Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File:                     3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier:          FHl0dGovQGXaxPHfqAoKtHfFuq1B+uvPvHKY3NzHKk4=
Subject key identifier:   F1:FE:7D:01:42:F4:B0:B5:CE:4B:80:83:96:A3:AA:FB:69:CF:CB:BD
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer:       /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial:       01962E98BED982ED1BBA5D60E4775B2D55F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number:          0AE6
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: vxevcIuYo3F/Ip1yof6zJVNDdH3F2ytka2cfrR4JKsU=)
                          2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:be:d9:82:ed:1b:ba:5d:60:e4:77:5b:2d:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=f1fe7d0142f4b0b5ce4b808396a3aafb69cfcbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:71:2f:33:e7:97:4e:8a:ad:ba:1d:78:19:
                    2f:b1:a8:f1:bb:65:47:b0:30:88:9b:d5:9b:ca:5c:
                    00:ca:0f:12:bd:54:1f:8b:53:e3:0a:9c:38:2f:8d:
                    61:b6:ef:06:35:4b:69:fd:30:4f:30:91:5a:c9:3c:
                    d6:85:94:28:33:0a:56:33:71:0b:de:db:ef:20:a7:
                    fc:bd:cd:2d:4a:e0:26:06:4e:f6:be:2d:54:04:ba:
                    02:49:0c:f9:6f:9e:f6:e1:9e:cb:69:b2:a8:fa:17:
                    88:57:f7:7a:aa:f6:e4:cc:26:69:df:dd:5b:ce:55:
                    42:56:06:da:97:c3:cb:71:6b:f5:28:07:34:3a:80:
                    c9:ab:76:58:83:d3:34:60:1b:17:28:95:fc:ee:07:
                    1b:24:b7:c9:03:ad:96:b8:9f:7f:88:c1:45:b2:49:
                    5d:e6:1b:4a:94:0e:36:45:a2:5b:6b:46:76:b8:6c:
                    1a:5f:20:7b:b3:39:67:f0:43:1f:01:b7:b3:37:53:
                    85:3a:81:3e:2d:b1:25:74:6f:07:5b:4b:6d:bf:e8:
                    ca:c9:f6:d3:4c:3c:60:92:03:f3:c0:6c:e6:df:18:
                    c5:71:18:22:37:b9:f5:07:8a:72:4c:b1:64:6a:ae:
                    1e:d5:ef:c2:15:3b:5b:20:c8:6b:20:74:e4:2e:ac:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:7D:01:42:F4:B0:B5:CE:4B:80:83:96:A3:AA:FB:69:CF:CB:BD
            X509v3 Authority Key Identifier:
                keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:f0:ed:ff:c0:91:f9:1d:c1:6e:5f:ff:d7:63:3d:d3:b8:
         f1:6f:83:ad:42:79:2c:19:7f:0e:dd:01:93:89:f7:46:13:7c:
         28:8e:ca:79:87:c0:55:7b:45:57:bb:de:97:3d:04:36:88:18:
         6b:b5:f9:b7:7c:e3:b3:a7:17:d8:a3:83:d6:05:cf:4c:12:06:
         c2:5f:a3:8d:de:13:70:ee:e8:14:c8:ac:0b:58:0d:88:d9:cc:
         39:b7:b8:08:93:0e:7d:ca:be:a1:77:33:06:58:fa:fa:18:3f:
         8a:f8:0a:b1:bc:31:c3:e6:6b:dd:10:5c:2c:98:18:38:51:82:
         29:e0:bb:cc:f7:ed:e1:b1:f5:22:21:15:81:74:70:50:db:7d:
         fe:bf:4b:7d:50:ec:e8:87:17:d9:ab:10:b7:07:72:96:fc:2e:
         d5:ff:9d:bc:08:36:69:8d:fa:d8:c0:49:c6:8b:e3:99:16:d9:
         e8:33:00:f3:a0:0a:2a:32:df:f7:a0:6e:08:77:37:8d:9d:ad:
         98:02:ce:89:1d:fd:7d:95:31:b5:64:7c:80:e8:70:a2:9f:63:
         92:0c:72:02:19:d1:d0:e3:f1:2a:3f:da:a6:f2:de:21:f4:c9:
         18:76:41:30:27:35:20:e7:4c:9b:3f:3e:39:e2:ec:3e:00:96:
         9a:5f:bc:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumL7Zgu0bul1g5HdbLVXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjUwNDEzMTAwMTI0WhcNMjUwNDE0MTAwMTI0WjAzMTEwLwYDVQQD
EyhmMWZlN2QwMTQyZjRiMGI1Y2U0YjgwODM5NmEzYWFmYjY5Y2ZjYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY5xLzPnl06KrbodeBkvsajxu2VH
sDCIm9WbylwAyg8SvVQfi1PjCpw4L41htu8GNUtp/TBPMJFayTzWhZQoMwpWM3EL
3tvvIKf8vc0tSuAmBk72vi1UBLoCSQz5b5724Z7LabKo+heIV/d6qvbkzCZp391b
zlVCVgbal8PLcWv1KAc0OoDJq3ZYg9M0YBsXKJX87gcbJLfJA62WuJ9/iMFFskld
5htKlA42RaJba0Z2uGwaXyB7szln8EMfAbezN1OFOoE+LbEldG8HW0ttv+jKyfbT
TDxgkgPzwGzm3xjFcRgiN7n1B4pyTLFkaq4e1e/CFTtbIMhrIHTkLqx8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH+fQFC9LC1zkuAg5ajqvtpz8u9MB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbADw7f/A
kfkdwW5f/9djPdO48W+DrUJ5LBl/Dt0Bk4n3RhN8KI7KeYfAVXtFV7velz0ENogY
a7X5t3zjs6cX2KOD1gXPTBIGwl+jjd4TcO7oFMisC1gNiNnMObe4CJMOfcq+oXcz
Blj6+hg/ivgKsbwxw+Zr3RBcLJgYOFGCKeC7zPft4bH1IiEVgXRwUNt9/r9LfVDs
6IcX2asQtwdylvwu1f+dvAg2aY362MBJxovjmRbZ6DMA86AKKjLf96BuCHc3jZ2t
mALOiR39fZUxtWR8gOhwop9jkgxyAhnR0OPxKj/apvLeIfTJGHZBMCc1IOdMmz8+
OeLsPgCWml+8xw==
-----END CERTIFICATE-----