Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File:                     n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier:          J6lgzxdaWqNLAVgW2Jj707pX1jVDS5U0BK1Sc5XoW54=
Subject key identifier:   3F:CF:3E:E5:62:22:F8:1F:23:7E:D5:80:83:C9:84:EE:7A:49:9D:FF
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer:       /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial:       01962FAB473177FAD94504729A05AB4C409B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number:          0FB1
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: ii9qQrjuRaes2PlB3Ax+PLM5UYg32iosl7E1sOvhMmw=)
                          2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:47:31:77:fa:d9:45:04:72:9a:05:ab:4c:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=3fcf3ee56222f81f237ed58083c984ee7a499dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:bd:73:ce:28:70:19:bc:f1:8d:76:b7:4d:
                    ae:92:ff:ad:e6:a2:0c:17:38:5f:e1:c1:ca:95:7e:
                    1f:b1:c8:ba:91:fe:38:d5:d2:8e:e4:bb:c3:4f:8d:
                    f7:55:f9:d9:e8:7e:84:ee:fe:36:47:29:33:be:15:
                    38:13:b2:4b:7c:af:45:1a:7a:90:53:6b:f0:4e:08:
                    fb:24:33:84:f0:48:81:7b:c1:a6:e5:d8:a0:ea:fb:
                    cf:9a:8b:fd:98:69:f8:68:45:da:04:66:59:7b:ac:
                    d6:46:e6:6b:46:36:33:bd:4c:29:2e:e6:20:b4:b7:
                    4b:41:56:dd:dd:ed:45:f4:17:eb:ea:87:35:c0:e6:
                    02:38:27:ea:89:c1:41:0e:f6:1c:04:05:89:19:40:
                    ac:63:ac:d5:7d:73:61:6a:1c:1a:83:73:47:c3:ef:
                    17:d9:09:a5:e1:fb:e6:3b:94:d6:f1:2b:45:71:6f:
                    6f:e7:b0:ec:e4:71:b6:ee:96:63:be:25:cb:e7:b9:
                    25:66:50:b7:68:e0:e8:e0:77:03:e1:35:fc:b9:dc:
                    25:9f:2e:88:9c:61:f0:e8:23:35:dc:68:43:c4:42:
                    2d:70:eb:f8:dc:b8:4d:31:31:d9:78:fb:1f:bb:6b:
                    8e:7d:10:57:c9:c5:e6:fe:f3:9b:98:df:19:a5:d1:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:3E:E5:62:22:F8:1F:23:7E:D5:80:83:C9:84:EE:7A:49:9D:FF
            X509v3 Authority Key Identifier:
                keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7d:94:ac:47:be:91:f1:e3:33:60:6a:13:20:a7:ff:7b:a1:
         1c:d2:3b:c5:40:f3:20:c7:b3:61:78:4c:af:9f:a5:07:a7:ad:
         47:6d:51:e3:5f:a4:57:8b:6f:f8:33:47:aa:00:a0:72:14:2a:
         b0:32:50:51:1e:6a:2e:59:8d:3e:53:c9:37:b1:73:18:0a:90:
         a5:1f:d4:05:20:a6:fc:75:d9:08:dc:64:0a:4a:c4:9e:97:c0:
         68:0d:76:0f:dc:7a:36:cd:ac:a3:35:9d:be:6a:38:b2:b5:3d:
         68:e5:02:9b:34:db:79:58:82:e5:b0:e2:7c:02:d2:ba:44:3d:
         d5:42:ae:3c:57:c5:d4:2a:f0:dc:eb:8d:6b:d4:d2:7d:5f:f2:
         b9:e9:d1:0a:d1:72:d0:33:bf:d7:b3:96:3a:a3:51:46:bc:51:
         e9:ac:de:f3:3c:49:d9:e5:0b:95:bd:a0:ec:e0:bf:17:b5:a5:
         75:ba:d2:a7:14:b3:b4:2c:d5:f9:58:db:c1:9e:85:1c:24:da:
         e2:eb:e9:97:5e:12:cb:c8:1a:e3:00:fc:93:f1:07:5f:b7:6a:
         97:da:06:ad:8b:39:a8:2a:0b:7a:a4:22:b4:6e:ab:73:c1:89:
         7a:a6:8f:07:9b:42:6d:e7:46:1e:8d:a0:f7:d0:06:28:ec:2a:
         f6:5c:a9:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0cxd/rZRQRymgWrTECbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4
NmI0NDIwHhcNMjUwNDEzMTUwMTE2WhcNMjUwNDE0MTUwMTE2WjAzMTEwLwYDVQQD
EygzZmNmM2VlNTYyMjJmODFmMjM3ZWQ1ODA4M2M5ODRlZTdhNDk5ZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzte9c84ocBm88Y12t02ukv+t5qIM
Fzhf4cHKlX4fsci6kf441dKO5LvDT433VfnZ6H6E7v42RykzvhU4E7JLfK9FGnqQ
U2vwTgj7JDOE8EiBe8Gm5dig6vvPmov9mGn4aEXaBGZZe6zWRuZrRjYzvUwpLuYg
tLdLQVbd3e1F9Bfr6oc1wOYCOCfqicFBDvYcBAWJGUCsY6zVfXNhahwag3NHw+8X
2Qml4fvmO5TW8StFcW9v57Ds5HG27pZjviXL57klZlC3aODo4HcD4TX8udwlny6I
nGHw6CM13GhDxEItcOv43LhNMTHZePsfu2uOfRBXycXm/vObmN8ZpdF6uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/PPuViIvgfI37VgIPJhO56SZ3/MB8GA1UdIwQY
MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt
NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5
LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX2UrEe+
kfHjM2BqEyCn/3uhHNI7xUDzIMezYXhMr5+lB6etR21R41+kV4tv+DNHqgCgchQq
sDJQUR5qLlmNPlPJN7FzGAqQpR/UBSCm/HXZCNxkCkrEnpfAaA12D9x6Ns2sozWd
vmo4srU9aOUCmzTbeViC5bDifALSukQ91UKuPFfF1Crw3OuNa9TSfV/yuenRCtFy
0DO/17OWOqNRRrxR6aze8zxJ2eULlb2g7OC/F7WldbrSpxSztCzV+VjbwZ6FHCTa
4uvpl14Sy8ga4wD8k/EHX7dql9oGrYs5qCoLeqQitG6rc8GJeqaPB5tCbedGHo2g
99AGKOwq9lypRg==
-----END CERTIFICATE-----