Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File:                     3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier:          ENDaxCUF0qzB1kwzRSR86lTx5PS1c2YFUpYWCyCXYLg=
Subject key identifier:   11:16:4F:0D:FB:EF:63:FC:60:88:29:0E:8E:97:0A:D8:64:17:00:A9
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer:       /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial:       01962F741ED6EC388563DE12A9E48F354E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number:          0383
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: X0w9ynAECMt2xGu+HKKxOrO7AksRWgDll/fAQN6qPVU=)
                          2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1e:d6:ec:38:85:63:de:12:a9:e4:8f:35:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=11164f0dfbef63fc6088290e8e970ad8641700a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:46:85:b9:b9:26:1a:06:ba:3f:7f:9d:4e:
                    aa:ee:83:be:03:cc:0a:a4:c5:a4:7a:35:09:22:2c:
                    2a:58:4e:fb:35:55:9a:46:95:e7:c7:95:85:b4:16:
                    3c:9c:90:48:b4:3a:22:06:a6:66:95:05:01:16:05:
                    69:17:68:81:6f:d2:47:37:23:c2:8d:57:d9:bd:11:
                    02:29:53:c1:29:85:f2:65:8f:a3:cc:6f:fe:08:57:
                    c6:6e:6f:e3:57:52:c7:54:b0:5f:9f:01:eb:6a:6d:
                    b5:42:fe:4e:90:4c:a3:48:b3:f9:3b:bf:ec:0d:fe:
                    5a:b4:86:b6:82:73:aa:22:99:56:86:9c:61:43:52:
                    d5:0b:14:03:1b:90:fe:da:db:ed:63:20:76:a2:2f:
                    9a:07:b0:d4:64:cc:6c:b2:e4:e7:1b:56:f3:f5:aa:
                    ae:99:e9:59:ad:cb:f0:20:52:bb:c2:9d:3f:7d:3f:
                    d7:33:89:c1:31:55:81:95:f7:6a:b2:05:d6:c0:e0:
                    57:88:c2:e4:ff:71:47:bf:c1:60:e6:85:cd:12:05:
                    48:bc:02:ac:e9:b2:7a:90:75:5b:98:ee:f3:6a:54:
                    50:d6:94:f6:c7:d1:53:e7:d9:b9:44:0e:ed:01:fb:
                    bf:74:6f:35:bd:40:65:80:4f:b6:6a:b5:da:c6:31:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:4F:0D:FB:EF:63:FC:60:88:29:0E:8E:97:0A:D8:64:17:00:A9
            X509v3 Authority Key Identifier:
                keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:e1:be:5f:5d:fd:84:ba:51:0c:3e:12:de:3a:ac:86:b0:
         a3:98:ad:da:16:0a:e2:4b:f2:82:00:6d:2a:a1:21:ea:9b:35:
         a3:65:c0:f8:36:5a:97:0c:37:3a:31:38:a3:6e:a2:4d:a5:e2:
         ac:6c:d1:1e:cf:d6:93:29:a0:11:6f:55:ef:09:db:69:d3:b9:
         ac:27:c1:18:03:e3:ef:4a:6e:54:13:43:b8:64:ce:57:a7:9e:
         c1:f5:2a:6c:91:bd:22:0b:2d:e4:d6:f5:8c:38:7e:66:a6:73:
         65:2a:9d:61:a8:89:1c:44:14:ee:57:5d:cf:94:a3:0a:09:d5:
         39:32:b1:98:94:78:22:76:b2:8a:04:fd:58:ab:4f:da:ae:5c:
         f3:31:5a:9d:f2:38:65:8f:28:d0:6a:d8:09:77:58:f1:fd:b6:
         f7:51:88:39:ca:57:e8:2b:d4:af:22:ba:4b:6b:0d:f3:da:be:
         ae:fe:a1:20:98:57:6f:cd:1a:15:07:5e:54:e1:ef:ff:e1:5b:
         e6:1c:c1:e4:f6:8a:1e:85:44:c7:c4:8e:fc:9e:fd:78:07:93:
         2b:b2:c2:21:ee:cc:f6:da:ae:2a:c5:c3:ee:36:0e:c9:0a:a9:
         40:89:61:04:6c:94:cb:f7:95:01:3d:7b:4e:38:99:ab:6c:44:
         34:72:3b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdB7W7DiFY94SqeSPNU4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZDI0NmUxODMwNTY3YWIxMTUyMzFkYjc3NWYyODc5ZDk5
YWYwYTAwHhcNMjUwNDEzMTQwMTAxWhcNMjUwNDE0MTQwMTAxWjAzMTEwLwYDVQQD
EygxMTE2NGYwZGZiZWY2M2ZjNjA4ODI5MGU4ZTk3MGFkODY0MTcwMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbZGhbm5JhoGuj9/nU6q7oO+A8wK
pMWkejUJIiwqWE77NVWaRpXnx5WFtBY8nJBItDoiBqZmlQUBFgVpF2iBb9JHNyPC
jVfZvRECKVPBKYXyZY+jzG/+CFfGbm/jV1LHVLBfnwHram21Qv5OkEyjSLP5O7/s
Df5atIa2gnOqIplWhpxhQ1LVCxQDG5D+2tvtYyB2oi+aB7DUZMxssuTnG1bz9aqu
melZrcvwIFK7wp0/fT/XM4nBMVWBlfdqsgXWwOBXiMLk/3FHv8Fg5oXNEgVIvAKs
6bJ6kHVbmO7zalRQ1pT2x9FT59m5RA7tAfu/dG81vUBlgE+2arXaxjF/5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEWTw3772P8YIgpDo6XCthkFwCpMB8GA1UdIwQY
MBaAFNzSRuGDBWerEVIx23dfKHnZmvCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2Qt
YTQxZTYyMGJhM2ViLzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2QtYTQxZTYyMGJhM2Vi
LzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOnhvl9d
/YS6UQw+Et46rIawo5it2hYK4kvyggBtKqEh6ps1o2XA+DZalww3OjE4o26iTaXi
rGzRHs/WkymgEW9V7wnbadO5rCfBGAPj70puVBNDuGTOV6eewfUqbJG9Igst5Nb1
jDh+ZqZzZSqdYaiJHEQU7lddz5SjCgnVOTKxmJR4InayigT9WKtP2q5c8zFanfI4
ZY8o0GrYCXdY8f2291GIOcpX6CvUryK6S2sN89q+rv6hIJhXb80aFQdeVOHv/+Fb
5hzB5PaKHoVEx8SO/J79eAeTK7LCIe7M9tquKsXD7jYOyQqpQIlhBGyUy/eVAT17
TjiZq2xENHI73w==
-----END CERTIFICATE-----