Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File:                     sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier:          Iwsjp2F36THwy2mUxqC0cs2ebfs23YlEPPKMJ6GlozU=
Subject key identifier:   40:BA:8D:61:EB:8B:A0:FA:5E:E7:22:9D:FF:F6:58:86:75:97:E9:D1
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer:       /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial:       01962E9888DE30B77D5B50AB8D1819499740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number:          0A3E
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
                          2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
                          3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: 8V1sotbdbOLT7A/BtG97Eb8jKl152FOMdBozAgfBFTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:88:de:30:b7:7d:5b:50:ab:8d:18:19:49:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=40ba8d61eb8ba0fa5ee7229dfff658867597e9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:cc:30:e4:53:f4:fd:7e:c6:98:11:23:2c:
                    8d:f7:a9:34:27:8a:fb:07:36:48:fc:fe:90:92:b3:
                    9a:e9:93:c3:f7:80:bb:36:d2:7f:e0:41:32:46:92:
                    94:8f:03:f0:b4:e5:61:4a:77:c8:a3:22:71:98:42:
                    0a:36:69:8b:1a:f7:a7:af:43:c8:93:81:be:01:66:
                    1c:94:db:03:02:7f:7b:f9:8d:88:8d:04:b9:7d:99:
                    10:f7:3b:db:aa:c7:04:bd:d2:91:01:68:1a:bf:e6:
                    13:d2:aa:53:c0:2b:6c:15:6f:9e:5b:12:e9:af:51:
                    3b:fe:1a:b9:e6:33:1a:8c:9a:ae:12:e9:d3:38:9b:
                    64:cb:35:61:e5:58:d4:b4:b6:e7:bd:9c:cf:49:c3:
                    3d:80:3a:7e:69:ab:1c:f3:0b:88:2c:d5:cd:82:f0:
                    36:67:61:f0:77:e0:da:0b:33:ed:13:8b:12:6a:d4:
                    dd:cb:2b:1f:d2:67:dc:61:2f:48:ac:00:fe:b8:87:
                    b7:7c:93:1f:6b:04:24:85:49:c0:43:4d:4d:01:9e:
                    0f:36:83:5d:dd:c7:aa:9a:08:1f:84:21:67:ae:73:
                    02:92:6a:6f:fe:f8:f5:32:44:f1:04:37:f9:1f:76:
                    f1:1c:30:99:1e:b5:10:0f:3f:4d:87:58:25:c6:ff:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BA:8D:61:EB:8B:A0:FA:5E:E7:22:9D:FF:F6:58:86:75:97:E9:D1
            X509v3 Authority Key Identifier:
                keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:f5:37:32:ea:79:97:a0:e6:77:97:b3:de:99:0f:e5:29:
         b7:92:8c:89:b6:30:01:a8:b7:f9:17:93:0b:31:bf:8f:ae:88:
         30:ae:86:5e:99:00:34:04:96:4d:4f:ce:7d:b7:e5:75:70:6f:
         a1:fc:e1:e6:f5:b0:be:e0:8b:33:8d:89:e6:4c:44:34:7f:13:
         07:5a:45:29:5b:7e:8a:1c:71:52:2b:cf:f2:31:1b:4d:42:65:
         65:0f:a5:02:50:00:49:81:80:29:bb:f1:4c:52:06:f8:bd:e5:
         cc:2a:38:05:4d:49:79:07:b9:32:50:7d:12:a2:da:47:bf:a1:
         dc:b6:cb:13:96:82:15:cf:b9:a0:64:00:f2:26:83:98:05:df:
         13:04:17:b2:47:7d:89:21:4c:42:e1:4e:fe:e6:6f:a4:75:ef:
         a4:3b:c7:5e:35:53:e9:4b:5b:e0:7c:5f:8e:08:da:c4:4d:6f:
         64:9a:48:d1:fc:62:83:78:7d:d0:33:be:ff:72:b8:d8:41:40:
         2b:11:91:b3:8d:eb:25:dd:39:43:ac:d3:f1:10:ad:d0:a6:c1:
         dd:04:fc:a6:c0:dd:13:90:b1:7a:da:72:fb:5c:fe:b9:78:0d:
         cb:95:ee:d4:33:c8:6b:5e:fc:b7:43:95:c1:28:ad:8e:ee:db:
         48:0b:a6:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIjeMLd9W1CrjRgZSZdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMWExZjk3NzBiYWIwNzc1MTViNzcxMmNiOGQ0OTU1MGIz
MTM4YTEwHhcNMjUwNDEzMTAwMTEwWhcNMjUwNDE0MTAwMTEwWjAzMTEwLwYDVQQD
Eyg0MGJhOGQ2MWViOGJhMGZhNWVlNzIyOWRmZmY2NTg4Njc1OTdlOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCfMMORT9P1+xpgRIyyN96k0J4r7
BzZI/P6QkrOa6ZPD94C7NtJ/4EEyRpKUjwPwtOVhSnfIoyJxmEIKNmmLGvenr0PI
k4G+AWYclNsDAn97+Y2IjQS5fZkQ9zvbqscEvdKRAWgav+YT0qpTwCtsFW+eWxLp
r1E7/hq55jMajJquEunTOJtkyzVh5VjUtLbnvZzPScM9gDp+aasc8wuILNXNgvA2
Z2Hwd+DaCzPtE4sSatTdyysf0mfcYS9IrAD+uIe3fJMfawQkhUnAQ01NAZ4PNoNd
3ceqmggfhCFnrnMCkmpv/vj1MkTxBDf5H3bxHDCZHrUQDz9Nh1glxv+UcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC6jWHri6D6Xucinf/2WIZ1l+nRMB8GA1UdIwQY
MBaAFLEaH5dwurB3UVt3EsuNSVULMTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDkt
ODIxN2E5MjlmZDhkLzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDktODIxN2E5MjlmZDhk
LzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoL1NzLq
eZeg5neXs96ZD+Upt5KMibYwAai3+ReTCzG/j66IMK6GXpkANASWTU/OfbfldXBv
ofzh5vWwvuCLM42J5kxENH8TB1pFKVt+ihxxUivP8jEbTUJlZQ+lAlAASYGAKbvx
TFIG+L3lzCo4BU1JeQe5MlB9EqLaR7+h3LbLE5aCFc+5oGQA8iaDmAXfEwQXskd9
iSFMQuFO/uZvpHXvpDvHXjVT6Utb4HxfjgjaxE1vZJpI0fxig3h90DO+/3K42EFA
KxGRs43rJd05Q6zT8RCt0KbB3QT8psDdE5Cxetpy+1z+uXgNy5Xu1DPIa178t0OV
wSitju7bSAumkw==
-----END CERTIFICATE-----