Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File:                     0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier:          WsIVTnMe1uus7P7DuF9bX4sCAuSYXbezki7OMMG2xAQ=
Subject key identifier:   86:B9:F9:70:14:82:C6:6D:70:F2:A1:13:B8:36:C7:85:85:4D:9C:23
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer:       /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial:       01962F06BAF639E3350209FA9CCABEF1F5E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number:          0942
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: 9fg5uMQYpuXfLZ8XIgc7NZlDnmBXDZ/p4LI69hqq9IU=)
                          2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:f6:39:e3:35:02:09:fa:9c:ca:be:f1:f5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=86b9f9701482c66d70f2a113b836c785854d9c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:6a:9b:f3:18:1d:ba:c0:3b:8d:d7:59:b6:
                    85:67:9b:b2:51:4c:76:ef:85:04:58:cb:56:fe:de:
                    d5:83:14:50:f7:09:bd:5e:61:d3:ca:1a:24:3b:d7:
                    ed:0b:bd:50:ad:66:b6:dd:55:60:c8:49:fe:87:fc:
                    28:b8:8f:59:e6:ff:c9:87:70:5e:2f:d5:3b:19:e1:
                    cd:00:8f:4c:e9:98:e7:f0:72:62:a6:8a:52:f8:49:
                    20:82:8f:67:56:53:40:8a:db:be:39:8a:af:29:ae:
                    ae:fd:14:75:b1:bd:32:cf:8a:97:24:a6:09:c7:5f:
                    b3:db:1b:93:31:0d:2c:44:35:fd:f3:bf:17:ee:9f:
                    1e:9c:64:c6:10:82:e3:c8:ad:2f:99:b6:28:c7:1c:
                    a6:91:73:7f:ea:3d:06:2c:c1:e3:eb:64:92:5a:19:
                    d0:f4:41:ce:e6:4c:31:2f:46:0c:33:c5:74:13:22:
                    97:b7:00:45:f0:de:3b:5a:d9:cd:ff:d6:1a:d5:1e:
                    c3:09:4b:8c:59:d3:79:37:d2:de:79:2b:d9:ce:00:
                    c0:44:52:19:91:0a:3f:bf:7a:9e:a7:5a:6d:b9:83:
                    65:99:48:e1:dd:cc:1a:df:7d:f2:6e:80:d5:a0:51:
                    21:bd:43:48:b3:df:32:23:b7:94:8c:09:c2:04:3a:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B9:F9:70:14:82:C6:6D:70:F2:A1:13:B8:36:C7:85:85:4D:9C:23
            X509v3 Authority Key Identifier:
                keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:94:59:56:3c:ca:43:9e:fd:cd:36:bc:f5:1c:54:6e:87:
         89:46:b6:77:6e:f5:ed:80:d5:43:36:1d:9f:16:e4:04:45:b0:
         46:bd:c7:40:7d:b6:99:76:33:ab:38:39:85:4b:1b:65:50:74:
         82:82:d5:cd:66:b4:a0:26:ed:06:c6:fb:43:6d:f3:73:85:03:
         da:4b:d1:3e:58:94:93:7c:16:b8:fe:f9:b9:53:a1:ed:54:3b:
         be:ff:b0:4a:8e:d4:b7:d4:6a:d0:d8:88:4d:32:4c:80:bc:a2:
         5f:5a:05:3c:4a:3d:a8:fa:0b:ba:ca:a0:a2:ff:95:d2:63:d0:
         9e:5c:e3:3e:1c:82:ef:d9:5d:ad:37:18:c6:bd:1d:b4:0e:d6:
         b0:ab:7e:b2:a8:21:1e:45:d5:fa:d2:33:71:66:78:9b:e8:19:
         ef:5a:a9:d5:43:cd:33:4c:e5:16:a3:f6:a4:72:96:27:7d:b9:
         ff:af:20:5d:0b:f5:c9:dd:82:b1:70:b2:c1:b5:ca:f8:37:a2:
         5e:6c:4a:4c:4d:0b:d8:df:5e:42:65:52:0c:3d:77:b0:f8:91:
         97:4c:ec:3c:2e:93:0c:9e:d0:51:60:c4:9c:b0:0e:c7:a5:e3:
         98:37:40:b0:eb:92:b7:1e:7a:d1:7a:85:a8:cf:96:f0:89:18:
         67:f2:93:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrr2OeM1Agn6nMq+8fXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGNlODcwZTQ3M2MzNTQyNzNlODljNWU0ZTJlZDNlMGMw
NjkzNTYwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
Eyg4NmI5Zjk3MDE0ODJjNjZkNzBmMmExMTNiODM2Yzc4NTg1NGQ5YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK9qm/MYHbrAO43XWbaFZ5uyUUx2
74UEWMtW/t7VgxRQ9wm9XmHTyhokO9ftC71QrWa23VVgyEn+h/wouI9Z5v/Jh3Be
L9U7GeHNAI9M6Zjn8HJipopS+Ekggo9nVlNAitu+OYqvKa6u/RR1sb0yz4qXJKYJ
x1+z2xuTMQ0sRDX9878X7p8enGTGEILjyK0vmbYoxxymkXN/6j0GLMHj62SSWhnQ
9EHO5kwxL0YMM8V0EyKXtwBF8N47WtnN/9Ya1R7DCUuMWdN5N9LeeSvZzgDARFIZ
kQo/v3qep1ptuYNlmUjh3cwa333yboDVoFEhvUNIs98yI7eUjAnCBDo4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa5+XAUgsZtcPKhE7g2x4WFTZwjMB8GA1UdIwQY
MBaAFNLc6HDkc8NUJz6JxeTi7T4MBpNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAt
MzJkODBkOGQxNjE1LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAtMzJkODBkOGQxNjE1
LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbyUWVY8
ykOe/c02vPUcVG6HiUa2d2717YDVQzYdnxbkBEWwRr3HQH22mXYzqzg5hUsbZVB0
goLVzWa0oCbtBsb7Q23zc4UD2kvRPliUk3wWuP75uVOh7VQ7vv+wSo7Ut9Rq0NiI
TTJMgLyiX1oFPEo9qPoLusqgov+V0mPQnlzjPhyC79ldrTcYxr0dtA7WsKt+sqgh
HkXV+tIzcWZ4m+gZ71qp1UPNM0zlFqP2pHKWJ325/68gXQv1yd2CsXCywbXK+Dei
XmxKTE0L2N9eQmVSDD13sPiRl0zsPC6TDJ7QUWDEnLAOx6XjmDdAsOuStx560XqF
qM+W8IkYZ/KTAQ==
-----END CERTIFICATE-----