6h+V2gr6rnNE22Y00it7guDy0IlMDpXmFqjIXrXNcn4=
Subject key identifier:   3F:44:B9:81:42:71:1E:AB:98:3C:48:7C:21:30:38:4C:D2:B4:B3:5A
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer:       /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial:       01962F3D703988770B62C54EED03F6BFEC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number:          0982
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: fWIxL0SghxrCeVJfSAVy531O5aa27ZD2NaOI5Mma7Gw=)
                          2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:70:39:88:77:0b:62:c5:4e:ed:03:f6:bf:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=3f44b98142711eab983c487c2130384cd2b4b35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:ef:6f:f0:60:9d:08:e5:2a:79:ce:8a:ef:
                    d3:70:32:b7:ec:88:27:8e:3f:73:de:83:cd:58:1d:
                    e5:3f:9a:bf:e1:8d:ee:90:fa:0d:c0:be:84:97:86:
                    52:b7:53:21:68:1a:1c:29:f3:ce:77:b4:72:12:f9:
                    16:bf:e0:20:76:5f:9d:42:43:f8:f8:32:5f:76:4a:
                    66:6a:9a:ba:1d:05:db:0c:0b:d2:3e:d6:64:59:f1:
                    c8:3c:07:d3:21:54:c2:42:20:42:18:48:9c:02:b0:
                    28:eb:56:01:63:c7:35:3f:28:3d:d1:c6:4f:13:c5:
                    38:c7:b2:f4:74:66:39:b7:57:8c:ca:80:67:cc:88:
                    a8:38:19:00:66:5e:8c:61:46:47:9f:9d:3d:cf:f5:
                    63:05:20:5a:9a:f4:f5:e4:2b:a3:bd:0f:2c:01:35:
                    8d:ca:19:43:35:af:99:3e:df:70:4b:5c:aa:5f:c2:
                    67:e1:e6:3d:7c:33:38:c3:6e:a4:67:f2:dd:c4:71:
                    08:1e:1f:4b:cb:18:d6:0c:40:60:45:9d:8d:93:81:
                    ee:b0:1c:02:a2:00:d4:33:c3:eb:25:90:48:ad:74:
                    ec:03:4b:2d:f1:88:34:a8:dd:0b:f7:a5:e8:0d:65:
                    18:30:04:bc:cf:5f:56:e7:04:68:92:fd:f6:d0:b2:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:B9:81:42:71:1E:AB:98:3C:48:7C:21:30:38:4C:D2:B4:B3:5A
            X509v3 Authority Key Identifier:
                keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:38:37:d5:0a:b0:03:5e:4e:09:67:d9:89:88:b9:a2:18:
         1c:69:34:61:b1:ee:2f:bd:61:69:9e:76:7c:98:1a:84:9c:36:
         0c:4f:38:ad:55:96:af:9f:02:ad:46:34:ad:3d:b7:c0:cf:42:
         85:8a:cf:e3:94:8a:b9:9b:10:9c:04:34:71:45:21:47:a6:77:
         9d:d2:49:81:68:b1:01:d4:50:2e:d0:78:1d:b3:11:78:f2:77:
         90:6a:cd:66:e8:2c:21:6d:7d:2b:40:7d:4b:39:4d:c0:24:fe:
         de:96:e2:50:3f:97:cd:44:d0:e1:37:99:61:93:d0:ba:22:5d:
         56:a1:5e:10:a1:b4:ae:24:0b:a0:a2:b4:17:d4:e7:66:89:98:
         23:95:d4:9f:97:26:b7:92:d1:c0:4d:08:4d:f5:67:fe:db:1f:
         fd:65:e1:48:ef:4c:6b:e5:6b:9d:f4:41:85:b3:79:10:9b:bf:
         e8:22:bc:3d:a7:2d:3a:6c:61:1c:fe:a9:c7:82:be:85:d9:64:
         80:91:4d:cb:b1:81:75:91:6e:bc:bc:80:2f:b9:1b:83:73:4b:
         7e:0c:d6:04:41:c0:a6:f1:51:e5:45:c4:15:26:09:ec:a1:65:
         65:4c:2f:2a:37:51:c4:12:7f:ac:3b:2c:fe:2e:09:7d:a0:7d:
         3c:8c:47:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXA5iHcLYsVO7QP2v+w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl
MjAyYmMwHhcNMjUwNDEzMTMwMTE3WhcNMjUwNDE0MTMwMTE3WjAzMTEwLwYDVQQD
EygzZjQ0Yjk4MTQyNzExZWFiOTgzYzQ4N2MyMTMwMzg0Y2QyYjRiMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYzvb/BgnQjlKnnOiu/TcDK37Ign
jj9z3oPNWB3lP5q/4Y3ukPoNwL6El4ZSt1MhaBocKfPOd7RyEvkWv+Agdl+dQkP4
+DJfdkpmapq6HQXbDAvSPtZkWfHIPAfTIVTCQiBCGEicArAo61YBY8c1Pyg90cZP
E8U4x7L0dGY5t1eMyoBnzIioOBkAZl6MYUZHn509z/VjBSBamvT15CujvQ8sATWN
yhlDNa+ZPt9wS1yqX8Jn4eY9fDM4w26kZ/LdxHEIHh9LyxjWDEBgRZ2Nk4HusBwC
ogDUM8PrJZBIrXTsA0st8Yg0qN0L96XoDWUYMAS8z19W5wRokv320LLdnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9EuYFCcR6rmDxIfCEwOEzStLNaMB8GA1UdIwQY
MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt
ZmZkNWJmNTk2OWRmLzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm
LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnM44N9UK
sANeTgln2YmIuaIYHGk0YbHuL71haZ52fJgahJw2DE84rVWWr58CrUY0rT23wM9C
hYrP45SKuZsQnAQ0cUUhR6Z3ndJJgWixAdRQLtB4HbMRePJ3kGrNZugsIW19K0B9
SzlNwCT+3pbiUD+XzUTQ4TeZYZPQuiJdVqFeEKG0riQLoKK0F9TnZomYI5XUn5cm
t5LRwE0ITfVn/tsf/WXhSO9Ma+VrnfRBhbN5EJu/6CK8PactOmxhHP6px4K+hdlk
gJFNy7GBdZFuvLyAL7kbg3NLfgzWBEHApvFR5UXEFSYJ7KFlZUwvKjdRxBJ/rDss
/i4JfaB9PIxH+A==
-----END CERTIFICATE-----