Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File:                     2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier:          XBg9uiQlcV6AOpmJoEr1Qntk20BmlZLQ3uplTAnchKQ=
Subject key identifier:   93:C0:42:61:A5:27:D7:3F:9D:00:10:FD:43:1B:D6:6E:AF:0D:59:25
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer:       /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial:       01962FAB771D97C87DD2F6DEFF0F3D63F356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number:          01EA
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: 5eaAJNiX5yxVoZhOiOhXwqSBsPDtwEm0ZBPrrMYBuog=)
                          2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:77:1d:97:c8:7d:d2:f6:de:ff:0f:3d:63:f3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=93c04261a527d73f9d0010fd431bd66eaf0d5925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:e5:c8:74:a2:96:1b:80:ee:c9:04:04:8f:
                    6d:4a:d6:8c:d2:d1:5d:2a:c1:01:77:49:80:9c:97:
                    dd:96:b5:e5:8c:a4:e7:c4:09:13:6c:57:44:1d:9e:
                    15:0b:a1:ba:3c:82:ed:e1:90:b1:34:5b:5f:3e:b9:
                    59:14:e5:33:c9:e0:b3:c0:51:d2:11:04:6b:20:b4:
                    d5:54:9b:8c:46:bd:2e:5d:a6:20:3a:4f:b7:35:4d:
                    2e:40:03:76:b8:38:97:5a:2c:a6:39:2a:95:ca:5a:
                    39:f3:63:ed:16:23:29:63:4b:f7:6a:c2:1e:ee:1f:
                    e5:66:72:b2:be:14:03:9f:98:bd:89:ef:50:a0:b6:
                    91:18:8c:73:ea:0b:f0:b7:a0:5c:bb:b5:70:14:9e:
                    d2:a3:33:94:33:6e:9e:41:40:af:f6:39:fc:2f:0a:
                    6a:42:7f:5a:78:ca:58:6a:35:6f:20:32:ac:54:37:
                    27:3e:1f:cc:e1:53:dc:25:77:b3:d6:d4:1f:0e:b9:
                    2c:29:7b:47:bd:36:22:be:5f:8e:eb:e2:b4:19:4c:
                    62:63:50:1d:e7:3a:eb:50:a3:39:6d:b4:1b:b9:9f:
                    a9:dd:dd:69:62:41:0c:10:b7:c7:0a:a5:e8:09:47:
                    95:8f:e4:13:f6:90:ff:0b:60:12:5d:63:2a:e9:be:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:42:61:A5:27:D7:3F:9D:00:10:FD:43:1B:D6:6E:AF:0D:59:25
            X509v3 Authority Key Identifier:
                keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c1:28:4e:9a:d1:0c:34:20:19:f6:27:c6:59:ad:db:83:32:
         28:b0:37:38:e5:41:d8:3f:09:f7:27:72:45:b3:8b:d5:85:d7:
         6d:6f:9d:bc:ed:ba:af:4d:2d:5e:7d:9e:29:b2:a5:18:df:b1:
         ac:65:e0:ca:75:39:ce:7c:8c:63:44:b4:97:3a:d7:8e:6f:86:
         66:e8:d7:82:41:30:bf:cc:1a:35:79:e8:b3:ad:ef:f5:56:4a:
         90:83:c7:76:12:60:a7:9d:63:f5:2b:08:61:39:a9:23:a9:71:
         b7:25:23:41:f5:ef:b2:2a:0a:b1:55:76:09:37:1a:c7:78:b7:
         26:bc:01:bd:32:7f:d9:30:23:bd:12:4e:15:f5:43:8d:43:a4:
         ef:45:cf:c5:42:8e:f7:4f:92:f5:f5:8c:03:2d:17:70:a0:f4:
         71:e3:99:4e:b4:fc:c1:08:86:9d:a5:c6:39:38:21:d7:c2:14:
         2e:f6:cf:9f:b7:54:83:d3:6a:e5:1a:d4:84:16:04:19:42:77:
         60:d7:7a:24:f6:a8:e7:d3:96:4a:00:54:92:8d:44:a3:d3:f8:
         61:a8:63:91:1c:12:ec:e8:f7:26:af:43:5b:49:ff:dd:ca:26:
         74:c6:59:44:8d:b9:2e:21:e8:05:75:fa:5e:2c:55:cc:bd:12:
         03:2b:74:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3cdl8h90vbe/w89Y/NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0
NTdiY2IwHhcNMjUwNDEzMTUwMTI4WhcNMjUwNDE0MTUwMTI4WjAzMTEwLwYDVQQD
Eyg5M2MwNDI2MWE1MjdkNzNmOWQwMDEwZmQ0MzFiZDY2ZWFmMGQ1OTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nLlyHSilhuA7skEBI9tStaM0tFd
KsEBd0mAnJfdlrXljKTnxAkTbFdEHZ4VC6G6PILt4ZCxNFtfPrlZFOUzyeCzwFHS
EQRrILTVVJuMRr0uXaYgOk+3NU0uQAN2uDiXWiymOSqVylo582PtFiMpY0v3asIe
7h/lZnKyvhQDn5i9ie9QoLaRGIxz6gvwt6Bcu7VwFJ7SozOUM26eQUCv9jn8Lwpq
Qn9aeMpYajVvIDKsVDcnPh/M4VPcJXez1tQfDrksKXtHvTYivl+O6+K0GUxiY1Ad
5zrrUKM5bbQbuZ+p3d1pYkEMELfHCqXoCUeVj+QT9pD/C2ASXWMq6b5lawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPAQmGlJ9c/nQAQ/UMb1m6vDVklMB8GA1UdIwQY
MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt
N2RmOWU0YTIzOGNjLzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj
LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8EoTprR
DDQgGfYnxlmt24MyKLA3OOVB2D8J9ydyRbOL1YXXbW+dvO26r00tXn2eKbKlGN+x
rGXgynU5znyMY0S0lzrXjm+GZujXgkEwv8waNXnos63v9VZKkIPHdhJgp51j9SsI
YTmpI6lxtyUjQfXvsioKsVV2CTcax3i3JrwBvTJ/2TAjvRJOFfVDjUOk70XPxUKO
90+S9fWMAy0XcKD0ceOZTrT8wQiGnaXGOTgh18IULvbPn7dUg9Nq5RrUhBYEGUJ3
YNd6JPao59OWSgBUko1Eo9P4YahjkRwS7Oj3Jq9DW0n/3comdMZZRI25LiHoBXX6
XixVzL0SAyt0jA==
-----END CERTIFICATE-----