Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File:                     1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier:          K0dqgxfXufWiekMZcZVNszkIBCnfdmooYyC+i69HUs4=
Subject key identifier:   39:08:5C:31:ED:EA:AB:4F:F2:FB:7A:2B:1D:41:8C:01:E7:64:20:AE
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer:       /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial:       01962F06BA542054809E6C312107B9F61973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number:          0BC0
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: 0A6cRW1P6yBkOUGfh75z8InsRLCQ6d9WzPC6IZY+3Tg=)
                          2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:54:20:54:80:9e:6c:31:21:07:b9:f6:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=39085c31edeaab4ff2fb7a2b1d418c01e76420ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:3c:44:d0:11:89:43:02:a9:24:7c:5f:71:
                    ab:93:da:42:7f:9f:2e:86:43:6a:e9:82:69:27:08:
                    e3:9b:fc:12:1f:d5:ff:5f:eb:de:80:45:4b:5b:c6:
                    6f:1e:6e:55:1b:64:6e:3f:2f:fe:cb:08:e9:ef:d1:
                    b7:34:0a:7b:3c:90:79:15:19:b2:2c:1f:2f:8b:f7:
                    8d:98:a9:90:b7:6f:34:e8:94:f7:c1:f1:cd:b1:3f:
                    9d:e9:9c:11:9c:c1:10:77:4b:40:e3:7d:2a:db:a3:
                    9a:d7:23:92:1b:47:17:94:8e:02:25:e6:4d:d2:ac:
                    72:86:52:b2:6e:d6:d5:66:cb:73:4b:bf:b8:25:36:
                    3c:9c:0a:b2:b1:1d:b1:1c:d8:2d:39:6b:34:ad:3f:
                    f1:d9:fe:3a:bb:2c:92:13:2f:87:dd:88:aa:25:ce:
                    68:ee:23:5a:1a:ee:eb:f3:c2:db:a9:dd:16:26:b3:
                    2e:6a:2e:02:8a:12:c5:92:60:f0:f7:7c:fa:3b:9d:
                    7a:8e:8b:c4:2b:06:eb:01:a8:4e:e9:0f:c2:ad:9e:
                    79:60:18:0d:57:c7:64:d3:73:85:20:ca:6b:27:83:
                    6e:ad:2f:5d:70:3b:70:19:f2:a2:14:1a:71:93:be:
                    46:54:6a:66:ea:41:ff:e9:c6:83:30:b6:4a:d3:c0:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:08:5C:31:ED:EA:AB:4F:F2:FB:7A:2B:1D:41:8C:01:E7:64:20:AE
            X509v3 Authority Key Identifier:
                keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:d7:0a:38:5d:ab:58:43:1e:0b:b7:f3:78:59:f5:b4:58:
         19:c7:44:c5:c1:22:b3:0a:b0:ad:31:59:1c:eb:0a:31:3f:63:
         a5:e6:b7:e5:b7:de:b6:13:0c:c3:1d:03:dd:94:78:a1:69:28:
         41:ba:25:ac:da:25:9e:6f:d0:c2:0a:04:b6:c3:dc:f7:8e:d1:
         3d:a0:b0:e6:7c:4c:97:63:88:b4:27:be:cb:b4:00:ed:56:d3:
         82:7c:5a:b3:d7:e5:50:d5:75:73:1e:d1:cf:d4:1f:88:f2:c6:
         8a:43:f0:b0:67:ff:a9:cc:aa:aa:4d:d0:b7:e6:1a:42:b6:4d:
         2f:6f:22:d3:c0:10:f1:b8:8b:9d:28:9e:88:5e:1e:00:25:d9:
         3f:44:0b:9b:54:f7:57:cc:84:bf:91:b0:ce:8e:0b:b1:66:da:
         61:b8:4f:e7:80:8f:b7:0c:b1:4c:0e:e2:dc:6c:8d:49:ba:2c:
         2c:18:42:9a:35:1e:1c:60:0c:01:9c:1b:1a:9d:ea:97:2b:bd:
         b4:25:74:f6:1b:54:21:b3:18:63:f4:19:e9:38:b2:30:65:80:
         ab:00:94:25:38:f0:dc:2d:e8:4c:e3:6e:6b:46:ce:c2:87:ca:
         22:92:a1:a3:d2:95:1c:f8:5e:70:d7:fe:03:0e:56:42:f8:b3:
         e2:28:da:1b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvBrpUIFSAnmwxIQe59hlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2
MjNlOTIwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
EygzOTA4NWMzMWVkZWFhYjRmZjJmYjdhMmIxZDQxOGMwMWU3NjQyMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAM8RNARiUMCqSR8X3Grk9pCf58u
hkNq6YJpJwjjm/wSH9X/X+vegEVLW8ZvHm5VG2RuPy/+ywjp79G3NAp7PJB5FRmy
LB8vi/eNmKmQt2806JT3wfHNsT+d6ZwRnMEQd0tA430q26Oa1yOSG0cXlI4CJeZN
0qxyhlKybtbVZstzS7+4JTY8nAqysR2xHNgtOWs0rT/x2f46uyySEy+H3YiqJc5o
7iNaGu7r88Lbqd0WJrMuai4CihLFkmDw93z6O516jovEKwbrAahO6Q/CrZ55YBgN
V8dk03OFIMprJ4NurS9dcDtwGfKiFBpxk75GVGpm6kH/6caDMLZK08DwXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDkIXDHt6qtP8vt6Kx1BjAHnZCCuMB8GA1UdIwQY
MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0
LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgzLzQ5ZjNhZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1
ODEvMS8xLXRrakk5SXJSQ2RkenMxTjRwVzBSNVJpUHBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgovX
Cjhdq1hDHgu383hZ9bRYGcdExcEiswqwrTFZHOsKMT9jpea35bfethMMwx0D3ZR4
oWkoQbolrNolnm/QwgoEtsPc947RPaCw5nxMl2OItCe+y7QA7VbTgnxas9flUNV1
cx7Rz9QfiPLGikPwsGf/qcyqqk3Qt+YaQrZNL28i08AQ8biLnSieiF4eACXZP0QL
m1T3V8yEv5Gwzo4LsWbaYbhP54CPtwyxTA7i3GyNSbosLBhCmjUeHGAMAZwbGp3q
lyu9tCV09htUIbMYY/QZ6TiyMGWAqwCUJTjw3C3oTONua0bOwofKIpKho9KVHPhe
cNf+Aw5WQviz4ijaGw==
-----END CERTIFICATE-----