Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          ZWDk90dkRlw3P9Eonc4OLcdVqWiKanqJ1kxBKDvY+n0=
Subject key identifier:   8A:28:7F:1D:79:A9:EC:3B:1E:1F:FD:79:F3:64:8A:8C:CA:CC:72:B7
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       01962DF410AD2E51F5D65972B11952BB46B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          0C9B
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: BqJxhQPk9lc5mYnbntA/8D9RpW9s7fmJECe5MQP9SWw=)
                          2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:ad:2e:51:f5:d6:59:72:b1:19:52:bb:46:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=8a287f1d79a9ec3b1e1ffd79f3648a8ccacc72b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:6e:1f:ca:87:91:99:a4:36:b1:ca:98:5a:
                    2d:a7:bc:c7:24:35:48:5f:65:86:65:84:58:a3:33:
                    63:c9:a7:65:5d:6e:2b:36:2b:29:48:79:df:ba:6a:
                    0d:88:ae:be:2a:f0:8b:67:f9:e1:a9:2e:c1:a3:0b:
                    6d:52:01:49:1f:21:6d:42:af:5f:dd:71:28:df:df:
                    b0:90:3c:2b:7d:b3:47:5a:d9:c2:16:c1:8f:b0:c9:
                    f2:33:a3:5d:70:e3:4c:ad:26:b6:b2:ac:77:89:33:
                    78:c2:78:95:f0:2f:c1:cf:88:2e:bd:19:e2:9f:8e:
                    4c:0b:c8:83:87:99:ba:db:f1:a0:bc:aa:d9:30:61:
                    b3:8e:40:48:be:e5:d1:07:68:8e:b4:27:48:02:c6:
                    7a:de:5c:55:e4:c3:b4:9f:0e:c4:7d:f1:4b:58:8c:
                    09:4e:04:ff:02:e7:5c:2c:b2:de:2d:3d:ff:9a:71:
                    5b:28:65:80:73:f8:c1:fc:0d:08:ed:74:b4:36:1c:
                    c6:17:5c:6a:e2:84:8e:c7:63:68:2e:63:e3:64:50:
                    5b:d3:c9:10:3d:b2:09:f1:81:92:ef:cd:a8:fc:4a:
                    65:87:c5:83:33:69:f2:e1:4b:ab:7f:80:d5:ad:0e:
                    17:ea:c7:0e:b6:b6:04:cd:63:65:45:fd:13:7e:0f:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:7F:1D:79:A9:EC:3B:1E:1F:FD:79:F3:64:8A:8C:CA:CC:72:B7
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:b2:4c:35:a5:2f:22:7d:81:13:0b:cf:ff:a7:fb:04:68:
         5a:af:09:61:c9:19:06:da:df:da:bd:c2:b6:8e:60:0f:d3:e1:
         ca:e2:87:bc:cf:92:e0:92:2a:d4:b7:bf:b6:15:4e:18:53:6e:
         a6:81:b3:28:59:98:b1:c6:e1:92:7f:f9:45:39:05:fe:3c:2c:
         83:a7:ab:50:00:56:ab:fc:2d:50:7b:bf:8f:28:8a:d2:3b:55:
         f9:70:b4:08:db:7d:25:c4:29:cc:d7:f8:43:5c:4b:8a:86:6a:
         41:e9:9a:c7:7d:ac:02:3b:9b:26:13:fb:d1:8c:74:56:de:cb:
         87:1a:d4:ea:60:22:26:17:d4:77:09:4f:85:28:7f:bd:65:66:
         3a:e0:e7:27:86:88:74:4a:0e:5b:88:4a:b3:9d:05:3a:de:99:
         8b:bf:c5:45:0b:a6:67:c7:32:c5:43:ce:15:77:56:52:e8:b5:
         f6:fb:ca:e7:6c:5d:c7:f4:18:5d:7d:97:43:14:c2:e4:4c:18:
         44:c0:69:25:af:71:48:e0:7b:e7:88:db:14:b9:86:1b:45:d2:
         ce:b5:48:91:12:07:82:f8:8a:62:75:b7:05:df:cc:05:ce:89:
         1a:0d:d1:01:81:da:9e:58:59:95:6a:58:76:51:f8:2a:58:60:
         fc:f0:6b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BCtLlH11llysRlSu0axMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw
MDBhYmMwHhcNMjUwNDEzMDcwMTMxWhcNMjUwNDE0MDcwMTMxWjAzMTEwLwYDVQQD
Eyg4YTI4N2YxZDc5YTllYzNiMWUxZmZkNzlmMzY0OGE4Y2NhY2M3MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua9uH8qHkZmkNrHKmFotp7zHJDVI
X2WGZYRYozNjyadlXW4rNispSHnfumoNiK6+KvCLZ/nhqS7BowttUgFJHyFtQq9f
3XEo39+wkDwrfbNHWtnCFsGPsMnyM6NdcONMrSa2sqx3iTN4wniV8C/Bz4guvRni
n45MC8iDh5m62/GgvKrZMGGzjkBIvuXRB2iOtCdIAsZ63lxV5MO0nw7EffFLWIwJ
TgT/AudcLLLeLT3/mnFbKGWAc/jB/A0I7XS0NhzGF1xq4oSOx2NoLmPjZFBb08kQ
PbIJ8YGS782o/Eplh8WDM2ny4Uurf4DVrQ4X6scOtrYEzWNlRf0Tfg8G2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoofx15qew7Hh/9efNkiozKzHK3MB8GA1UdIwQY
MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt
N2JiMzY1ZjM0YzZjLzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj
LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrWyTDWl
LyJ9gRMLz/+n+wRoWq8JYckZBtrf2r3Cto5gD9PhyuKHvM+S4JIq1Le/thVOGFNu
poGzKFmYscbhkn/5RTkF/jwsg6erUABWq/wtUHu/jyiK0jtV+XC0CNt9JcQpzNf4
Q1xLioZqQemax32sAjubJhP70Yx0Vt7LhxrU6mAiJhfUdwlPhSh/vWVmOuDnJ4aI
dEoOW4hKs50FOt6Zi7/FRQumZ8cyxUPOFXdWUui19vvK52xdx/QYXX2XQxTC5EwY
RMBpJa9xSOB754jbFLmGG0XSzrVIkRIHgviKYnW3Bd/MBc6JGg3RAYHanlhZlWpY
dlH4Klhg/PBr/g==
-----END CERTIFICATE-----