Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
File:                     TTaHdCvs89CAgu0S6fNHC4LafP8.mft (raw, json)
Hash identifier:          nAdIWAY+yHPa8UZgZnj3YEMK8wT8aFeFNMFN6QFKsxk=
Subject key identifier:   77:41:C4:29:C5:A6:DC:2F:AE:CA:20:0F:6A:BE:2F:6F:3A:B3:53:7C
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Certificate issuer:       /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial:       01962F746D64C334C05E22A627DB984C7304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
Manifest number:          0BCC
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: TTaHdCvs89CAgu0S6fNHC4LafP8.crl (hash: e9nVo5f+uQ2qVQPT+bR4DqCf3W73MzQuBJ9Kx3BBxqA=)
                          2: ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa (hash: K5j8O7wSUuuth3uj2946HM7L4q3WosF43ObE+K/eL8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:64:c3:34:c0:5e:22:a6:27:db:98:4c:73:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=7741c429c5a6dc2faeca200f6abe2f6f3ab3537c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:a0:c9:bb:be:24:20:46:2e:36:f3:ca:59:
                    47:c9:c1:fe:d5:26:52:45:cf:5f:6b:f9:87:b5:23:
                    70:3b:bd:c0:15:99:6e:ba:9d:a8:93:5f:b8:6e:3b:
                    10:d9:ad:47:7c:f9:36:7a:2e:41:63:c7:b6:42:9d:
                    92:e5:53:00:a4:2d:08:8f:2a:b5:8e:a6:ee:d6:88:
                    ef:71:da:cd:17:bc:bf:b9:6b:5b:3d:e0:07:1f:62:
                    d8:f2:98:77:cd:76:6a:97:22:06:73:e6:49:18:e1:
                    33:fa:3f:fa:a8:cc:19:15:47:52:f5:27:a2:05:77:
                    ba:e2:2f:cf:29:10:9b:7e:6f:b7:ef:d3:26:7b:35:
                    9d:f8:dd:e7:b2:15:05:a5:7b:e4:b4:60:2d:42:bb:
                    c9:1a:2f:25:cd:39:d3:b5:ba:50:d3:d4:f6:3a:68:
                    70:17:b1:95:ac:7c:db:ca:39:55:9c:d7:51:9e:b2:
                    a3:13:6d:23:6d:8e:ff:96:58:28:52:6f:f3:6c:ee:
                    ca:11:c6:c2:8a:d3:b9:c0:ac:14:72:9b:05:5e:00:
                    cf:f6:4c:b4:96:59:6b:f9:10:97:b1:27:62:36:9e:
                    6f:9e:4b:8b:f8:5a:e4:17:c9:6a:df:0e:75:20:76:
                    e1:2a:33:c5:3b:e3:ea:6c:17:c0:4a:dd:c1:a8:c7:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:C4:29:C5:A6:DC:2F:AE:CA:20:0F:6A:BE:2F:6F:3A:B3:53:7C
            X509v3 Authority Key Identifier:
                keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0a:ae:bc:b0:0f:64:86:6d:a2:64:48:79:93:73:6c:c7:10:
         93:ed:db:48:38:7f:f9:43:9d:7a:d3:96:d9:c6:2a:aa:b0:5c:
         5c:8b:61:51:a8:d3:c9:4c:4c:ad:a4:1f:33:74:91:f7:52:1d:
         a9:bc:02:7c:1d:04:cf:81:d4:64:90:11:de:6f:57:eb:b0:60:
         1f:0e:fd:8a:74:6b:f6:07:70:d5:a3:a0:9c:c8:66:e9:db:d9:
         76:ff:9e:30:3f:bb:2a:0c:b9:1d:7b:22:25:75:30:d0:f4:b1:
         47:51:eb:17:14:6a:2d:a3:bb:71:13:a1:37:db:e2:51:62:ca:
         e7:f0:9e:a1:57:9e:0d:13:d1:51:08:60:2a:8a:1b:d6:0d:3d:
         fc:47:d1:9d:a8:e4:37:ca:15:90:45:7a:56:f2:49:57:eb:f8:
         91:ed:32:24:2b:df:1e:93:b6:d5:4c:ff:03:f4:f3:7b:6c:69:
         64:b8:0b:1c:10:cd:2c:8b:a1:51:b4:89:c3:55:5e:4e:7a:49:
         ba:42:95:21:63:3f:3f:0e:cc:c3:cd:03:51:5a:77:da:0f:0f:
         96:8d:a9:8c:47:2f:72:f9:ce:2c:9c:8e:63:dc:97:8d:f7:30:
         e0:1a:95:38:9d:58:26:15:93:0a:8e:cd:86:df:83:39:f5:1d:
         19:41:bf:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdG1kwzTAXiKmJ9uYTHMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzY4Nzc0MmJlY2YzZDA4MDgyZWQxMmU5ZjM0NzBiODJk
YTdjZmYwHhcNMjUwNDEzMTQwMTIxWhcNMjUwNDE0MTQwMTIxWjAzMTEwLwYDVQQD
Eyg3NzQxYzQyOWM1YTZkYzJmYWVjYTIwMGY2YWJlMmY2ZjNhYjM1MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg2gybu+JCBGLjbzyllHycH+1SZS
Rc9fa/mHtSNwO73AFZluup2ok1+4bjsQ2a1HfPk2ei5BY8e2Qp2S5VMApC0Ijyq1
jqbu1ojvcdrNF7y/uWtbPeAHH2LY8ph3zXZqlyIGc+ZJGOEz+j/6qMwZFUdS9Sei
BXe64i/PKRCbfm+379MmezWd+N3nshUFpXvktGAtQrvJGi8lzTnTtbpQ09T2Omhw
F7GVrHzbyjlVnNdRnrKjE20jbY7/llgoUm/zbO7KEcbCitO5wKwUcpsFXgDP9ky0
lllr+RCXsSdiNp5vnkuL+FrkF8lq3w51IHbhKjPFO+PqbBfASt3BqMcsmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdBxCnFptwvrsogD2q+L286s1N8MB8GA1UdIwQY
MBaAFE02h3Qr7PPQgILtEunzRwuC2nz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRhSGRDdnM4OUNBZ3UwUzZmTkhDNExhZlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kODg1YmItYTNkYy00MzkwLWJmMjQt
MTAzYjE3ZDNlYjQ1LzEvVFRhSGRDdnM4OUNBZ3UwUzZmTkhDNExhZlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kODg1YmItYTNkYy00MzkwLWJmMjQtMTAzYjE3ZDNlYjQ1
LzEvVFRhSGRDdnM4OUNBZ3UwUzZmTkhDNExhZlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQquvLAP
ZIZtomRIeZNzbMcQk+3bSDh/+UOdetOW2cYqqrBcXIthUajTyUxMraQfM3SR91Id
qbwCfB0Ez4HUZJAR3m9X67BgHw79inRr9gdw1aOgnMhm6dvZdv+eMD+7Kgy5HXsi
JXUw0PSxR1HrFxRqLaO7cROhN9viUWLK5/CeoVeeDRPRUQhgKoob1g09/EfRnajk
N8oVkEV6VvJJV+v4ke0yJCvfHpO21Uz/A/Tze2xpZLgLHBDNLIuhUbSJw1VeTnpJ
ukKVIWM/Pw7Mw80DUVp32g8Plo2pjEcvcvnOLJyOY9yXjfcw4BqVOJ1YJhWTCo7N
ht+DOfUdGUG/hQ==
-----END CERTIFICATE-----