Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File:                     3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier:          GuwXw7PDUEoL/NZau7jMWWh2SrMCSCC7z2A6cSCB4S8=
Subject key identifier:   E2:B7:0B:23:2B:15:C3:80:C3:FD:F9:4F:A2:68:AB:1A:F1:B0:37:2E
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer:       /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial:       01962E98BC9D69193DEC348FABCDB4DCD4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: 3AKWAHatCwhSp+C1/VFhC3ulamzrcruQyn2rMcutc0Q=)
                          2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:9d:69:19:3d:ec:34:8f:ab:cd:b4:dc:d4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=e2b70b232b15c380c3fdf94fa268ab1af1b0372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:1b:b8:a2:9b:38:f1:9b:ca:f5:fd:e2:cf:
                    2f:6b:b2:37:f3:98:dc:24:29:52:4f:da:1f:c3:7e:
                    55:9e:1f:9d:bd:05:57:5c:49:fa:10:3b:44:85:6e:
                    8a:b5:fe:22:0a:cb:43:f7:2c:dd:e7:0e:09:05:bb:
                    9c:19:ca:6d:a9:93:50:03:fe:a4:45:d7:fe:87:a4:
                    66:46:6b:ab:28:b1:1b:53:95:f0:b8:8f:a7:c0:8f:
                    99:3a:39:20:9b:61:c3:6c:7f:b2:0e:a6:03:6b:b0:
                    ef:15:02:a4:71:e7:f7:d7:e1:7b:3f:71:0e:1e:c5:
                    70:ba:e4:59:b5:0d:e8:ff:3e:38:e7:d5:da:8f:25:
                    3f:f0:ca:2e:12:47:89:c9:ea:46:d5:04:3f:c4:66:
                    cf:da:4e:43:8f:3d:7c:31:e9:ae:a3:b5:b8:83:5a:
                    e9:f0:da:bf:b2:b0:b4:4a:1b:6c:20:df:0b:d0:5d:
                    7c:59:d7:7c:7a:d1:83:99:11:c3:9f:9e:d3:6b:73:
                    45:91:57:63:1c:c4:d5:c1:eb:1f:85:cf:30:fc:ae:
                    b9:a9:ce:15:84:46:56:b1:cd:23:f9:50:7c:6d:a2:
                    25:ef:77:f3:c8:35:5b:ef:e5:26:36:b3:03:b2:70:
                    31:4b:df:ff:fb:72:ad:b9:76:15:62:2a:40:a4:8a:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B7:0B:23:2B:15:C3:80:C3:FD:F9:4F:A2:68:AB:1A:F1:B0:37:2E
            X509v3 Authority Key Identifier:
                keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:79:4e:7c:c5:4a:a8:65:b9:3b:71:bb:7b:84:3e:36:ff:
         87:21:6c:44:24:4d:70:e3:64:ae:07:fe:3a:96:31:37:0f:45:
         9a:f5:a9:b8:01:de:bc:99:fa:d5:14:86:7f:97:11:b9:0c:fb:
         6f:3d:cd:40:84:d4:d5:70:48:c4:45:0d:a1:bc:18:50:a0:9c:
         73:be:a5:f0:88:8c:b0:52:df:51:88:fc:56:cc:be:24:3a:7b:
         2a:73:ec:08:67:dd:d9:db:3d:6d:87:c7:b1:fe:ec:45:33:76:
         7b:5c:05:4c:58:78:81:1d:2b:41:6d:f6:4a:51:8e:6d:4b:c3:
         a4:44:40:74:e9:a3:04:31:a7:c1:8a:8e:f1:26:f3:6a:f9:1a:
         02:68:3f:52:79:17:09:e5:17:be:68:1f:b2:e4:a9:71:1d:45:
         ac:7a:f3:33:a6:9e:76:cf:b5:6e:6e:5a:4c:be:3c:7b:f3:2a:
         47:07:6b:8b:44:63:f1:f8:5a:44:af:50:89:54:92:02:2f:93:
         5a:aa:bd:c0:3e:4e:d4:8b:d6:02:c2:f7:06:53:c8:2f:7d:79:
         cf:c2:ea:ac:ef:e8:1d:1d:94:94:b5:37:97:bd:b4:62:23:4d:
         07:7c:67:51:fa:f3:e1:3c:4b:c8:8d:78:48:4a:b9:61:0e:9c:
         61:38:b2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLydaRk97DSPq8203NTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTg5NjIxZDJmYTg3MjE2NmU2YTA1ZWU0N2E3ZDc1NjI0
M2U5MTkwHhcNMjUwNDEzMTAwMTIzWhcNMjUwNDE0MTAwMTIzWjAzMTEwLwYDVQQD
EyhlMmI3MGIyMzJiMTVjMzgwYzNmZGY5NGZhMjY4YWIxYWYxYjAzNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRMbuKKbOPGbyvX94s8va7I385jc
JClST9ofw35Vnh+dvQVXXEn6EDtEhW6Ktf4iCstD9yzd5w4JBbucGcptqZNQA/6k
Rdf+h6RmRmurKLEbU5XwuI+nwI+ZOjkgm2HDbH+yDqYDa7DvFQKkcef31+F7P3EO
HsVwuuRZtQ3o/z4459XajyU/8MouEkeJyepG1QQ/xGbP2k5Djz18Memuo7W4g1rp
8Nq/srC0ShtsIN8L0F18Wdd8etGDmRHDn57Ta3NFkVdjHMTVwesfhc8w/K65qc4V
hEZWsc0j+VB8baIl73fzyDVb7+UmNrMDsnAxS9//+3KtuXYVYipApIrA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK3CyMrFcOAw/35T6JoqxrxsDcuMB8GA1UdIwQY
MBaAFN0YliHS+ochZuagXuR6fXViQ+kZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JpV0lkTDZoeUZtNXFCZTVIcDlkV0pENlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjMyN2YtODAzZS00N2ZjLThlMjUt
NDQzMTFmOWNiODU2LzEvM1JpV0lkTDZoeUZtNXFCZTVIcDlkV0pENlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kNjMyN2YtODAzZS00N2ZjLThlMjUtNDQzMTFmOWNiODU2
LzEvM1JpV0lkTDZoeUZtNXFCZTVIcDlkV0pENlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEx5TnzF
SqhluTtxu3uEPjb/hyFsRCRNcONkrgf+OpYxNw9FmvWpuAHevJn61RSGf5cRuQz7
bz3NQITU1XBIxEUNobwYUKCcc76l8IiMsFLfUYj8Vsy+JDp7KnPsCGfd2ds9bYfH
sf7sRTN2e1wFTFh4gR0rQW32SlGObUvDpERAdOmjBDGnwYqO8SbzavkaAmg/UnkX
CeUXvmgfsuSpcR1FrHrzM6aeds+1bm5aTL48e/MqRwdri0Rj8fhaRK9QiVSSAi+T
Wqq9wD5O1IvWAsL3BlPIL315z8LqrO/oHR2UlLU3l720YiNNB3xnUfrz4TxLyI14
SEq5YQ6cYTiyTg==
-----END CERTIFICATE-----