Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File:                     DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier:          t6y7FrozW5cAs4DP1KmLCJqqjsbHNY66A+XBNBc2WzU=
Subject key identifier:   AA:C1:A3:EB:D5:A7:63:C5:0D:49:9C:16:28:61:18:2E:92:54:F6:C1
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer:       /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial:       01962F072D1E567DCF496D1EEE9FB850A5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: mncMHvg2id95m/f8H2ewwTkhitfBQlbva+GhzI+qcV4=)
                          2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2d:1e:56:7d:cf:49:6d:1e:ee:9f:b8:50:a5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=aac1a3ebd5a763c50d499c162861182e9254f6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:c4:4b:08:0f:4e:09:ab:be:67:b3:b9:b0:
                    d0:66:f6:49:d6:16:34:39:08:2a:48:a2:78:a3:10:
                    ce:ab:6a:96:18:4d:10:78:be:72:62:8c:12:a7:bd:
                    a4:b8:42:dc:36:a0:17:a6:49:a7:3a:3c:db:00:52:
                    2a:2c:8e:8b:e0:a3:82:cd:85:92:62:a8:34:80:75:
                    bd:4e:3c:70:db:f0:f8:91:c8:2c:4c:82:dc:db:95:
                    18:26:82:ab:35:51:d4:27:c4:da:e9:15:c2:41:c3:
                    17:8d:46:4b:54:c4:96:96:67:3c:76:f1:0d:f9:c4:
                    64:ca:2c:a0:44:ee:7a:21:29:95:7f:95:a9:d4:b4:
                    f7:05:cb:c1:65:d8:1f:b2:41:48:7e:71:5b:ef:20:
                    08:b6:49:35:fc:a7:6c:8b:4d:60:6e:73:d9:54:7d:
                    10:16:07:e0:7b:3e:eb:19:70:fb:d0:8b:e7:7f:d2:
                    68:1c:f8:32:c4:1b:70:48:27:4d:cb:f2:c2:8b:74:
                    5d:33:33:9b:e2:b6:da:d2:9d:01:a2:a7:55:cc:fe:
                    6b:1d:5b:af:48:9f:de:af:f8:90:c9:c3:b2:c7:60:
                    fd:c5:c0:d2:f7:17:bd:5e:c4:50:8a:69:43:b3:a2:
                    db:b1:76:0f:7b:f5:64:e3:e1:90:69:8c:e5:0d:2c:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:A3:EB:D5:A7:63:C5:0D:49:9C:16:28:61:18:2E:92:54:F6:C1
            X509v3 Authority Key Identifier:
                keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:d6:19:f6:14:85:dc:1a:fa:d2:99:4b:e9:de:ba:92:fc:
         93:e8:0e:0e:eb:2a:69:ff:3b:cf:68:a3:09:24:ca:f3:dd:0b:
         f8:df:3f:c4:c2:c5:6d:b6:96:85:84:16:ad:4e:55:00:21:72:
         47:67:d8:a6:da:11:04:52:ac:23:5e:f8:9c:cc:d5:7d:76:45:
         ab:c6:fa:59:72:52:b4:48:28:09:4b:93:b7:3f:62:7c:7b:b2:
         56:8a:cd:2e:25:aa:f0:e3:3b:b3:e9:5c:f4:4c:bc:1d:d9:10:
         63:53:8c:ef:67:41:d8:e7:d4:64:e0:60:58:b2:d0:0f:14:0f:
         e8:18:3b:7e:d7:56:41:31:63:77:52:d1:6c:f4:8d:ae:1c:07:
         e4:3b:99:e2:f7:69:cb:6c:0a:1a:14:b0:84:f0:e2:4c:3b:36:
         b4:2d:45:d8:e5:73:7a:a9:1a:77:ed:78:f2:90:8c:93:8a:23:
         b1:25:0b:52:23:31:33:51:ce:d9:f1:51:ca:ac:c4:31:8f:01:
         85:b0:8a:b7:f6:ca:5b:cd:ce:97:5f:a6:c8:f2:e5:18:88:d9:
         2f:36:f6:bf:a7:be:e6:c3:af:43:ee:50:8a:b1:31:4e:c5:e1:
         24:4f:79:27:87:11:12:19:b2:72:85:26:6d:c6:67:3c:a7:af:
         72:04:f7:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBy0eVn3PSW0e7p+4UKXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzIxNzIyNjFjOTUwOWU1NzM1MjEzN2JhMDE5MmE4NDg2
YjZmZGQwHhcNMjUwNDEzMTIwMjAxWhcNMjUwNDE0MTIwMjAxWjAzMTEwLwYDVQQD
EyhhYWMxYTNlYmQ1YTc2M2M1MGQ0OTljMTYyODYxMTgyZTkyNTRmNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmfESwgPTgmrvmezubDQZvZJ1hY0
OQgqSKJ4oxDOq2qWGE0QeL5yYowSp72kuELcNqAXpkmnOjzbAFIqLI6L4KOCzYWS
Yqg0gHW9Tjxw2/D4kcgsTILc25UYJoKrNVHUJ8Ta6RXCQcMXjUZLVMSWlmc8dvEN
+cRkyiygRO56ISmVf5Wp1LT3BcvBZdgfskFIfnFb7yAItkk1/Kdsi01gbnPZVH0Q
Fgfgez7rGXD70Ivnf9JoHPgyxBtwSCdNy/LCi3RdMzOb4rba0p0BoqdVzP5rHVuv
SJ/er/iQycOyx2D9xcDS9xe9XsRQimlDs6LbsXYPe/Vk4+GQaYzlDSym/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrBo+vVp2PFDUmcFihhGC6SVPbBMB8GA1UdIwQY
MBaAFA0yFyJhyVCeVzUhN7oBkqhIa2/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWIt
ZmU4NDg0ZjcwNzlkLzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWItZmU4NDg0ZjcwNzlk
LzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4nWGfYU
hdwa+tKZS+neupL8k+gODusqaf87z2ijCSTK890L+N8/xMLFbbaWhYQWrU5VACFy
R2fYptoRBFKsI174nMzVfXZFq8b6WXJStEgoCUuTtz9ifHuyVorNLiWq8OM7s+lc
9Ey8HdkQY1OM72dB2OfUZOBgWLLQDxQP6Bg7ftdWQTFjd1LRbPSNrhwH5DuZ4vdp
y2wKGhSwhPDiTDs2tC1F2OVzeqkad+148pCMk4ojsSULUiMxM1HO2fFRyqzEMY8B
hbCKt/bKW83Ol1+myPLlGIjZLzb2v6e+5sOvQ+5QirExTsXhJE95J4cREhmycoUm
bcZnPKevcgT33w==
-----END CERTIFICATE-----