Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File:                     1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier:          5tcD31stu168ls4sVFOfaysx8RPHT/sb50ARPLQp+8o=
Subject key identifier:   BE:D6:22:5C:35:CC:35:7A:85:43:74:66:A3:97:64:08:E1:E6:F8:21
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer:       /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial:       01962E2B3CD9B0703DC20644C357975F9FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number:          0C12
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: p+O+tGQXU6T7ZpQ8aWD3hc5YSYVMBXQ7jcDy3Vjum9c=)
                          2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3c:d9:b0:70:3d:c2:06:44:c3:57:97:5f:9f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=bed6225c35cc357a85437466a3976408e1e6f821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:7c:72:24:cc:26:bf:c5:99:73:7a:0f:a8:
                    96:e2:0c:8b:ef:cd:59:da:ee:35:ec:fb:99:ad:5b:
                    88:6c:a6:cc:97:f9:4c:26:01:5f:c0:30:fe:20:8d:
                    6f:34:e5:89:5c:a8:35:c4:9f:b0:9d:70:22:96:ee:
                    b5:f5:34:3f:7d:b8:30:7b:b3:0d:bd:ac:0c:cf:be:
                    50:14:d5:10:7b:b6:1a:ba:7c:14:dc:79:8e:2d:35:
                    9d:77:5f:c8:8f:6e:2c:fe:c6:20:2c:e7:af:94:4a:
                    86:78:84:36:33:9f:51:df:08:d2:a1:a1:5b:a0:94:
                    ba:ce:2c:71:bc:c7:93:0f:e1:95:4e:60:a4:89:a9:
                    a5:b5:aa:f3:e5:a6:7f:f4:84:ea:26:b8:84:91:db:
                    6d:44:85:9e:9c:31:a3:86:c2:5a:f4:e4:08:40:b5:
                    71:18:6c:23:46:46:9e:d8:0e:c8:29:ff:f6:1f:f4:
                    84:6a:a7:02:0b:26:03:34:67:ea:61:97:d9:a6:2b:
                    7d:0e:17:93:d7:b7:55:88:69:ad:c2:cd:72:81:bb:
                    f1:e1:1e:c1:0f:d6:1b:0a:28:64:1a:04:92:a7:a3:
                    21:39:13:d5:de:31:0b:54:71:33:f7:9d:01:fc:73:
                    53:f7:48:bb:69:4a:f4:4f:be:d5:f8:f5:4e:07:a1:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:22:5C:35:CC:35:7A:85:43:74:66:A3:97:64:08:E1:E6:F8:21
            X509v3 Authority Key Identifier:
                keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:13:69:58:26:7d:52:fc:f0:da:63:ff:f0:82:07:d3:79:56:
         a2:e3:02:ec:ee:e5:d4:56:f6:f7:1f:4c:db:ec:58:7b:70:25:
         30:37:92:42:5c:19:57:42:2f:49:0d:4a:32:c2:39:9f:6a:96:
         8f:cc:cc:79:b8:3d:ca:83:cf:40:e5:25:2f:24:6f:a9:1c:a5:
         e0:e1:75:9a:bc:6a:da:01:d8:20:89:b0:47:f4:33:73:22:a2:
         86:72:d3:88:de:0f:83:ec:2f:6d:0f:fe:fd:d6:d2:3d:61:c3:
         32:b6:c7:74:2c:7a:7d:f3:d1:ef:6a:2d:a2:dc:43:55:77:3c:
         82:4f:66:61:25:a2:5f:ff:9b:7d:6f:05:51:15:f5:ef:ff:99:
         1d:66:1f:53:e6:a2:d1:40:ea:95:8f:73:87:1d:63:a6:77:e8:
         aa:1b:c6:18:0d:b5:a7:61:a6:2e:cc:c4:53:54:3c:2f:04:b8:
         d0:f0:e9:6c:d2:3b:12:03:89:06:f1:0d:64:24:3b:4a:93:73:
         ba:a6:0d:65:c7:4c:20:1a:40:67:0e:b2:49:62:d2:93:97:25:
         6b:37:f0:f2:ed:d3:dd:c7:10:35:cc:fc:e9:83:8d:97:b1:eb:
         8b:bc:4a:94:80:a4:d4:ff:c5:ae:e1:8d:35:7c:65:96:59:7a:
         6f:d7:1a:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuKzzZsHA9wgZEw1eXX5+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj
M2NmNTMwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
EyhiZWQ2MjI1YzM1Y2MzNTdhODU0Mzc0NjZhMzk3NjQwOGUxZTZmODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncJ8ciTMJr/FmXN6D6iW4gyL781Z
2u417PuZrVuIbKbMl/lMJgFfwDD+II1vNOWJXKg1xJ+wnXAilu619TQ/fbgwe7MN
vawMz75QFNUQe7YaunwU3HmOLTWdd1/Ij24s/sYgLOevlEqGeIQ2M59R3wjSoaFb
oJS6zixxvMeTD+GVTmCkiamltarz5aZ/9ITqJriEkdttRIWenDGjhsJa9OQIQLVx
GGwjRkae2A7IKf/2H/SEaqcCCyYDNGfqYZfZpit9DheT17dViGmtws1ygbvx4R7B
D9YbCihkGgSSp6MhORPV3jELVHEz950B/HNT90i7aUr0T77V+PVOB6HwJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL7WIlw1zDV6hUN0ZqOXZAjh5vghMB8GA1UdIwQY
MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0
LTBlYzEyY2ZjZTQyMS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1Lzk5NWU0Zi1jZDQyLTRkYzktYWUyNC0wZWMxMmNmY2U0
MjEvMS8xLWRkR20tRFp4THFJblQ0Z0pxMkszRUxEejFNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRNp
WCZ9Uvzw2mP/8IIH03lWouMC7O7l1Fb29x9M2+xYe3AlMDeSQlwZV0IvSQ1KMsI5
n2qWj8zMebg9yoPPQOUlLyRvqRyl4OF1mrxq2gHYIImwR/QzcyKihnLTiN4Pg+wv
bQ/+/dbSPWHDMrbHdCx6ffPR72ototxDVXc8gk9mYSWiX/+bfW8FURX17/+ZHWYf
U+ai0UDqlY9zhx1jpnfoqhvGGA21p2GmLszEU1Q8LwS40PDpbNI7EgOJBvENZCQ7
SpNzuqYNZcdMIBpAZw6ySWLSk5clazfw8u3T3ccQNcz86YONl7Hri7xKlICk1P/F
ruGNNXxllll6b9caxw==
-----END CERTIFICATE-----