Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.mft
File:                     3W2WGgYrcca_r9m6jqaf3R-mOAI.mft (raw, json)
Hash identifier:          /d5KCe7HC5lTQ4aJzbrLVmAriIX++FNi2xNkWVvXXCc=
Subject key identifier:   C7:29:33:3E:DC:34:CF:D0:72:6B:BA:6B:B8:AC:70:37:4A:80:BF:8C
Authority key identifier: DD:6D:96:1A:06:2B:71:C6:BF:AF:D9:BA:8E:A6:9F:DD:1F:A6:38:02
Certificate issuer:       /CN=dd6d961a062b71c6bfafd9ba8ea69fdd1fa63802
Certificate serial:       01962E2ADA81D4CA392F7B9341BB45E9E171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W2WGgYrcca_r9m6jqaf3R-mOAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.mft
Manifest number:          C3
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 3W2WGgYrcca_r9m6jqaf3R-mOAI.crl (hash: K7s54S3SKgCha9K8v20llj4KpmFuOKrgTt1SuQZtl4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:da:81:d4:ca:39:2f:7b:93:41:bb:45:e9:e1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6d961a062b71c6bfafd9ba8ea69fdd1fa63802
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=c729333edc34cfd0726bba6bb8ac70374a80bf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:ea:c7:6f:55:92:33:7e:83:bd:07:bd:3c:
                    f3:b2:65:a8:cc:cf:52:5c:a5:d3:f9:37:3d:00:da:
                    cb:32:43:c4:c6:1b:f9:01:cb:31:eb:2c:2e:fb:67:
                    71:56:7c:d4:d8:73:7f:4f:2f:2f:9f:3a:d9:1b:bc:
                    9c:e0:75:76:bd:27:a6:18:20:39:18:37:b0:c1:a7:
                    9e:f0:28:d6:f3:2e:ff:2f:e2:9e:c7:e8:16:05:e6:
                    3a:e1:56:f6:05:12:fe:61:11:30:ee:b8:d3:51:c1:
                    d8:e9:6d:a7:eb:c1:bf:db:69:a4:50:bd:0b:1a:93:
                    a9:87:18:05:27:c6:cb:7d:40:79:98:3d:2c:9e:81:
                    65:b8:aa:dc:e1:59:04:bd:82:64:1c:77:1e:05:04:
                    db:ec:b8:d9:6f:ba:e4:c9:5d:a0:17:42:7a:ec:d0:
                    f5:e3:35:78:f8:33:45:1a:35:a5:da:4e:e1:10:e2:
                    14:e9:14:d5:9b:39:10:b2:6d:5e:c6:e7:4e:67:b5:
                    5f:a1:89:64:fa:0f:d4:6e:8f:79:51:62:55:a4:4b:
                    6d:0e:2f:9f:75:f4:20:6d:5a:f0:02:63:46:1a:70:
                    86:d9:26:12:61:05:44:ed:ac:b3:c6:ed:e0:39:51:
                    52:af:18:31:8a:61:41:bd:b6:5a:7a:56:49:d3:17:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:29:33:3E:DC:34:CF:D0:72:6B:BA:6B:B8:AC:70:37:4A:80:BF:8C
            X509v3 Authority Key Identifier:
                keyid:DD:6D:96:1A:06:2B:71:C6:BF:AF:D9:BA:8E:A6:9F:DD:1F:A6:38:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2WGgYrcca_r9m6jqaf3R-mOAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cc4d6-42fd-4406-84ae-480fd84a841f/1/3W2WGgYrcca_r9m6jqaf3R-mOAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c9:8e:52:69:6b:83:b4:6d:52:cb:04:2f:d6:54:61:45:ca:
