Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier:          NxPVMbzZra399hVt7P4GrvqdH+aGqvX2Vfy60CzOdAg=
Subject key identifier:   3D:8E:2E:4C:60:FA:FC:1F:2D:94:69:8C:3E:B8:DD:4F:67:C7:14:0D
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer:       /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial:       01962ECF4E920D46A9BE205D5EDB43670EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number:          31
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: wZGNT1LmtTGDzuy86pi/9iyVwYqZJotUHh2jxKX6oHg=)
                          2: xrKbG2lJLOHs6NPBeftXhDf224g.roa (hash: HTfj5/noaRj4CcOjKLI4Ev9C1aqAbFFMy1QpqUl2n+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4e:92:0d:46:a9:be:20:5d:5e:db:43:67:0e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=3d8e2e4c60fafc1f2d94698c3eb8dd4f67c7140d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:38:bb:df:ff:82:12:7a:b7:0e:86:69:ea:
                    46:d6:f4:ba:eb:9e:43:18:87:ab:a7:30:67:84:44:
                    18:b1:5c:6c:a1:b6:3c:0f:ca:e7:dd:a4:fa:93:8f:
                    b4:8e:d4:bd:6e:b7:53:ad:ba:fc:4f:67:7f:88:9f:
                    65:16:4e:cc:32:e1:86:15:1d:17:a2:90:79:13:fe:
                    e1:d3:89:27:0c:70:6e:61:b3:38:4c:2e:35:e5:2f:
                    1d:6c:05:09:b7:9e:70:45:db:2d:aa:dc:44:65:0c:
                    47:d6:bd:d0:53:7b:3e:c6:7b:ef:a4:55:f3:ae:69:
                    63:6f:1e:ce:fb:0b:f6:e9:84:db:16:1a:90:6c:2a:
                    c9:4a:db:9b:62:d4:a2:9d:5c:ac:09:72:d1:3f:d2:
                    af:2f:2d:f4:1b:7e:bf:e9:78:28:9c:a7:5b:6c:04:
                    88:5c:ae:85:18:fe:8a:0a:bd:dc:0a:e4:c0:52:6a:
                    e2:54:49:35:1d:df:f7:36:17:06:7c:43:1c:e2:d0:
                    9f:e0:6a:49:d8:09:10:5f:f6:95:85:35:f7:dc:5a:
                    dc:81:82:ea:c0:c4:31:88:f3:39:6c:57:bf:35:e7:
                    90:0d:94:14:b5:5b:b7:36:b8:8f:16:65:3b:1d:49:
                    98:4f:ab:ba:07:9b:0e:06:9b:ef:bc:bb:b9:90:26:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:2E:4C:60:FA:FC:1F:2D:94:69:8C:3E:B8:DD:4F:67:C7:14:0D
            X509v3 Authority Key Identifier:
                keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:75:96:7a:2f:1e:85:3a:f2:a8:b1:64:fc:2e:07:0b:56:ae:
         2f:15:5b:65:77:57:e6:3e:34:49:d5:41:f0:96:f9:74:61:b0:
         ef:6d:0d:89:b9:91:df:63:b4:d6:11:15:ba:19:df:dd:2d:17:
         61:f2:3b:be:90:26:69:38:18:69:49:ee:22:50:77:bb:da:b3:
         9a:a8:36:a7:03:99:69:08:cf:27:60:c2:84:4c:89:c5:f5:0b:
         76:55:8f:90:ce:5d:8e:0c:71:50:1f:05:cf:bf:d9:af:b5:c0:
         28:f9:7b:eb:59:e5:85:e4:45:3f:41:9e:5a:44:25:46:15:b2:
         e3:25:b2:cd:51:64:09:04:ab:fe:c2:5d:8f:cc:1b:44:ec:f4:
         7a:a4:ae:6c:1c:53:ad:7d:4c:90:c3:ca:0a:d3:e0:f6:58:0b:
         ab:89:85:35:e5:59:47:2c:39:dd:3e:8c:17:61:ab:7f:da:cb:
         65:61:3c:48:c4:1e:23:9b:a7:f9:84:bf:bd:9b:e5:96:e9:bc:
         f9:b6:ee:b0:a2:d9:13:84:c1:b6:28:3c:29:a8:0b:af:a5:3a:
         29:3a:fb:bd:43:ea:b0:68:3d:49:aa:50:3f:95:f4:2c:81:01:
         a9:ac:6f:35:b1:7c:31:6d:26:d5:72:19:e8:a7:04:96:9d:d8:
         d4:33:f6:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz06SDUapviBdXttDZw78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjI4ZTA2OWI1ZWQ4YjQ1NTkzNDNiNWI2N2Y1YWI0Zjky
MjUxZmUwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EygzZDhlMmU0YzYwZmFmYzFmMmQ5NDY5OGMzZWI4ZGQ0ZjY3YzcxNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrs4u9//ghJ6tw6GaepG1vS6655D
GIerpzBnhEQYsVxsobY8D8rn3aT6k4+0jtS9brdTrbr8T2d/iJ9lFk7MMuGGFR0X
opB5E/7h04knDHBuYbM4TC415S8dbAUJt55wRdstqtxEZQxH1r3QU3s+xnvvpFXz
rmljbx7O+wv26YTbFhqQbCrJStubYtSinVysCXLRP9KvLy30G36/6XgonKdbbASI
XK6FGP6KCr3cCuTAUmriVEk1Hd/3NhcGfEMc4tCf4GpJ2AkQX/aVhTX33FrcgYLq
wMQxiPM5bFe/NeeQDZQUtVu3NriPFmU7HUmYT6u6B5sOBpvvvLu5kCa9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2OLkxg+vwfLZRpjD643U9nxxQNMB8GA1UdIwQY
MBaAFNJijgabXti0VZNDtbZ/WrT5IlH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUt
YWY2NGE1N2FjOGQyLzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUtYWY2NGE1N2FjOGQy
LzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3WWei8e
hTryqLFk/C4HC1auLxVbZXdX5j40SdVB8Jb5dGGw720NibmR32O01hEVuhnf3S0X
YfI7vpAmaTgYaUnuIlB3u9qzmqg2pwOZaQjPJ2DChEyJxfULdlWPkM5djgxxUB8F
z7/Zr7XAKPl761nlheRFP0GeWkQlRhWy4yWyzVFkCQSr/sJdj8wbROz0eqSubBxT
rX1MkMPKCtPg9lgLq4mFNeVZRyw53T6MF2Grf9rLZWE8SMQeI5un+YS/vZvllum8
+bbusKLZE4TBtig8KagLr6U6KTr7vUPqsGg9SapQP5X0LIEBqaxvNbF8MW0m1XIZ
6KcElp3Y1DP28A==
-----END CERTIFICATE-----