Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File:                     8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier:          CeRbM2tzZvJpQn/FdEBoQiav+pwv69N5FjtZz0cOfRQ=
Subject key identifier:   CC:AF:C7:07:46:75:5A:EC:01:2D:8F:D5:53:88:D4:8E:12:15:A0:B2
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer:       /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial:       01962F06970548FDA163A74DDD6BA997B302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number:          05D5
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: Sn5DxVJ96W/g1HWQmxkK9zQfo9Jja0ZtcSLaYsKr6iQ=)
                          2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
                          3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:05:48:fd:a1:63:a7:4d:dd:6b:a9:97:b3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=ccafc70746755aec012d8fd55388d48e1215a0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5b:50:42:19:93:59:7a:95:9c:ea:62:30:da:
                    1e:50:2f:4a:62:33:38:fd:17:d6:ef:fb:bb:7d:d5:
                    00:e9:36:d4:03:d4:7c:dd:09:e0:72:fd:c6:4a:6b:
                    0b:e1:1a:e0:ea:46:9a:fc:b1:8a:3b:13:d2:fd:8d:
                    d9:7d:cf:3d:43:76:31:fb:ce:93:1b:e3:1d:a9:f1:
                    f7:45:6e:4d:23:fd:73:de:1f:17:bc:e2:b4:cd:f9:
                    ec:ee:b3:c9:dd:d0:df:64:b2:4f:4b:3f:e1:b1:8c:
                    25:4b:e0:c1:6d:6a:12:fe:f7:87:69:66:8b:96:96:
                    d3:8f:2c:23:c1:17:45:c3:ef:78:b5:88:8d:82:cf:
                    9d:ce:4d:03:3b:e2:0a:f5:7d:fe:c5:c0:47:ab:8c:
                    7a:ff:a4:28:5b:f0:8b:c8:73:0b:ca:ea:fb:86:b6:
                    a7:3c:3b:10:88:6f:c2:ef:70:08:a5:6a:51:30:bd:
                    02:88:90:37:16:ad:ff:8f:da:b9:18:4c:20:3d:92:
                    40:33:ca:fa:e8:cc:42:34:07:d8:5f:25:08:bb:8f:
                    31:ea:4b:f4:b8:bf:0a:e1:39:bb:a4:43:12:d7:e8:
                    9b:0e:a4:34:22:af:3d:70:3a:2d:5e:ec:68:42:8d:
                    93:5e:44:ee:18:84:fc:97:99:64:31:37:b3:97:eb:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:C7:07:46:75:5A:EC:01:2D:8F:D5:53:88:D4:8E:12:15:A0:B2
            X509v3 Authority Key Identifier:
                keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:be:7f:69:05:1f:cf:35:31:d6:15:d9:c8:e4:fe:ff:e2:
         4b:e5:f9:ce:64:76:c4:67:86:77:44:42:ea:c1:a8:eb:6d:23:
         63:b1:17:6d:dd:15:07:22:73:95:d3:02:4c:74:54:32:34:56:
         ed:c6:a1:85:57:d4:7f:36:e3:22:66:d4:aa:3e:94:d0:41:10:
         35:4e:5c:40:cb:c5:b6:25:42:d2:7f:95:68:73:76:01:9b:39:
         ed:b3:9d:0d:1a:12:57:c5:a1:71:43:30:22:e3:28:b3:af:61:
         6e:28:a0:98:4e:e2:20:d4:6f:4f:9f:f9:d9:50:25:41:24:10:
         c7:54:a4:8b:6b:03:8d:73:75:0e:74:59:1a:0f:f7:94:36:97:
         3c:98:34:2e:91:4a:58:32:df:87:74:af:c6:b1:20:c1:04:eb:
         98:2b:fa:35:f7:4d:89:f0:78:06:b2:92:0e:56:76:0e:e5:5a:
         cc:da:4f:e7:25:ae:fb:44:73:ea:5c:98:cb:07:fd:d2:a4:9c:
         3f:6d:00:a6:2d:64:bc:f2:6d:c2:78:6e:dc:c5:b2:13:ae:b3:
         26:cc:ad:ea:e3:0d:42:28:c4:3a:92:c5:50:b1:9d:aa:69:09:
         67:3e:5d:e0:d0:3a:9c:4a:53:a9:5f:f5:59:aa:17:5b:f0:86:
         8d:58:7c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpcFSP2hY6dN3Wupl7MCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm
Nzk3ZTMwHhcNMjUwNDEzMTIwMTIzWhcNMjUwNDE0MTIwMTIzWjAzMTEwLwYDVQQD
EyhjY2FmYzcwNzQ2NzU1YWVjMDEyZDhmZDU1Mzg4ZDQ4ZTEyMTVhMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1tQQhmTWXqVnOpiMNoeUC9KYjM4
/RfW7/u7fdUA6TbUA9R83Qngcv3GSmsL4Rrg6kaa/LGKOxPS/Y3Zfc89Q3Yx+86T
G+MdqfH3RW5NI/1z3h8XvOK0zfns7rPJ3dDfZLJPSz/hsYwlS+DBbWoS/veHaWaL
lpbTjywjwRdFw+94tYiNgs+dzk0DO+IK9X3+xcBHq4x6/6QoW/CLyHMLyur7hran
PDsQiG/C73AIpWpRML0CiJA3Fq3/j9q5GEwgPZJAM8r66MxCNAfYXyUIu48x6kv0
uL8K4Tm7pEMS1+ibDqQ0Iq89cDotXuxoQo2TXkTuGIT8l5lkMTezl+tqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyvxwdGdVrsAS2P1VOI1I4SFaCyMB8GA1UdIwQY
MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt
ZjkyOTE1YTk2OGJjLzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj
LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJee+f2kF
H881MdYV2cjk/v/iS+X5zmR2xGeGd0RC6sGo620jY7EXbd0VByJzldMCTHRUMjRW
7cahhVfUfzbjImbUqj6U0EEQNU5cQMvFtiVC0n+VaHN2AZs57bOdDRoSV8WhcUMw
IuMos69hbiigmE7iINRvT5/52VAlQSQQx1Ski2sDjXN1DnRZGg/3lDaXPJg0LpFK
WDLfh3SvxrEgwQTrmCv6NfdNifB4BrKSDlZ2DuVazNpP5yWu+0Rz6lyYywf90qSc
P20Api1kvPJtwnhu3MWyE66zJsyt6uMNQijEOpLFULGdqmkJZz5d4NA6nEpTqV/1
WaoXW/CGjVh8Lg==
-----END CERTIFICATE-----