Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File:                     3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier:          CQGL0gn2JuZ4aPkF/pF0NFv7hrvSppS5+FDogpBqnR4=
Subject key identifier:   E8:3C:E7:46:7E:5A:0C:07:72:10:60:76:88:8E:C2:2C:ED:59:F5:50
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer:       /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial:       01962E61EFBC0379A5D446FFB157072E1E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: aiSduMJCwup0Mg6IXF9cGHEXhD6VM+obgrdEyMFImdo=)
                          2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
                          3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ef:bc:03:79:a5:d4:46:ff:b1:57:07:2e:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=e83ce7467e5a0c0772106076888ec22ced59f550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:73:bb:10:01:b7:13:ca:1c:18:c5:d9:0b:
                    1f:9d:74:9e:18:53:a4:6c:36:f7:5e:97:9e:14:97:
                    3d:15:e8:61:4f:6a:41:6e:66:5e:ab:1a:f4:a0:c6:
                    df:e5:6b:6c:c2:60:db:15:9f:dd:05:cd:e7:73:49:
                    83:2b:35:29:b9:f2:12:11:f9:90:5b:8f:45:14:12:
                    a4:2d:a4:ac:51:ac:a6:78:cc:0f:c0:17:68:80:b7:
                    74:07:ac:29:eb:2d:67:c1:2e:6b:04:d3:95:34:27:
                    ae:c2:ee:1f:e8:ba:67:ea:3c:4c:ec:e4:01:3b:5a:
                    9c:9a:35:d8:d5:92:5e:8f:68:d9:28:65:45:1c:3f:
                    02:64:1a:28:f3:a7:6d:52:9b:48:14:2a:fa:f5:3e:
                    ef:e9:53:55:48:41:f6:e5:e0:54:5c:1a:2d:9e:57:
                    81:05:96:6c:37:e4:fa:5d:af:fa:b7:20:5b:55:43:
                    e9:3d:d7:13:8b:ff:5a:bb:eb:4f:22:a1:aa:7f:7a:
                    7b:c2:11:04:95:5a:8a:35:1f:fe:f3:1d:e6:f4:91:
                    fc:34:fb:f8:6a:21:d3:fb:92:03:e2:e9:f2:de:e9:
                    1d:83:b8:9f:bc:34:d0:b7:a5:c1:50:14:e6:d1:4d:
                    e9:ca:07:d1:b7:99:ac:62:3a:03:cf:03:54:63:5b:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:E7:46:7E:5A:0C:07:72:10:60:76:88:8E:C2:2C:ED:59:F5:50
            X509v3 Authority Key Identifier:
                keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:3a:ba:e9:84:d7:a8:5d:73:bb:f0:50:27:3f:d5:e5:db:
         7e:17:cd:c2:2e:92:6e:b0:dc:cd:ae:e3:df:c2:6a:95:6f:83:
         de:c9:86:93:00:7b:8d:1a:0f:64:c4:d5:72:e2:47:27:a6:88:
         68:70:21:3b:6a:ca:0f:95:72:be:e3:a3:fc:27:0d:7d:6c:77:
         fc:60:73:ae:4a:88:18:05:fb:8a:87:b4:86:8e:d7:9e:11:c6:
         8c:88:3d:a3:77:89:d1:a6:82:03:49:84:8b:0a:ba:23:2e:9d:
         46:05:7f:9e:94:bc:51:ba:d6:ac:8f:63:13:c2:a9:22:74:16:
         aa:84:4d:56:4c:a6:52:76:bc:30:cc:b0:fb:21:76:14:4b:bb:
         74:c9:f6:46:a5:79:a6:2c:b3:db:1f:59:70:ef:25:69:b4:2c:
         fc:9c:ef:55:3e:b8:ef:42:ed:72:b2:a8:ef:0f:49:1c:cd:0f:
         3b:0c:78:2a:79:16:b9:c5:83:e6:51:84:32:65:f2:3c:06:d4:
         d5:7e:a5:29:14:1b:b8:db:4e:97:b9:17:61:a3:1b:9f:14:32:
         b8:c9:c4:9f:af:53:33:3a:57:62:63:42:7d:c8:c1:fe:00:e2:
         e9:df:55:13:71:bc:21:33:83:c4:ba:4b:fa:ef:11:7d:f8:81:
         07:0c:49:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYe+8A3ml1Eb/sVcHLh54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2
ZGJkZWYwHhcNMjUwNDEzMDkwMTMyWhcNMjUwNDE0MDkwMTMyWjAzMTEwLwYDVQQD
EyhlODNjZTc0NjdlNWEwYzA3NzIxMDYwNzY4ODhlYzIyY2VkNTlmNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygpzuxABtxPKHBjF2QsfnXSeGFOk
bDb3XpeeFJc9FehhT2pBbmZeqxr0oMbf5WtswmDbFZ/dBc3nc0mDKzUpufISEfmQ
W49FFBKkLaSsUaymeMwPwBdogLd0B6wp6y1nwS5rBNOVNCeuwu4f6Lpn6jxM7OQB
O1qcmjXY1ZJej2jZKGVFHD8CZBoo86dtUptIFCr69T7v6VNVSEH25eBUXBotnleB
BZZsN+T6Xa/6tyBbVUPpPdcTi/9au+tPIqGqf3p7whEElVqKNR/+8x3m9JH8NPv4
aiHT+5ID4uny3ukdg7ifvDTQt6XBUBTm0U3pygfRt5msYjoDzwNUY1uX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg850Z+WgwHchBgdoiOwiztWfVQMB8GA1UdIwQY
MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct
ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5
LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwo6uumE
16hdc7vwUCc/1eXbfhfNwi6SbrDcza7j38JqlW+D3smGkwB7jRoPZMTVcuJHJ6aI
aHAhO2rKD5VyvuOj/CcNfWx3/GBzrkqIGAX7ioe0ho7XnhHGjIg9o3eJ0aaCA0mE
iwq6Iy6dRgV/npS8UbrWrI9jE8KpInQWqoRNVkymUna8MMyw+yF2FEu7dMn2RqV5
piyz2x9ZcO8labQs/JzvVT6470LtcrKo7w9JHM0POwx4KnkWucWD5lGEMmXyPAbU
1X6lKRQbuNtOl7kXYaMbnxQyuMnEn69TMzpXYmNCfcjB/gDi6d9VE3G8ITODxLpL
+u8RffiBBwxJRw==
-----END CERTIFICATE-----