Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
File:                     3f3F4pPp59caluYcPb9oWF1PgwU.mft (raw, json)
Hash identifier:          pkG847b24pHbQW+hzDoM3cJenP2sAzW5SKCu61hH7Gg=
Subject key identifier:   FA:0B:A7:16:30:13:89:D3:96:C9:BE:F9:AF:7E:8D:8F:CF:FE:83:00
Authority key identifier: DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05
Certificate issuer:       /CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
Certificate serial:       019546DABBCF6BAB9FA022F541ABCB60E4C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft
Manifest number:          041B
Signing time:             Thu 27 Feb 2025 10:01:34 +0000
Manifest this update:     Thu 27 Feb 2025 10:01:34 +0000
Manifest next update:     Fri 28 Feb 2025 10:01:34 +0000
Files and hashes:         1: 3f3F4pPp59caluYcPb9oWF1PgwU.crl (hash: K2OCOE2f5ffh9nZ1EudC1JmbXz2gVOM/rjmz2d0aReg=)
                          2: m59Hw5TTd3iL4k-AJmszjnzqejs.roa (hash: MFVhj0ei6aWXoFmI3DBbtg6kilc6p8Atkjj8RGegi9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:da:bb:cf:6b:ab:9f:a0:22:f5:41:ab:cb:60:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfdc5e293e9e7d71a96e61c3dbf68585d4f8305
        Validity
            Not Before: Feb 27 10:01:34 2025 GMT
            Not After : Feb 28 10:01:34 2025 GMT
        Subject: CN=fa0ba716301389d396c9bef9af7e8d8fcffe8300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:dd:4c:24:19:8c:ec:4c:0c:f0:f5:4f:ed:
                    80:8e:d5:1b:fc:c1:29:ee:d0:9a:36:ca:47:67:15:
                    0b:aa:0f:16:45:6b:89:d0:ce:2c:78:2e:91:5c:4d:
                    a7:d4:5a:27:ad:13:ae:5b:04:46:42:af:59:11:f4:
                    b8:d8:25:a5:b2:92:83:3f:9a:ed:3b:4f:b0:3d:02:
                    6c:75:4b:e3:4c:ce:f3:40:f6:8a:26:bd:9e:d2:f4:
                    c1:c3:c8:7a:38:d8:f4:ef:7d:25:f6:a6:46:98:eb:
                    ad:ee:e7:3c:38:ab:8b:d5:99:cc:36:36:5f:d7:77:
                    2a:28:00:51:63:2b:b9:9e:b1:ea:d7:f6:35:71:14:
                    96:51:84:61:c7:a6:98:29:a6:2a:e2:fe:d5:d8:c8:
                    6a:ea:e4:13:ca:e6:39:ea:90:2f:96:40:76:28:a9:
                    29:13:47:bd:e9:df:50:9f:d1:a0:42:7e:a7:09:7b:
                    eb:80:18:3a:74:d9:20:8a:fe:c6:ba:a3:94:62:c3:
                    18:0e:f6:66:76:09:65:bc:1f:d3:62:d7:d0:8d:e0:
                    a6:00:9f:f6:90:c9:de:e3:32:5a:8e:d5:67:7f:1e:
                    ca:22:58:9e:8c:de:f6:30:2c:46:c1:2c:ee:3b:b1:
                    59:df:d9:44:45:6f:12:aa:ed:df:b1:3d:58:ca:59:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:A7:16:30:13:89:D3:96:C9:BE:F9:AF:7E:8D:8F:CF:FE:83:00
            X509v3 Authority Key Identifier:
