Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File:                     FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier:          PmmQV/AJOjJmR9JkYxKZ3UTXmwC8tWm0K4ryvB2aJFY=
Subject key identifier:   33:F4:EB:3F:D9:AA:5D:38:8A:CC:8E:23:F0:FF:89:C8:47:6E:9D:B9
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer:       /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial:       01962DF443F12C48B8FDF2E51DB714AABF7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number:          0BDF
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: JChdrL+IxBTg6e3Mg9WFGqYwcLgRShymZAGisB++veg=)
                          2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:43:f1:2c:48:b8:fd:f2:e5:1d:b7:14:aa:bf:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=33f4eb3fd9aa5d388acc8e23f0ff89c8476e9db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:41:d7:56:21:03:a1:db:9c:11:e8:83:a3:
                    a1:31:04:3c:f8:14:53:25:c6:27:94:29:1c:f3:eb:
                    ce:b4:be:a8:25:db:b6:34:81:65:79:15:00:91:a3:
                    05:f1:70:94:df:4e:e9:31:77:f2:ae:6d:87:0d:38:
                    95:fb:61:46:a7:5c:13:7c:a2:0f:24:5a:aa:26:ca:
                    c6:11:c7:3c:6e:f8:ef:fb:73:c7:b9:e3:5a:cd:f3:
                    80:fd:2a:7f:85:ef:47:60:6a:a2:3a:54:98:83:ce:
                    38:49:74:4a:25:19:08:ed:40:b0:11:5f:1a:a9:e3:
                    8b:14:68:60:99:3a:89:64:5d:ed:74:ca:00:e4:45:
                    28:e8:ff:d6:09:dc:e1:d0:8c:c4:a1:21:8d:65:6a:
                    96:23:eb:7d:d8:14:90:9e:dc:2e:b5:88:ea:66:96:
                    77:df:b0:e9:82:18:41:1e:73:92:9d:7a:ee:18:29:
                    75:84:bb:ee:4f:de:0f:cd:b7:de:a5:10:b6:cc:42:
                    f2:56:4a:4d:0d:d5:1c:21:ad:d9:09:d0:af:ef:75:
                    1e:fa:63:b5:61:4a:dd:81:1a:11:d4:82:12:44:da:
                    03:ee:31:d1:7c:98:7a:71:fd:c9:c1:1f:20:87:a2:
                    0b:90:d8:28:4a:74:04:7e:2e:af:4f:00:c5:a0:01:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:EB:3F:D9:AA:5D:38:8A:CC:8E:23:F0:FF:89:C8:47:6E:9D:B9
            X509v3 Authority Key Identifier:
                keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:5f:99:6e:fe:ae:71:45:1b:03:09:54:c2:0a:df:73:e9:
         70:f8:f1:3c:78:5e:e2:94:45:4c:f6:b9:fc:8c:08:7b:7b:76:
         6b:7d:29:a8:90:db:7e:52:c3:b6:b5:e0:1f:25:26:b6:97:f7:
         9e:c7:f2:90:e6:51:be:d9:bc:b4:ea:25:06:85:ed:5c:c0:a5:
         b5:76:95:80:e3:ba:9d:ad:e3:19:25:01:e1:fd:7c:e7:e6:26:
         36:68:cf:b3:a9:1d:3c:8c:f6:60:81:71:4b:e8:ac:f6:93:55:
         83:37:e9:19:1f:c5:27:19:3b:c9:0b:ef:af:79:65:22:49:e8:
         6c:b8:2b:c5:ad:95:f2:4f:c2:19:1b:ea:fc:f3:6a:af:eb:37:
         81:4f:08:39:66:a5:e0:63:ed:3b:18:21:00:13:fb:95:9b:6c:
         58:0a:e9:46:4e:4e:56:e6:4f:ec:53:e9:0d:6c:cc:0c:c6:cd:
         b3:59:25:d8:21:b4:30:1d:f5:87:c8:d7:0e:d5:bd:2d:7e:2e:
         2a:f4:8f:7e:50:30:d9:4c:70:e4:32:00:da:0f:1c:d1:b2:bd:
         e3:02:34:9f:19:47:0f:3d:b6:d0:44:27:94:c0:e0:6d:1e:58:
         71:92:ef:fe:92:1e:65:86:16:48:6a:7a:7f:13:15:2e:74:3d:
         62:12:4c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EPxLEi4/fLlHbcUqr97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODczMTkxNzE3MGM0YjgxYmVlMzUxZDA0NTVjMzJjYmFk
NjNiMjYwHhcNMjUwNDEzMDcwMTQ0WhcNMjUwNDE0MDcwMTQ0WjAzMTEwLwYDVQQD
EygzM2Y0ZWIzZmQ5YWE1ZDM4OGFjYzhlMjNmMGZmODljODQ3NmU5ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSJB11YhA6HbnBHog6OhMQQ8+BRT
JcYnlCkc8+vOtL6oJdu2NIFleRUAkaMF8XCU307pMXfyrm2HDTiV+2FGp1wTfKIP
JFqqJsrGEcc8bvjv+3PHueNazfOA/Sp/he9HYGqiOlSYg844SXRKJRkI7UCwEV8a
qeOLFGhgmTqJZF3tdMoA5EUo6P/WCdzh0IzEoSGNZWqWI+t92BSQntwutYjqZpZ3
37DpghhBHnOSnXruGCl1hLvuT94PzbfepRC2zELyVkpNDdUcIa3ZCdCv73Ue+mO1
YUrdgRoR1IISRNoD7jHRfJh6cf3JwR8gh6ILkNgoSnQEfi6vTwDFoAF9EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP06z/Zql04isyOI/D/ichHbp25MB8GA1UdIwQY
MBaAFBaHMZFxcMS4G+41HQRVwyy61jsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUt
YjJkNDY2Njk3YWM0LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUtYjJkNDY2Njk3YWM0
LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCJfmW7+
rnFFGwMJVMIK33PpcPjxPHhe4pRFTPa5/IwIe3t2a30pqJDbflLDtrXgHyUmtpf3
nsfykOZRvtm8tOolBoXtXMCltXaVgOO6na3jGSUB4f185+YmNmjPs6kdPIz2YIFx
S+is9pNVgzfpGR/FJxk7yQvvr3llIknobLgrxa2V8k/CGRvq/PNqr+s3gU8IOWal
4GPtOxghABP7lZtsWArpRk5OVuZP7FPpDWzMDMbNs1kl2CG0MB31h8jXDtW9LX4u
KvSPflAw2Uxw5DIA2g8c0bK94wI0nxlHDz220EQnlMDgbR5YcZLv/pIeZYYWSGp6
fxMVLnQ9YhJM/g==
-----END CERTIFICATE-----