         f8:38:b7:12:25:65:49:42:aa:a6:61:ad:6d:93:6c:a6:96:81:
         d0:82:c7:bb:02:25:80:9d:e7:85:3f:a7:b4:d0:ac:cf:7b:86:
         44:a3:dc:c4:9f:39:7c:bc:43:58:db:3f:94:22:31:43:16:b6:
         a6:b9:66:ac:14:08:04:f3:cb:c2:3a:ed:bb:bc:fe:cf:f7:01:
         96:07:01:21:75:20:58:20:d7:05:fc:2b:2e:8a:82:71:13:dd:
         ed:6c:f7:ef:f8:2c:2c:7c:21:74:f5:ac:47:fa:61:5a:62:ed:
         ad:45:06:06:99:0e:f5:94:ab:a9:8a:52:22:f5:95:24:63:7f:
         a4:72:8e:e1:ef:fb:ae:f7:dd:cc:55:bd:6c:b8:bc:72:a2:88:
         34:d7:e2:02:b3:84:95:a9:40:42:7a:70:7c:d4:86:92:95:08:
         a0:c5:a4:8d:e5:10:d1:aa:0c:db:fe:0a:31:ee:3a:19:8c:5c:
         38:11:df:47:a9:54:e7:ce:50:45:01:a7:cc:0e:4f:cb:e2:aa:
         be:9f:76:8c:a9:e6:24:62:55:44:65:4d:9a:8f:dd:8d:3b:38:
         91:b2:f1:0f:71:28:d6:ae:e8:be:fd:e0:17:60:78:88:b1:9a:
         42:70:47:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtqB1Mo5L3uTQbtF6eFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmQ5NjFhMDYyYjcxYzZiZmFmZDliYThlYTY5ZmRkMWZh
NjM4MDIwHhcNMjUwNDEzMDgwMTIyWhcNMjUwNDE0MDgwMTIyWjAzMTEwLwYDVQQD
EyhjNzI5MzMzZWRjMzRjZmQwNzI2YmJhNmJiOGFjNzAzNzRhODBiZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmTqx29VkjN+g70HvTzzsmWozM9S
XKXT+Tc9ANrLMkPExhv5Acsx6ywu+2dxVnzU2HN/Ty8vnzrZG7yc4HV2vSemGCA5
GDewwaee8CjW8y7/L+Kex+gWBeY64Vb2BRL+YREw7rjTUcHY6W2n68G/22mkUL0L
GpOphxgFJ8bLfUB5mD0snoFluKrc4VkEvYJkHHceBQTb7LjZb7rkyV2gF0J67ND1
4zV4+DNFGjWl2k7hEOIU6RTVmzkQsm1exudOZ7VfoYlk+g/Ubo95UWJVpEttDi+f
dfQgbVrwAmNGGnCG2SYSYQVE7ayzxu3gOVFSrxgximFBvbZaelZJ0xfl/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcpMz7cNM/Qcmu6a7iscDdKgL+MMB8GA1UdIwQY
MBaAFN1tlhoGK3HGv6/Zuo6mn90fpjgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1cyV0dnWXJjY2FfcjltNmpxYWYzUi1tT0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81Y2M0ZDYtNDJmZC00NDA2LTg0YWUt
NDgwZmQ4NGE4NDFmLzEvM1cyV0dnWXJjY2FfcjltNmpxYWYzUi1tT0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81Y2M0ZDYtNDJmZC00NDA2LTg0YWUtNDgwZmQ4NGE4NDFm
LzEvM1cyV0dnWXJjY2FfcjltNmpxYWYzUi1tT0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8mOUmlr
g7RtUssEL9ZUYUXK+Di3EiVlSUKqpmGtbZNsppaB0ILHuwIlgJ3nhT+ntNCsz3uG
RKPcxJ85fLxDWNs/lCIxQxa2prlmrBQIBPPLwjrtu7z+z/cBlgcBIXUgWCDXBfwr
LoqCcRPd7Wz37/gsLHwhdPWsR/phWmLtrUUGBpkO9ZSrqYpSIvWVJGN/pHKO4e/7
rvfdzFW9bLi8cqKINNfiArOElalAQnpwfNSGkpUIoMWkjeUQ0aoM2/4KMe46GYxc
OBHfR6lU585QRQGnzA5Py+Kqvp92jKnmJGJVRGVNmo/djTs4kbLxD3Eo1q7ovv3g
F2B4iLGaQnBH3Q==
-----END CERTIFICATE-----