Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File:                     cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier:          z95LyLcWbeoho5WLQIxflgFdbMwgYsaahWuw2AVBEEc=
Subject key identifier:   E9:B1:17:7D:E9:DB:9B:60:BF:97:FF:50:EC:48:CF:84:8B:49:D2:F6
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer:       /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial:       01962F3D686251F815259388B2E2ED18518E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
                          2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: WJFcjeK7/soWRZzF8gmowHqxXifhgbt0AXFYGr9XkSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:68:62:51:f8:15:25:93:88:b2:e2:ed:18:51:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=e9b1177de9db9b60bf97ff50ec48cf848b49d2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:f2:4e:39:ba:bc:dc:5f:4a:07:ac:03:3f:
                    8a:ae:90:c5:80:53:47:d6:fc:11:47:ca:73:81:e6:
                    08:23:ab:6f:b2:5a:b3:14:62:12:6c:fd:a9:ae:26:
                    9a:73:79:02:b5:dc:eb:03:8c:3f:77:ff:e8:41:bc:
                    0c:d3:dc:60:aa:a9:9a:d2:43:7e:58:72:45:b9:46:
                    d3:8c:19:44:20:07:df:8f:c8:56:ca:13:29:5e:8d:
                    46:d0:6a:6f:d5:7d:a6:9d:6f:48:69:da:90:62:72:
                    b8:fd:2d:96:69:ff:8b:0b:6a:90:c2:68:1b:9b:3a:
                    6c:4a:69:ba:f0:83:d0:8e:35:55:fd:95:af:bf:57:
                    1b:33:a2:4e:14:23:4c:8b:13:9b:4c:aa:fe:dd:b1:
                    00:20:7b:a0:d0:c9:99:f9:1c:9c:00:89:88:7e:91:
                    94:07:f7:71:1b:40:aa:1f:eb:42:72:73:ea:ac:24:
                    5f:1c:89:83:7a:29:42:4f:79:50:55:1e:30:78:82:
                    19:da:e8:cb:bc:e1:7c:ad:36:f9:b6:81:0e:d3:4e:
                    dc:8d:f7:5b:38:0d:7f:53:28:da:3e:14:d6:a7:98:
                    36:37:4d:3e:3d:4c:8c:db:36:4c:52:3c:95:2e:76:
                    be:3a:ce:31:9c:c7:6c:80:22:e8:e9:81:1d:08:5f:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B1:17:7D:E9:DB:9B:60:BF:97:FF:50:EC:48:CF:84:8B:49:D2:F6
            X509v3 Authority Key Identifier:
                keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:68:a0:1f:34:49:00:d3:7e:e7:f0:0f:e0:29:4e:95:2c:f9:
         f3:cb:dd:9b:d6:fd:7f:5f:20:42:cb:6b:1c:83:50:ce:4b:60:
         b7:8c:c6:c7:b5:21:da:0c:18:62:21:8e:81:68:f7:42:4c:eb:
         f4:ce:03:52:18:79:7d:d5:bc:b3:33:33:01:f3:13:90:3a:4c:
         97:df:11:45:c8:de:e5:71:da:9d:bd:41:81:f1:ae:4f:28:ba:
         b0:b0:21:c5:6e:b3:8a:5b:21:54:ec:f2:8b:1b:1c:80:39:c2:
         8c:68:4a:8f:8c:8d:ed:7d:f8:10:3e:39:4c:d1:e0:2f:2d:80:
         e8:88:9e:14:d1:ca:3e:1a:f2:cd:19:35:6a:bc:80:2d:b8:44:
         e9:51:fe:19:5c:c9:e5:62:13:45:ea:f0:d7:79:85:75:25:2a:
         37:09:f0:5d:ac:13:9b:98:58:8d:ae:d9:b2:f0:7b:3b:6d:9c:
         a7:f6:6a:82:8e:b9:8d:42:ad:63:84:1f:6d:44:4b:92:17:d3:
         01:56:77:86:db:6a:ab:d0:1e:7d:e0:57:65:9e:15:c9:a4:3a:
         67:ca:d7:5c:f1:49:4c:e8:66:5a:09:36:87:cf:d6:b8:65:73:
         fa:14:21:c7:20:42:9a:7f:ea:dd:ae:b4:0b:ec:43:30:f4:9d:
         6e:6c:e0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWhiUfgVJZOIsuLtGFGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjg2MmRmZTBjMzQ4NzQxMjBkMmNjMTY5ZmMzMTQ0OTM4
ZWU4ZDkwHhcNMjUwNDEzMTMwMTE1WhcNMjUwNDE0MTMwMTE1WjAzMTEwLwYDVQQD
EyhlOWIxMTc3ZGU5ZGI5YjYwYmY5N2ZmNTBlYzQ4Y2Y4NDhiNDlkMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhPyTjm6vNxfSgesAz+KrpDFgFNH
1vwRR8pzgeYII6tvslqzFGISbP2priaac3kCtdzrA4w/d//oQbwM09xgqqma0kN+
WHJFuUbTjBlEIAffj8hWyhMpXo1G0Gpv1X2mnW9IadqQYnK4/S2Waf+LC2qQwmgb
mzpsSmm68IPQjjVV/ZWvv1cbM6JOFCNMixObTKr+3bEAIHug0MmZ+RycAImIfpGU
B/dxG0CqH+tCcnPqrCRfHImDeilCT3lQVR4weIIZ2ujLvOF8rTb5toEO007cjfdb
OA1/UyjaPhTWp5g2N00+PUyM2zZMUjyVLna+Os4xnMdsgCLo6YEdCF+hKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmxF33p25tgv5f/UOxIz4SLSdL2MB8GA1UdIwQY
MBaAFHL4Yt/gw0h0Eg0swWn8MUSTjujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEt
MjIwNzY0ZGMzNDVjLzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEtMjIwNzY0ZGMzNDVj
LzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGigHzRJ
ANN+5/AP4ClOlSz588vdm9b9f18gQstrHINQzktgt4zGx7Uh2gwYYiGOgWj3Qkzr
9M4DUhh5fdW8szMzAfMTkDpMl98RRcje5XHanb1BgfGuTyi6sLAhxW6zilshVOzy
ixscgDnCjGhKj4yN7X34ED45TNHgLy2A6IieFNHKPhryzRk1aryALbhE6VH+GVzJ
5WITRerw13mFdSUqNwnwXawTm5hYja7ZsvB7O22cp/Zqgo65jUKtY4QfbURLkhfT
AVZ3httqq9AefeBXZZ4VyaQ6Z8rXXPFJTOhmWgk2h8/WuGVz+hQhxyBCmn/q3a60
C+xDMPSdbmzgYw==
-----END CERTIFICATE-----