                keyid:DD:FD:C5:E2:93:E9:E7:D7:1A:96:E6:1C:3D:BF:68:58:5D:4F:83:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f3F4pPp59caluYcPb9oWF1PgwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/81f75a-5f21-4898-963f-bda99ab13d99/1/3f3F4pPp59caluYcPb9oWF1PgwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:06:b6:bb:9b:cb:ee:50:9e:60:9c:bb:c3:87:ae:1a:bf:
         2e:c1:9b:af:0f:05:2e:91:c6:14:bc:53:fb:0f:8d:39:8a:36:
         ba:cb:fc:1c:d3:b7:5c:6a:91:6a:68:82:74:ef:fc:91:ef:fd:
         68:da:24:62:6c:48:16:8e:cd:a7:53:c8:a0:c2:8a:0a:01:f8:
         1d:64:d7:e2:82:a2:2e:38:b4:b9:f8:f2:67:56:36:2f:47:08:
         31:48:9e:94:9b:62:3a:71:f5:92:a8:5a:ec:f3:94:46:23:e0:
         9e:7b:4a:92:40:47:52:ed:0b:ad:1a:b1:57:d1:4a:1b:b4:82:
         0f:fe:09:3b:51:55:d2:f5:b3:94:64:53:16:de:55:d9:e0:f0:
         d7:de:53:f1:8d:c6:73:e8:f1:10:d9:10:50:19:5d:5a:06:4e:
         a2:e1:ab:01:97:5a:eb:b2:b5:a8:cf:db:ff:88:2a:c3:ee:c2:
         85:9b:72:18:b6:7a:64:42:fc:b8:23:c6:1a:1e:d0:ea:e8:e6:
         9f:6f:db:46:ac:42:79:c6:05:ce:26:57:7a:50:76:a8:00:f2:
         9b:2f:66:85:20:b7:55:87:f2:b5:e7:8e:5d:f7:c4:3a:0e:26:
         97:4e:29:17:bd:cb:2d:8b:f7:be:52:c2:29:be:dc:0b:29:36:
         88:3f:4d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVG2rvPa6ufoCL1QavLYOTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmRjNWUyOTNlOWU3ZDcxYTk2ZTYxYzNkYmY2ODU4NWQ0
ZjgzMDUwHhcNMjUwMjI3MTAwMTM0WhcNMjUwMjI4MTAwMTM0WjAzMTEwLwYDVQQD
EyhmYTBiYTcxNjMwMTM4OWQzOTZjOWJlZjlhZjdlOGQ4ZmNmZmU4MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EDdTCQZjOxMDPD1T+2AjtUb/MEp
7tCaNspHZxULqg8WRWuJ0M4seC6RXE2n1FonrROuWwRGQq9ZEfS42CWlspKDP5rt
O0+wPQJsdUvjTM7zQPaKJr2e0vTBw8h6ONj0730l9qZGmOut7uc8OKuL1ZnMNjZf
13cqKABRYyu5nrHq1/Y1cRSWUYRhx6aYKaYq4v7V2Mhq6uQTyuY56pAvlkB2KKkp
E0e96d9Qn9GgQn6nCXvrgBg6dNkgiv7GuqOUYsMYDvZmdgllvB/TYtfQjeCmAJ/2
kMne4zJajtVnfx7KIliejN72MCxGwSzuO7FZ39lERW8Squ3fsT1Yylmy3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoLpxYwE4nTlsm++a9+jY/P/oMAMB8GA1UdIwQY
MBaAFN39xeKT6efXGpbmHD2/aFhdT4MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MWY3NWEtNWYyMS00ODk4LTk2M2Yt
YmRhOTlhYjEzZDk5LzEvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MWY3NWEtNWYyMS00ODk4LTk2M2YtYmRhOTlhYjEzZDk5
LzEvM2YzRjRwUHA1OWNhbHVZY1BiOW9XRjFQZ3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQs4Gtrub
y+5QnmCcu8OHrhq/LsGbrw8FLpHGFLxT+w+NOYo2usv8HNO3XGqRamiCdO/8ke/9
aNokYmxIFo7Np1PIoMKKCgH4HWTX4oKiLji0ufjyZ1Y2L0cIMUielJtiOnH1kqha
7POURiPgnntKkkBHUu0LrRqxV9FKG7SCD/4JO1FV0vWzlGRTFt5V2eDw195T8Y3G
c+jxENkQUBldWgZOouGrAZda67K1qM/b/4gqw+7ChZtyGLZ6ZEL8uCPGGh7Q6ujm
n2/bRqxCecYFziZXelB2qADymy9mhSC3VYfyteeOXffEOg4ml04pF73LLYv3vlLC
Kb7cCyk2iD9NUw==
-----END CERTIFICATE-----