Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File:                     1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier:          eW3A+GR79LGYZA46RnLTseoJ2JXjlngZT/gEg+Q/HH8=
Subject key identifier:   B8:D2:F6:F9:40:D1:92:DD:AD:E7:AC:7B:EC:2F:91:5F:9A:63:3A:45
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer:       /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial:       01962F065290972AD16345B3DCCB7A5317E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number:          0332
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: 51JXt0MZ3JUlB+nprffF3mRRTvt8RvLYIyg1z6mc3S0=)
                          2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:90:97:2a:d1:63:45:b3:dc:cb:7a:53:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=b8d2f6f940d192ddade7ac7bec2f915f9a633a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:b0:b4:94:42:0f:55:75:f3:0e:8e:b4:93:
                    af:4e:51:c4:fd:bc:b1:48:c8:dd:d1:de:a4:0d:7e:
                    c1:19:9b:a7:07:a9:c2:0b:d0:b5:80:c3:b7:dc:d6:
                    cf:de:bb:2a:36:5e:a6:d0:cd:44:93:b0:74:66:dd:
                    56:50:30:e9:dc:e3:73:12:b7:d3:6a:bd:08:75:4b:
                    c7:72:45:40:fb:f0:2c:ff:02:75:43:79:d8:f1:1d:
                    98:e2:b6:5f:8b:d0:b3:02:58:9e:c1:4a:d1:b5:de:
                    cd:71:57:74:29:ce:d8:1c:c2:93:c5:f7:a1:4a:f0:
                    0e:dd:ab:ce:df:bc:30:77:00:14:6a:02:6d:55:bb:
                    b9:2c:78:c2:46:22:fd:fb:6a:a6:03:43:91:0b:7c:
                    01:fb:43:5d:38:12:6e:fc:ee:3f:d8:b7:e0:d2:42:
                    53:34:c0:a2:c5:8f:bf:d5:88:cc:62:1c:3c:94:0f:
                    e6:bf:07:41:89:6c:1d:e8:87:79:d5:3f:93:4e:79:
                    af:52:92:56:c5:cf:55:de:a3:46:7e:da:3d:19:cc:
                    39:45:0b:05:ec:96:60:4a:1e:e1:39:cf:05:88:e4:
                    e3:08:37:1d:9f:9e:1c:df:12:69:1d:05:a8:e0:59:
                    36:36:0b:54:04:cf:b5:b0:c1:d1:3a:a6:3a:65:e6:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D2:F6:F9:40:D1:92:DD:AD:E7:AC:7B:EC:2F:91:5F:9A:63:3A:45
            X509v3 Authority Key Identifier:
                keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:18:16:b5:53:3e:01:b1:37:20:7b:b5:ad:a5:17:e6:28:64:
         c3:f3:35:c8:fd:ce:1b:92:a5:97:2e:07:87:b8:46:bd:f2:98:
         d1:f7:1e:1d:71:90:94:9c:5c:f1:2a:fa:e7:48:9d:8f:af:1f:
         02:2d:a3:a3:8e:c6:fb:65:7f:4c:31:59:b3:6f:d0:5a:f1:f3:
         f4:e5:f1:69:67:a5:22:38:67:83:16:94:39:1c:af:d8:fd:22:
         cb:05:ea:bc:d0:07:36:66:99:6b:84:b3:40:e7:3a:26:d2:c9:
         2b:d6:12:d2:16:dd:fd:7c:74:6c:8b:f1:fe:87:6d:55:9d:1b:
         a2:ab:75:ef:44:cc:cf:61:b0:5d:45:9b:87:d0:92:b2:fe:fc:
         e0:9d:1e:db:ff:fd:63:98:a1:32:56:52:ed:67:f7:29:6f:99:
         27:a7:67:89:73:08:35:fc:db:72:27:0e:d7:2d:9f:1a:d0:fd:
         d4:a2:e3:7c:39:c2:5f:c0:90:d2:c9:51:95:74:aa:d2:18:ac:
         cc:a8:3f:56:95:77:12:a3:21:94:ac:af:a3:ba:57:24:38:2c:
         16:50:76:a1:92:4c:c8:e7:57:4b:1e:42:3d:cd:2e:b3:07:83:
         a4:f5:e5:3f:e5:0a:18:d7:53:70:38:fc:2c:6d:ac:79:b6:99:
         52:27:1e:59
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvBlKQlyrRY0Wz3Mt6UxfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy
MzFmZjIwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
EyhiOGQyZjZmOTQwZDE5MmRkYWRlN2FjN2JlYzJmOTE1ZjlhNjMzYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYKwtJRCD1V18w6OtJOvTlHE/byx
SMjd0d6kDX7BGZunB6nCC9C1gMO33NbP3rsqNl6m0M1Ek7B0Zt1WUDDp3ONzErfT
ar0IdUvHckVA+/As/wJ1Q3nY8R2Y4rZfi9CzAliewUrRtd7NcVd0Kc7YHMKTxfeh
SvAO3avO37wwdwAUagJtVbu5LHjCRiL9+2qmA0ORC3wB+0NdOBJu/O4/2Lfg0kJT
NMCixY+/1YjMYhw8lA/mvwdBiWwd6Id51T+TTnmvUpJWxc9V3qNGfto9Gcw5RQsF
7JZgSh7hOc8FiOTjCDcdn54c3xJpHQWo4Fk2NgtUBM+1sMHROqY6ZeY2IQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLjS9vlA0ZLdreese+wvkV+aYzpFMB8GA1UdIwQY
MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4
LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1
NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxgW
tVM+AbE3IHu1raUX5ihkw/M1yP3OG5Klly4Hh7hGvfKY0fceHXGQlJxc8Sr650id
j68fAi2jo47G+2V/TDFZs2/QWvHz9OXxaWelIjhngxaUORyv2P0iywXqvNAHNmaZ
a4SzQOc6JtLJK9YS0hbd/Xx0bIvx/odtVZ0boqt170TMz2GwXUWbh9CSsv784J0e
2//9Y5ihMlZS7Wf3KW+ZJ6dniXMINfzbcicO1y2fGtD91KLjfDnCX8CQ0slRlXSq
0hiszKg/VpV3EqMhlKyvo7pXJDgsFlB2oZJMyOdXSx5CPc0usweDpPXlP+UKGNdT
cDj8LG2sebaZUiceWQ==
-----END CERTIFICATE-----