Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
File:                     2afNm3hyoceqJis_rRqQdlAlKDI.mft (raw, json)
Hash identifier:          +Q7xsbEUA4aIZE5JdjUqlUBTi1xE9OdpePdwQLRNSbY=
Subject key identifier:   1D:37:2C:A1:7F:A6:59:E7:04:77:36:23:F9:B9:DD:72:CF:7D:6A:A6
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Certificate issuer:       /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial:       01962F3DB1C7C4095C89DE3C3A911B47AAF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
Manifest number:          0310
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 2afNm3hyoceqJis_rRqQdlAlKDI.crl (hash: 7T0/cRd+pR3LGs1vto68ohXPd59tPsfu0PIImX+F9NQ=)
                          2: 8xRb-DPzCzHiHinhBGSiJKFCfq0.roa (hash: A9plqAZ6tW823XWa6YGs85LIMKZtOqJdz/q0S+8zYRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:c7:c4:09:5c:89:de:3c:3a:91:1b:47:aa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=1d372ca17fa659e704773623f9b9dd72cf7d6aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:ea:3b:01:f5:d3:94:33:86:53:aa:c5:65:
                    43:20:86:46:36:20:35:62:7c:22:b1:f1:af:41:b0:
                    d3:9c:89:70:95:d8:28:a0:c5:e1:bb:f0:00:e5:d4:
                    5d:76:1f:ec:46:09:9c:c0:c6:ef:d7:30:bf:3d:ba:
                    a3:c4:e8:c9:64:eb:5a:f8:30:5d:e4:21:af:97:92:
                    88:66:3b:68:0b:3d:51:e0:92:ad:a8:61:47:1b:cd:
                    62:eb:70:c6:14:ce:a2:74:2e:5e:c7:c7:57:7c:41:
                    b5:23:2f:78:31:41:2a:1c:58:78:58:69:d2:b4:c5:
                    94:ce:54:ea:7b:61:41:63:15:e1:27:38:8d:89:fe:
                    14:ea:8f:69:ec:b7:cb:a7:8a:47:a1:47:ed:d2:33:
                    9f:3a:cf:45:b2:0b:0e:b0:e5:15:64:d6:2a:50:fb:
                    aa:c0:33:b8:30:12:68:cc:37:c9:56:e1:ef:3a:e4:
                    b3:c9:cf:e5:e5:aa:6e:5d:24:1c:f3:03:3d:c2:94:
                    04:e8:f9:92:21:6f:ee:f3:1d:b8:f9:bd:a8:fd:53:
                    dc:1f:6a:b1:09:b1:25:87:36:4d:06:46:3b:24:49:
                    61:03:86:65:21:50:12:67:68:44:70:b4:99:1b:26:
                    ca:13:92:ef:c6:e5:6f:ff:aa:98:69:93:d1:81:05:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:2C:A1:7F:A6:59:E7:04:77:36:23:F9:B9:DD:72:CF:7D:6A:A6
            X509v3 Authority Key Identifier:
                keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:3c:8d:d6:6d:ae:cb:15:37:b4:fe:92:55:06:52:f6:3e:89:
         35:23:26:74:13:c7:af:87:44:41:6e:0a:f7:d6:c4:fa:06:3e:
         07:e1:fe:49:e0:b2:1a:25:f4:60:36:df:42:48:5f:bb:f6:d5:
         e3:80:4a:be:ed:b0:21:09:8d:6f:e5:18:ae:36:65:48:d4:4d:
         2a:e2:18:bf:17:be:55:24:c9:8a:02:01:aa:23:88:77:b0:09:
         4a:3e:d7:cc:ca:0b:20:d5:af:52:f7:ff:a0:28:4b:e0:79:29:
         36:bf:c3:ee:81:99:1a:e7:2d:8b:2f:68:62:e5:08:57:a7:31:
         38:21:bc:dd:d8:02:f5:cd:43:c9:77:ab:18:37:a4:5d:f9:50:
         db:92:82:3e:ce:58:58:71:40:37:7a:52:eb:11:d5:0a:ae:1f:
         40:ac:23:e2:ab:04:17:de:74:b6:ef:c5:d8:ab:ec:b2:fb:01:
         52:8f:05:ea:c5:c6:5c:14:0b:ed:73:8b:06:f7:b2:13:2a:e5:
         4c:73:f0:d9:a0:6a:bf:68:9c:cc:94:82:90:13:d2:aa:85:e1:
         ed:07:b4:32:2a:27:48:b4:71:4b:12:3c:33:f6:9b:7d:0c:c6:
         fc:20:a4:3b:f4:8b:26:ad:6c:bd:fa:0e:10:af:63:39:3e:46:
         5a:12:13:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbHHxAlcid48OpEbR6rxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTdjZDliNzg3MmExYzdhYTI2MmIzZmFkMWE5MDc2NTAy
NTI4MzIwHhcNMjUwNDEzMTMwMTM0WhcNMjUwNDE0MTMwMTM0WjAzMTEwLwYDVQQD
EygxZDM3MmNhMTdmYTY1OWU3MDQ3NzM2MjNmOWI5ZGQ3MmNmN2Q2YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTXqOwH105QzhlOqxWVDIIZGNiA1
YnwisfGvQbDTnIlwldgooMXhu/AA5dRddh/sRgmcwMbv1zC/PbqjxOjJZOta+DBd
5CGvl5KIZjtoCz1R4JKtqGFHG81i63DGFM6idC5ex8dXfEG1Iy94MUEqHFh4WGnS
tMWUzlTqe2FBYxXhJziNif4U6o9p7LfLp4pHoUft0jOfOs9FsgsOsOUVZNYqUPuq
wDO4MBJozDfJVuHvOuSzyc/l5apuXSQc8wM9wpQE6PmSIW/u8x24+b2o/VPcH2qx
CbElhzZNBkY7JElhA4ZlIVASZ2hEcLSZGybKE5LvxuVv/6qYaZPRgQWeWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB03LKF/plnnBHc2I/m53XLPfWqmMB8GA1UdIwQY
MBaAFNmnzZt4cqHHqiYrP60akHZQJSgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFmTm0zaHlvY2VxSmlzX3JScVFkbEFsS0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jMDZmMDktOTA3Mi00ZDU3LTliNjQt
ZDA1YmU4YzVhNGIxLzEvMmFmTm0zaHlvY2VxSmlzX3JScVFkbEFsS0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jMDZmMDktOTA3Mi00ZDU3LTliNjQtZDA1YmU4YzVhNGIx
LzEvMmFmTm0zaHlvY2VxSmlzX3JScVFkbEFsS0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzzyN1m2u
yxU3tP6SVQZS9j6JNSMmdBPHr4dEQW4K99bE+gY+B+H+SeCyGiX0YDbfQkhfu/bV
44BKvu2wIQmNb+UYrjZlSNRNKuIYvxe+VSTJigIBqiOId7AJSj7XzMoLINWvUvf/
oChL4HkpNr/D7oGZGuctiy9oYuUIV6cxOCG83dgC9c1DyXerGDekXflQ25KCPs5Y
WHFAN3pS6xHVCq4fQKwj4qsEF950tu/F2KvssvsBUo8F6sXGXBQL7XOLBveyEyrl
THPw2aBqv2iczJSCkBPSqoXh7Qe0MionSLRxSxI8M/abfQzG/CCkO/SLJq1svfoO
EK9jOT5GWhITNg==
-----END CERTIFICATE-----