Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File:                     0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier:          N4NaQasqprM+gMZK4BGH5gnFHuiOeaAGL9gf51sBke8=
Subject key identifier:   CF:68:52:F6:B1:A2:54:AD:5F:7A:A7:DF:C4:AC:EC:EB:D3:7B:7E:EC
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer:       /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial:       01962ECF838FF811E9F6D4029ACDB4A3F937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number:          077D
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: q9VgULJNlns/YPOqmB5fQN494npzyAtuEPxcrz22PZ0=)
                          2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:8f:f8:11:e9:f6:d4:02:9a:cd:b4:a3:f9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=cf6852f6b1a254ad5f7aa7dfc4acecebd37b7eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:93:e7:94:86:41:36:a8:51:67:a7:a2:7f:
                    7f:dd:b6:b1:47:cf:2d:f6:26:3c:c4:78:a7:b8:96:
                    f6:4f:db:e8:84:bd:cf:3e:d8:43:41:c9:b7:95:f9:
                    cf:9c:f3:a6:ab:3c:13:36:c4:a1:33:19:99:e7:8d:
                    68:d0:ff:7c:a8:0b:bf:8d:6e:8b:f7:91:82:ea:83:
                    d6:ba:0a:65:d5:0f:cd:0d:fb:9f:90:54:1c:c3:04:
                    84:45:60:3d:ac:b7:2a:3c:fe:45:22:50:b2:37:32:
                    b7:46:cb:16:88:68:ff:46:70:5c:48:f8:76:37:89:
                    22:47:60:91:a5:62:7e:d9:4f:6c:18:61:2d:4e:de:
                    8e:26:22:12:c5:e8:49:3f:f1:47:fa:47:2d:01:9c:
                    f4:14:3e:38:f1:a5:a9:a1:dc:ca:bc:c8:dd:9b:a3:
                    38:0d:76:1a:49:dc:87:96:9c:f1:67:87:59:c9:11:
                    89:41:57:94:3a:86:9c:b0:db:6c:1e:2f:80:c8:e2:
                    67:57:f4:0f:ec:ed:fb:e6:64:25:4c:d8:9e:3c:d4:
                    6c:92:02:12:e1:a9:67:04:cb:18:24:99:76:14:4d:
                    0c:ec:cc:3c:0f:04:2d:28:67:d8:9a:4c:20:81:a9:
                    73:f1:69:d8:8a:f7:82:84:58:ed:64:d4:db:ef:5a:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:68:52:F6:B1:A2:54:AD:5F:7A:A7:DF:C4:AC:EC:EB:D3:7B:7E:EC
            X509v3 Authority Key Identifier:
                keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:f3:bb:78:88:9f:bb:a1:27:c9:8b:24:6d:88:9f:17:b2:
         8e:c4:25:48:13:0f:15:c3:e9:a5:45:96:13:03:3c:6e:c6:eb:
         d0:a3:ae:8a:00:0d:33:c7:09:d4:95:ca:1c:7b:53:52:2e:7e:
         83:26:d9:43:cc:b1:b3:84:25:dd:ef:06:91:d5:ad:d9:3d:fa:
         69:b8:d4:e4:30:16:e8:d3:38:1c:3c:bf:3f:b4:f3:3e:3b:34:
         a4:09:4b:a6:8b:24:b8:c8:9a:93:8e:26:70:7d:05:d7:ec:64:
         cf:c3:53:a0:37:f8:6a:59:be:94:eb:52:27:7b:f2:66:2e:77:
         c8:8e:59:59:99:d7:90:5c:63:d7:8a:21:63:ab:da:7f:cc:d4:
         89:0e:0f:d8:d2:6a:9b:ff:99:e0:6d:27:6d:13:f6:05:79:ec:
         ab:99:40:9b:d5:a4:b2:76:4a:f0:eb:5c:72:a4:f0:15:da:00:
         1a:ce:77:bd:0d:8d:1c:3b:3f:92:39:2c:13:51:9f:c6:cd:8c:
         0c:28:f7:8f:39:a1:f7:44:52:dd:cb:97:0b:97:80:27:f1:4b:
         55:8d:6f:99:fb:37:8a:61:4e:ef:08:fe:5b:5f:02:e1:c7:34:
         4d:8e:e3:2a:b8:dc:45:e9:d5:bd:26:2a:3a:66:d1:2d:1a:74:
         8b:a3:c4:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4OP+BHp9tQCms20o/k3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyY2RkNWYxNjJhMjY3ODAwMDAzY2YzMGMxOGU5Y2ViY2Uy
NzRlYzUwHhcNMjUwNDEzMTEwMTEzWhcNMjUwNDE0MTEwMTEzWjAzMTEwLwYDVQQD
EyhjZjY4NTJmNmIxYTI1NGFkNWY3YWE3ZGZjNGFjZWNlYmQzN2I3ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2qT55SGQTaoUWenon9/3baxR88t
9iY8xHinuJb2T9vohL3PPthDQcm3lfnPnPOmqzwTNsShMxmZ541o0P98qAu/jW6L
95GC6oPWugpl1Q/NDfufkFQcwwSERWA9rLcqPP5FIlCyNzK3RssWiGj/RnBcSPh2
N4kiR2CRpWJ+2U9sGGEtTt6OJiISxehJP/FH+kctAZz0FD448aWpodzKvMjdm6M4
DXYaSdyHlpzxZ4dZyRGJQVeUOoacsNtsHi+AyOJnV/QP7O375mQlTNiePNRskgIS
4alnBMsYJJl2FE0M7Mw8DwQtKGfYmkwggalz8WnYiveChFjtZNTb71oFSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9oUvaxolStX3qn38Ss7OvTe37sMB8GA1UdIwQY
MBaAFNLN1fFiomeAAAPPMMGOnOvOJ07FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWFhZDgtMzExMy00NTEyLWE5Y2Ut
MzU4MjQzYzU1MWEyLzEvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWFhZDgtMzExMy00NTEyLWE5Y2UtMzU4MjQzYzU1MWEy
LzEvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5zzu3iI
n7uhJ8mLJG2InxeyjsQlSBMPFcPppUWWEwM8bsbr0KOuigANM8cJ1JXKHHtTUi5+
gybZQ8yxs4Ql3e8GkdWt2T36abjU5DAW6NM4HDy/P7TzPjs0pAlLposkuMiak44m
cH0F1+xkz8NToDf4alm+lOtSJ3vyZi53yI5ZWZnXkFxj14ohY6vaf8zUiQ4P2NJq
m/+Z4G0nbRP2BXnsq5lAm9WksnZK8OtccqTwFdoAGs53vQ2NHDs/kjksE1Gfxs2M
DCj3jzmh90RS3cuXC5eAJ/FLVY1vmfs3imFO7wj+W18C4cc0TY7jKrjcRenVvSYq
OmbRLRp0i6PE6w==
-----END CERTIFICATE-----