Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File:                     A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier:          WlJYNbsEIqlo3FVDdSpOYEJU0p3NaAmD8FeOaJ4Nsd0=
Subject key identifier:   10:6E:EA:74:77:0A:15:A1:F3:A1:74:95:E7:F6:48:E6:B4:3B:6C:28
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer:       /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial:       01962E2AB92053A541BF6E7D91D6E500E700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
                          2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: EdDesvhu8pZQtE6eFc4zgnmU5LNo5ZLdcqqzBtCz/rM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:20:53:a5:41:bf:6e:7d:91:d6:e5:00:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=106eea74770a15a1f3a17495e7f648e6b43b6c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:00:d7:c2:1e:5a:98:e5:47:04:c7:24:1f:
                    97:49:04:bf:cc:b3:19:74:ff:f4:1a:f4:48:84:6b:
                    09:02:c8:51:0d:4f:ae:00:03:a4:1f:b6:d8:f5:a6:
                    b6:12:d5:59:87:b1:35:97:d0:6e:3f:a1:1c:b1:1c:
                    1e:e4:cf:52:78:e1:4a:dd:03:1f:ed:14:60:92:a2:
                    de:5e:a1:fb:72:e1:e2:f1:6d:be:d7:2c:82:0c:27:
                    e8:aa:f6:f9:cd:71:ff:ac:77:5d:ae:05:5f:f3:9f:
                    cb:06:34:ac:59:bc:24:e7:f5:10:0b:05:61:e4:bc:
                    92:b2:ec:a5:4c:99:9e:6c:d6:ae:a9:90:bf:a9:c1:
                    9e:6c:15:d5:98:33:4e:cd:e4:51:90:aa:3c:7a:eb:
                    6b:4e:65:0f:26:e7:3f:10:4e:d8:df:4b:4e:dc:28:
                    9c:82:1f:27:72:b1:4d:13:22:ed:5b:ee:d2:14:aa:
                    a4:60:68:03:3b:ce:ae:70:c5:25:39:c2:26:4c:d0:
                    31:e7:bb:e0:45:1a:70:1c:c0:ca:5f:58:99:a4:d3:
                    51:71:51:29:bb:c6:73:9d:d8:56:83:97:8e:55:8b:
                    e5:e6:74:6a:cc:66:49:c3:4a:53:98:1f:46:b0:cc:
                    5f:0f:ac:3f:f0:15:b9:26:d5:9b:a1:4a:b2:00:31:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:EA:74:77:0A:15:A1:F3:A1:74:95:E7:F6:48:E6:B4:3B:6C:28
            X509v3 Authority Key Identifier:
                keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:12:f8:9a:fa:2e:04:5b:f0:ae:32:65:be:6a:85:da:e0:
         8b:d3:12:16:c0:be:ba:35:bc:1c:ac:0c:f4:c3:b7:fe:52:7f:
         c7:af:93:3a:55:4f:96:75:6e:c8:fb:85:e5:b8:a6:50:6a:49:
         62:45:55:7b:cb:c7:28:63:9a:f3:09:41:81:42:6c:e8:66:46:
         ad:f2:8d:ec:77:c4:3c:51:12:41:84:93:8c:a5:d7:81:a1:f7:
         f4:8a:35:e5:90:55:10:7c:2a:50:d3:02:25:53:3c:f3:77:4c:
         c4:77:fb:07:e9:aa:e4:c7:8c:17:7e:70:a9:9e:a6:f4:6b:e4:
         8e:77:48:aa:05:55:b7:c6:64:f9:c0:dc:20:81:28:00:84:4e:
         4a:33:44:c9:db:81:72:18:07:74:a8:2a:61:80:53:39:bc:a7:
         49:59:2c:5b:81:fe:5e:db:e1:4f:8a:b9:7d:8c:bc:a6:07:b2:
         6b:65:d0:78:1c:70:58:b0:19:0f:bf:0b:e3:50:d5:44:be:d0:
         26:99:13:00:48:ab:33:2f:2d:15:66:bc:1b:7a:93:a7:c7:29:
         be:d9:68:ef:14:98:6f:4b:83:1a:3f:37:75:5f:2a:e3:04:82:
         c7:2b:74:5f:b3:32:60:47:af:6f:d2:4d:20:e8:ff:f2:f3:f8:
         cb:19:5d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKrkgU6VBv259kdblAOcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzg2M2RjM2MyNTllNjBiMmM5ODY4MDJkZDYwMjExMTVl
OGJmMWYwHhcNMjUwNDEzMDgwMTEzWhcNMjUwNDE0MDgwMTEzWjAzMTEwLwYDVQQD
EygxMDZlZWE3NDc3MGExNWExZjNhMTc0OTVlN2Y2NDhlNmI0M2I2YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/cA18IeWpjlRwTHJB+XSQS/zLMZ
dP/0GvRIhGsJAshRDU+uAAOkH7bY9aa2EtVZh7E1l9BuP6EcsRwe5M9SeOFK3QMf
7RRgkqLeXqH7cuHi8W2+1yyCDCfoqvb5zXH/rHddrgVf85/LBjSsWbwk5/UQCwVh
5LySsuylTJmebNauqZC/qcGebBXVmDNOzeRRkKo8eutrTmUPJuc/EE7Y30tO3Cic
gh8ncrFNEyLtW+7SFKqkYGgDO86ucMUlOcImTNAx57vgRRpwHMDKX1iZpNNRcVEp
u8ZzndhWg5eOVYvl5nRqzGZJw0pTmB9GsMxfD6w/8BW5JtWboUqyADHkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBu6nR3ChWh86F0lef2SOa0O2woMB8GA1UdIwQY
MBaAFAN4Y9w8JZ5gssmGgC3WAhEV6L8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWIt
ZDlmMzAxODY4ZWYzLzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWItZDlmMzAxODY4ZWYz
LzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGwS+Jr6
LgRb8K4yZb5qhdrgi9MSFsC+ujW8HKwM9MO3/lJ/x6+TOlVPlnVuyPuF5bimUGpJ
YkVVe8vHKGOa8wlBgUJs6GZGrfKN7HfEPFESQYSTjKXXgaH39Io15ZBVEHwqUNMC
JVM883dMxHf7B+mq5MeMF35wqZ6m9GvkjndIqgVVt8Zk+cDcIIEoAIROSjNEyduB
chgHdKgqYYBTObynSVksW4H+XtvhT4q5fYy8pgeya2XQeBxwWLAZD78L41DVRL7Q
JpkTAEirMy8tFWa8G3qTp8cpvtlo7xSYb0uDGj83dV8q4wSCxyt0X7MyYEevb9JN
IOj/8vP4yxldvw==
-----END CERTIFICATE-----