Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File:                     k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier:          XUPrtk0JOCKAFtS4cGKr3bvozP7a5vNYvztTD13q+xQ=
Subject key identifier:   FE:B5:2E:1D:F9:6F:EE:24:42:03:6B:B7:8F:38:70:65:92:BF:72:20
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer:       /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial:       01962DF445C432E04A38B3477A33CB8BB761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: VX8+Kd+4LpDMETBgmGdxXdd0AQHDiXjC3n2R4iEyYBs=)
                          2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:45:c4:32:e0:4a:38:b3:47:7a:33:cb:8b:b7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=feb52e1df96fee2442036bb78f38706592bf7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:73:f1:5a:e2:fa:2a:ad:ef:35:b1:fe:62:
                    0a:da:1b:f4:24:7a:6d:a7:21:38:9f:f9:ee:de:5f:
                    be:5c:e3:75:9c:34:e0:aa:9d:07:d8:da:8c:49:ff:
                    21:f8:26:cf:32:98:5f:29:ef:4f:61:9b:ef:33:07:
                    89:e3:d6:46:b6:59:7e:3e:1c:ab:3f:60:1f:8c:6d:
                    a9:0a:4c:bf:76:f0:86:c6:7c:22:7a:c6:e6:f0:36:
                    f6:ec:ab:7b:dc:f1:75:12:43:43:72:8e:ff:b9:30:
                    5e:11:3c:5a:7e:b9:e1:25:2a:8d:4a:c3:4e:79:a7:
                    38:9a:7d:1b:dd:d3:18:d9:a4:03:c1:85:7a:04:40:
                    60:2d:85:dd:f0:54:09:cb:44:49:2c:14:a0:41:aa:
                    d6:16:dc:88:df:4a:5c:8c:a3:e3:e5:f1:91:3e:b0:
                    d8:ae:db:0f:1b:27:aa:59:30:10:b1:90:86:11:61:
                    f0:b9:02:66:1c:39:b8:ff:1d:9e:24:34:fe:6b:34:
                    b1:bb:70:c7:b8:ad:14:f5:1e:a1:4a:60:63:46:a2:
                    2b:ad:9f:16:b0:bd:fd:a4:5c:27:cf:94:c7:1f:9e:
                    45:96:c2:df:a7:8b:af:33:7b:92:29:dd:47:d8:2c:
                    41:88:50:ee:da:47:e7:e2:f2:a7:a0:e8:7f:11:1d:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:2E:1D:F9:6F:EE:24:42:03:6B:B7:8F:38:70:65:92:BF:72:20
            X509v3 Authority Key Identifier:
                keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e5:e6:fe:44:22:9a:17:e2:d7:3b:fb:77:7e:bd:1a:68:bc:
         fa:e6:ba:70:15:f0:df:7e:5f:91:2b:94:67:97:d5:9f:41:f4:
         92:90:80:4d:0c:ea:fd:df:8e:c8:2b:b5:c8:9a:7e:36:63:7b:
         ae:43:4e:9c:0d:24:5d:5f:7a:e8:0c:92:48:8d:56:93:8e:c6:
         af:eb:3d:74:5a:a8:fc:28:03:2e:92:bb:c4:2a:64:bb:16:22:
         df:42:be:79:b6:1d:0b:ed:78:75:b2:62:34:05:c5:ff:55:09:
         7d:6d:97:37:36:b3:69:32:31:d3:36:33:96:e0:28:43:15:a4:
         6c:9b:05:3b:a5:ec:6c:1a:5b:27:28:8e:f0:69:a5:12:a0:eb:
         ca:92:e6:09:c2:44:c0:40:77:97:ba:06:6e:d4:fe:1c:41:11:
         c4:b1:19:6a:13:f0:e9:c4:12:60:77:aa:25:61:8a:c2:67:3d:
         e1:0b:83:b6:39:a1:38:46:5a:27:8f:22:73:92:62:94:56:30:
         9f:03:61:4e:19:21:2b:c5:1d:eb:9d:0a:72:0f:78:c2:3b:39:
         5a:8e:67:15:23:b3:d9:99:a0:8e:32:89:d4:f0:e4:f1:b1:8e:
         76:ea:e6:a1:7d:53:34:4c:42:b7:7b:6a:5c:e3:c6:c5:c1:db:
         9b:e4:32:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EXEMuBKOLNHejPLi7dhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzg1YjNhOWUzM2M1MmI1OGI5ZWM5NWEzNzcyM2YwMDA4
YmY5NDYwHhcNMjUwNDEzMDcwMTQ1WhcNMjUwNDE0MDcwMTQ1WjAzMTEwLwYDVQQD
EyhmZWI1MmUxZGY5NmZlZTI0NDIwMzZiYjc4ZjM4NzA2NTkyYmY3MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoZz8Vri+iqt7zWx/mIK2hv0JHpt
pyE4n/nu3l++XON1nDTgqp0H2NqMSf8h+CbPMphfKe9PYZvvMweJ49ZGtll+Phyr
P2AfjG2pCky/dvCGxnwiesbm8Db27Kt73PF1EkNDco7/uTBeETxafrnhJSqNSsNO
eac4mn0b3dMY2aQDwYV6BEBgLYXd8FQJy0RJLBSgQarWFtyI30pcjKPj5fGRPrDY
rtsPGyeqWTAQsZCGEWHwuQJmHDm4/x2eJDT+azSxu3DHuK0U9R6hSmBjRqIrrZ8W
sL39pFwnz5THH55FlsLfp4uvM3uSKd1H2CxBiFDu2kfn4vKnoOh/ER0zXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP61Lh35b+4kQgNrt484cGWSv3IgMB8GA1UdIwQY
MBaAFJN4WzqeM8UrWLnslaN3I/AAi/lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMt
ZjRiYWI3MTllMDcwLzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMtZjRiYWI3MTllMDcw
LzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+Xm/kQi
mhfi1zv7d369Gmi8+ua6cBXw335fkSuUZ5fVn0H0kpCATQzq/d+OyCu1yJp+NmN7
rkNOnA0kXV966AySSI1Wk47Gr+s9dFqo/CgDLpK7xCpkuxYi30K+ebYdC+14dbJi
NAXF/1UJfW2XNzazaTIx0zYzluAoQxWkbJsFO6XsbBpbJyiO8GmlEqDrypLmCcJE
wEB3l7oGbtT+HEERxLEZahPw6cQSYHeqJWGKwmc94QuDtjmhOEZaJ48ic5JilFYw
nwNhThkhK8Ud650Kcg94wjs5Wo5nFSOz2ZmgjjKJ1PDk8bGOdurmoX1TNExCt3tq
XOPGxcHbm+Qy2A==
-----END CERTIFICATE-----