Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          QIi6IGTKre42AIzcEIUXTjk3/4nIaXisy0ZOrT3HYbU=
Subject key identifier:   76:B3:DB:A3:16:41:17:D3:EB:AB:5B:93:8D:22:8C:79:C9:87:6D:55
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       01962FABA55D8F8F0DB4EEAE0AAA375D5390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          096B
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: UdM26xpaT/V077WlCvjlKLhLkwUJIO4OdfeT5RazbUo=)
                          2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a5:5d:8f:8f:0d:b4:ee:ae:0a:aa:37:5d:53:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=76b3dba3164117d3ebab5b938d228c79c9876d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:41:b3:89:4b:f0:91:5b:c1:3e:68:7e:56:
                    d4:26:4f:3c:b0:5f:61:b4:d2:d5:33:20:6e:4b:5a:
                    81:c6:ce:1a:ea:4c:76:9f:0f:c9:c1:5b:fb:78:63:
                    b3:3f:96:aa:57:43:0e:c3:8b:96:16:29:d5:b0:99:
                    3a:20:a1:41:ce:33:86:35:58:6c:6e:af:1f:62:93:
                    f3:60:3d:ff:43:d3:d9:85:1c:ee:5e:c9:de:3e:1e:
                    b1:76:17:26:3c:30:d0:14:71:80:30:21:73:e4:0a:
                    03:20:e0:b4:83:9f:13:4b:6f:fe:10:42:94:ef:09:
                    01:9a:5d:49:b9:f1:bb:a6:16:cd:66:46:80:c3:a0:
                    b9:1a:e6:c9:a7:be:15:0f:5f:95:cf:24:e4:b6:2b:
                    8b:ff:44:e1:7d:90:47:9d:31:17:00:bf:e4:29:c9:
                    f2:10:08:ab:8d:0f:d5:5a:b3:af:fe:54:15:6e:fe:
                    cd:b6:3d:81:45:f8:84:51:96:b1:30:d4:bc:ee:45:
                    e2:63:b1:57:33:84:ee:30:26:7c:c1:65:fb:eb:42:
                    62:26:4b:7e:b1:93:7b:16:c2:b7:e6:b0:44:d3:9e:
                    33:7a:96:ce:43:67:10:56:97:f1:a9:2c:26:4f:93:
                    e7:24:a1:77:a0:c8:91:49:33:40:f4:c4:38:5e:37:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:DB:A3:16:41:17:D3:EB:AB:5B:93:8D:22:8C:79:C9:87:6D:55
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:df:8a:43:97:c3:34:08:72:01:68:4f:01:be:8e:a9:9d:64:
         75:1c:86:09:70:11:1b:3e:1b:6f:bb:83:8f:97:b5:91:75:c9:
         d8:b7:41:1d:81:a0:af:66:ed:76:2e:5a:ec:5a:ea:53:e1:4c:
         df:de:8e:a1:42:7d:9c:ac:34:81:6c:63:26:21:29:3d:92:87:
         1e:ad:ae:3c:f4:56:d0:f6:95:15:41:f0:c4:0e:cc:e7:8d:3d:
         fd:b9:20:80:c1:01:bd:87:35:22:c6:43:6c:63:e7:8a:ab:7c:
         e7:82:1b:72:bb:97:22:6d:2c:01:1a:4e:80:fe:0e:1e:15:46:
         fb:f2:6f:00:fa:d8:2e:c1:a0:81:b9:28:ba:e1:b9:5f:56:4e:
         d3:ba:26:a0:d8:cd:59:49:43:7f:30:4d:07:0f:3e:69:e7:f6:
         63:58:ec:ba:81:12:b7:63:29:c2:16:22:21:e1:54:6b:76:49:
         af:1c:51:9e:67:8e:f8:f7:c2:ba:ab:c4:cf:4d:5e:58:18:0a:
         29:ea:2f:a6:e6:17:57:bf:b7:77:56:41:b6:e9:30:8f:14:66:
         03:e5:39:67:8a:04:4e:5e:39:9b:d8:92:13:5a:ba:5e:03:42:
         cf:1c:26:64:2e:e9:94:c8:55:f6:5c:8e:14:95:b6:b1:10:57:
         a4:de:a3:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6Vdj48NtO6uCqo3XVOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0
YTk0YWUwHhcNMjUwNDEzMTUwMTQwWhcNMjUwNDE0MTUwMTQwWjAzMTEwLwYDVQQD
Eyg3NmIzZGJhMzE2NDExN2QzZWJhYjViOTM4ZDIyOGM3OWM5ODc2ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvNBs4lL8JFbwT5oflbUJk88sF9h
tNLVMyBuS1qBxs4a6kx2nw/JwVv7eGOzP5aqV0MOw4uWFinVsJk6IKFBzjOGNVhs
bq8fYpPzYD3/Q9PZhRzuXsnePh6xdhcmPDDQFHGAMCFz5AoDIOC0g58TS2/+EEKU
7wkBml1JufG7phbNZkaAw6C5GubJp74VD1+VzyTktiuL/0ThfZBHnTEXAL/kKcny
EAirjQ/VWrOv/lQVbv7Ntj2BRfiEUZaxMNS87kXiY7FXM4TuMCZ8wWX760JiJkt+
sZN7FsK35rBE054zepbOQ2cQVpfxqSwmT5PnJKF3oMiRSTNA9MQ4Xjd/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaz26MWQRfT66tbk40ijHnJh21VMB8GA1UdIwQY
MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt
MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj
LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN+KQ5fD
NAhyAWhPAb6OqZ1kdRyGCXARGz4bb7uDj5e1kXXJ2LdBHYGgr2btdi5a7FrqU+FM
396OoUJ9nKw0gWxjJiEpPZKHHq2uPPRW0PaVFUHwxA7M5409/bkggMEBvYc1IsZD
bGPniqt854IbcruXIm0sARpOgP4OHhVG+/JvAPrYLsGggbkouuG5X1ZO07omoNjN
WUlDfzBNBw8+aef2Y1jsuoESt2MpwhYiIeFUa3ZJrxxRnmeO+PfCuqvEz01eWBgK
KeovpuYXV7+3d1ZBtukwjxRmA+U5Z4oETl45m9iSE1q6XgNCzxwmZC7plMhV9lyO
FJW2sRBXpN6j6g==
-----END CERTIFICATE-----