Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File:                     39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier:          72hFpzpn9jIPP7e3G9akAhdrm7tvOmYNbThBqVrDIdo=
Subject key identifier:   28:93:E9:DF:5E:40:6B:1C:B9:A7:63:5F:2A:B2:DD:FB:3F:46:47:45
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer:       /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial:       01962F06FF1C600345098952590F728266F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number:          03C2
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: 3wGB3kOFawM02EhpsuWWEo6esBPzfxnruQpol8328uo=)
                          2: gdQzieOsDk19MHxPUsWlQ5yL-6E.roa (hash: O4NLUsT+6P2pJIZ4vji37jHYnfU3emApXIC6cXFBisM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:1c:60:03:45:09:89:52:59:0f:72:82:66:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=2893e9df5e406b1cb9a7635f2ab2ddfb3f464745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:75:67:20:21:3e:61:ca:d6:87:b2:fc:1f:89:
                    cf:8e:56:3a:90:8f:00:56:a6:7f:ee:2f:4f:fb:7f:
                    c3:85:90:1f:df:fa:b0:60:9e:2a:1a:d1:eb:e9:ff:
                    28:90:a8:4a:ea:d6:e1:05:59:e2:14:08:ce:e6:f8:
                    a3:e6:3e:98:cb:87:4e:b4:48:78:94:83:6c:73:9e:
                    36:59:0f:65:42:87:63:28:c2:7f:04:67:52:77:69:
                    6d:54:3c:f6:37:a1:1c:49:2a:d5:cb:69:bc:f1:76:
                    5e:aa:7f:d6:8e:80:cd:7b:7d:94:7b:bd:9f:1d:4b:
                    97:8a:72:17:1c:68:e9:81:5a:c6:be:d7:b0:0b:b1:
                    86:69:89:dc:71:84:3f:a4:90:a6:d6:47:9e:62:1e:
                    15:11:08:a5:da:7a:ef:69:68:cf:ca:c1:10:c8:ed:
                    c8:e7:63:9c:d8:da:c0:0b:8e:58:0d:16:59:75:1f:
                    7a:3d:03:a1:15:60:2e:16:2b:94:a0:2e:e4:08:4c:
                    3c:98:1b:61:38:eb:73:45:4b:a0:65:0c:c2:d6:4e:
                    e5:c2:bb:0a:0c:10:b6:ae:6c:8e:28:22:12:3e:e1:
                    19:f5:2e:64:01:73:4a:a9:2c:c2:95:32:18:c9:e4:
                    c0:dd:cb:4b:1c:4c:00:64:7e:2a:19:02:f9:fc:e0:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:93:E9:DF:5E:40:6B:1C:B9:A7:63:5F:2A:B2:DD:FB:3F:46:47:45
            X509v3 Authority Key Identifier:
                keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:12:60:f0:99:ee:7d:90:8c:79:95:7b:1d:4b:1d:d3:32:26:
         88:8a:9c:b8:6b:bd:7e:df:2c:1b:c0:97:da:ce:ff:5f:c7:4c:
         d3:05:ab:e3:cc:0e:ae:fc:cc:55:65:93:9b:b5:d2:f2:fd:0c:
         5d:5e:ba:34:48:fd:48:c9:bc:c1:41:4a:f3:cf:53:f3:b0:7d:
         00:ae:a8:9a:b1:4a:8e:d1:66:8c:06:a6:16:c6:cf:0a:97:c8:
         8e:b1:21:97:ff:24:fd:b2:c1:d4:49:cf:c7:04:d7:bc:5b:a7:
         7d:30:d9:8c:e8:73:8e:c8:28:89:fd:e0:ef:43:23:0f:9a:ca:
         1a:91:7d:65:48:74:cd:8f:4c:ce:36:bb:1e:2e:b9:48:63:d4:
         6c:90:68:9e:47:88:0a:69:6e:89:9a:50:9a:09:d9:92:e1:19:
         94:5b:5a:d5:45:da:ef:0c:bb:97:0c:6d:15:e2:97:b3:4f:ac:
         e0:bf:c0:12:16:19:71:5d:3e:69:67:93:97:c9:cd:44:9f:db:
         f8:5e:bb:af:8e:9d:6b:90:37:ae:5a:95:b8:22:9a:ff:c9:4a:
         af:a4:9c:22:57:a9:1c:04:0e:f7:ba:cd:87:84:1a:30:4e:19:
         01:61:74:69:23:4d:a5:29:ff:65:c9:1a:e1:63:d6:43:9e:e8:
         c4:16:95:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBv8cYANFCYlSWQ9ygmbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5
YzkwMzAwHhcNMjUwNDEzMTIwMTQ5WhcNMjUwNDE0MTIwMTQ5WjAzMTEwLwYDVQQD
EygyODkzZTlkZjVlNDA2YjFjYjlhNzYzNWYyYWIyZGRmYjNmNDY0NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53VnICE+YcrWh7L8H4nPjlY6kI8A
VqZ/7i9P+3/DhZAf3/qwYJ4qGtHr6f8okKhK6tbhBVniFAjO5vij5j6Yy4dOtEh4
lINsc542WQ9lQodjKMJ/BGdSd2ltVDz2N6EcSSrVy2m88XZeqn/WjoDNe32Ue72f
HUuXinIXHGjpgVrGvtewC7GGaYnccYQ/pJCm1keeYh4VEQil2nrvaWjPysEQyO3I
52Oc2NrAC45YDRZZdR96PQOhFWAuFiuUoC7kCEw8mBthOOtzRUugZQzC1k7lwrsK
DBC2rmyOKCISPuEZ9S5kAXNKqSzClTIYyeTA3ctLHEwAZH4qGQL5/OB7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiT6d9eQGscuadjXyqy3fs/RkdFMB8GA1UdIwQY
MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt
NTg4ZTBkOTIzYzE1LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1
LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORJg8Jnu
fZCMeZV7HUsd0zImiIqcuGu9ft8sG8CX2s7/X8dM0wWr48wOrvzMVWWTm7XS8v0M
XV66NEj9SMm8wUFK889T87B9AK6omrFKjtFmjAamFsbPCpfIjrEhl/8k/bLB1EnP
xwTXvFunfTDZjOhzjsgoif3g70MjD5rKGpF9ZUh0zY9Mzja7Hi65SGPUbJBonkeI
CmluiZpQmgnZkuEZlFta1UXa7wy7lwxtFeKXs0+s4L/AEhYZcV0+aWeTl8nNRJ/b
+F67r46da5A3rlqVuCKa/8lKr6ScIlepHAQO97rNh4QaME4ZAWF0aSNNpSn/Zcka
4WPWQ57oxBaVBg==
-----END CERTIFICATE-----