Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File:                     PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier:          6eEw4xJh/PHOrFLxucQkmN+CmtFw415PA2qf1lzxk+E=
Subject key identifier:   D0:BF:90:B4:09:2D:BD:ED:D5:A2:91:E6:79:E5:16:28:97:88:15:BB
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer:       /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial:       01962F067F3502744F2297BBF6D8CC7907EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number:          0317
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: ym6FoDr3Zy/F/sV7V96ccO6EGQ900Pq6123hbASBgn0=)
                          2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7f:35:02:74:4f:22:97:bb:f6:d8:cc:79:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=d0bf90b4092dbdedd5a291e679e51628978815bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:6e:14:65:19:80:32:be:59:3f:d8:f0:09:
                    9e:04:20:27:e7:87:c4:e2:4e:8c:84:17:fb:1a:f8:
                    5b:a4:c3:0c:ba:cf:fc:6d:f0:b8:63:92:09:93:64:
                    2f:13:8e:c6:cf:19:ea:05:32:5d:d7:10:93:53:9e:
                    f0:23:6d:93:6c:44:ee:0e:e8:4c:4c:55:8f:fb:58:
                    0a:e8:3e:c9:d5:49:b7:15:53:3b:a5:11:64:1c:95:
                    ad:e8:ad:e1:9b:df:5c:f8:52:21:5b:8a:2e:a6:0f:
                    0f:09:7a:2a:25:28:27:7c:b6:07:c9:49:c3:07:4e:
                    9d:b4:aa:2d:60:f8:e8:bc:76:6e:ae:b8:d7:c7:35:
                    6a:aa:8b:65:11:b8:6d:63:66:65:a3:d7:89:ce:8e:
                    ab:46:38:22:f6:e1:34:b2:78:b6:07:48:18:cc:20:
                    9f:3e:c8:2e:23:36:5e:77:16:9b:04:5e:e3:11:97:
                    85:d5:7e:6f:4a:42:06:94:cb:b6:49:32:1f:e7:ff:
                    2d:c7:5f:63:38:55:a4:bf:60:11:bf:18:92:f1:a6:
                    c2:c0:14:81:b0:dd:8a:e2:d3:75:44:c9:08:1d:4b:
                    d9:6b:92:36:03:25:de:ff:07:19:a0:76:5d:a7:41:
                    97:63:e1:32:33:c1:8b:08:23:b1:3e:ce:63:04:d4:
                    4e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BF:90:B4:09:2D:BD:ED:D5:A2:91:E6:79:E5:16:28:97:88:15:BB
            X509v3 Authority Key Identifier:
                keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:53:6e:59:a6:19:1f:50:56:99:54:84:a0:b9:38:2e:79:
         b8:73:d3:76:34:c6:1d:54:8b:c7:69:99:12:45:ce:6e:5c:75:
         64:30:88:55:d5:88:cf:31:88:1d:94:50:45:d4:c8:4a:85:bd:
         d6:d6:3e:0a:d3:30:23:f8:05:56:41:57:66:77:7e:1e:ec:53:
         4d:0f:7d:94:6f:87:03:7e:b4:24:84:8b:e2:5d:30:34:b1:ab:
         8e:a3:c4:74:1e:b3:9e:1b:ce:96:4b:cb:51:7b:23:fd:63:08:
         76:8f:ed:d0:61:61:00:7b:71:d3:4a:03:8a:c5:ca:63:ec:ce:
         2a:fa:b3:2c:d9:fb:5e:0f:90:e3:4d:b9:a8:c4:2b:d0:7d:29:
         11:63:a0:f2:01:ba:bd:7c:de:fb:1d:fc:16:06:a2:d8:26:ff:
         4e:a5:28:75:cc:83:66:98:7c:6e:85:39:cc:6b:81:51:a8:3b:
         38:54:5c:39:35:f2:c1:c9:f7:de:8d:36:34:6d:16:5a:37:40:
         76:35:ef:c8:73:1b:35:9a:9d:f7:f2:7e:49:3d:1a:df:e6:37:
         8a:c7:39:aa:ef:a8:aa:ef:4c:02:0a:5e:81:f8:4b:fe:4b:a1:
         77:85:51:e7:27:75:89:47:87:fe:d2:9c:a6:63:32:41:a0:04:
         1c:90:3e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBn81AnRPIpe79tjMeQfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1
YTk3NWYwHhcNMjUwNDEzMTIwMTE3WhcNMjUwNDE0MTIwMTE3WjAzMTEwLwYDVQQD
EyhkMGJmOTBiNDA5MmRiZGVkZDVhMjkxZTY3OWU1MTYyODk3ODgxNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5BuFGUZgDK+WT/Y8AmeBCAn54fE
4k6MhBf7GvhbpMMMus/8bfC4Y5IJk2QvE47GzxnqBTJd1xCTU57wI22TbETuDuhM
TFWP+1gK6D7J1Um3FVM7pRFkHJWt6K3hm99c+FIhW4oupg8PCXoqJSgnfLYHyUnD
B06dtKotYPjovHZurrjXxzVqqotlEbhtY2Zlo9eJzo6rRjgi9uE0sni2B0gYzCCf
PsguIzZedxabBF7jEZeF1X5vSkIGlMu2STIf5/8tx19jOFWkv2ARvxiS8abCwBSB
sN2K4tN1RMkIHUvZa5I2AyXe/wcZoHZdp0GXY+EyM8GLCCOxPs5jBNROOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC/kLQJLb3t1aKR5nnlFiiXiBW7MB8GA1UdIwQY
MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt
MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi
LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbdTblmm
GR9QVplUhKC5OC55uHPTdjTGHVSLx2mZEkXOblx1ZDCIVdWIzzGIHZRQRdTISoW9
1tY+CtMwI/gFVkFXZnd+HuxTTQ99lG+HA360JISL4l0wNLGrjqPEdB6znhvOlkvL
UXsj/WMIdo/t0GFhAHtx00oDisXKY+zOKvqzLNn7Xg+Q4025qMQr0H0pEWOg8gG6
vXze+x38Fgai2Cb/TqUodcyDZph8boU5zGuBUag7OFRcOTXywcn33o02NG0WWjdA
djXvyHMbNZqd9/J+ST0a3+Y3isc5qu+oqu9MAgpegfhL/kuhd4VR5yd1iUeH/tKc
pmMyQaAEHJA+9g==
-----END CERTIFICATE-----