Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
File:                     dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft (raw, json)
Hash identifier:          NvLgI0eprsjUfQ+dBW8rjYJ7Pkf0nTwDzKsXvMlAEok=
Subject key identifier:   07:F1:C9:2D:5D:83:D7:5A:94:1F:AB:BF:EF:DD:25:F0:09:28:16:95
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Certificate issuer:       /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial:       01962ECFDBE2CCF9F4FFFB7179E6830D0BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
Manifest number:          03A4
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl (hash: VY/3xEa0kNaM9pUb38f9bEq8QlDuPL1Y59pUDAEzto4=)
                          2: zEiKY5IhiMFoe5zY89Uyt22u_qk.roa (hash: N/8LUTyZXsuNqPJSa00eDqkeGKTS4QmoFy1WgcFflgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:e2:cc:f9:f4:ff:fb:71:79:e6:83:0d:0b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=07f1c92d5d83d75a941fabbfefdd25f009281695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:32:88:10:74:39:55:0b:9d:6a:b8:78:5b:
                    6a:af:cb:8b:e2:0c:f5:7d:5e:f1:0d:39:87:04:a0:
                    09:22:19:2e:e5:a5:48:c4:81:36:85:e8:f3:94:9f:
                    ea:b8:d5:c4:99:08:e1:ae:4c:a4:0a:0d:ab:bd:b5:
                    ad:97:af:78:c8:cb:18:3d:66:70:dd:f5:af:24:a5:
                    c4:9e:ee:29:ca:13:ad:8d:6b:78:b1:f1:b9:c7:ca:
                    28:81:b0:04:2f:ee:75:38:8b:46:c0:0d:ca:1f:73:
                    09:19:2a:de:9d:05:e0:6b:0e:30:9a:43:a0:84:d2:
                    a6:8a:6e:5a:9c:5b:42:a5:a8:1d:ac:68:96:df:7f:
                    24:ea:ab:af:3f:de:ec:08:05:b1:81:e6:08:10:6a:
                    12:67:9b:5b:49:bf:6c:23:f5:fe:20:4a:2f:e2:b1:
                    3c:3d:db:3d:59:b4:fa:6e:e3:54:3e:99:cd:c2:6c:
                    1e:06:25:74:f7:7d:e1:77:d3:2e:06:23:08:da:a9:
                    32:a6:58:2c:8a:f2:75:5d:bf:09:59:b7:28:6d:b8:
                    bd:42:ad:65:34:bc:92:b0:06:b0:9d:12:7b:ae:07:
                    59:35:dd:ff:cb:4e:34:d5:96:f3:55:38:05:bc:5e:
                    1e:90:1d:2e:2f:71:98:90:11:bd:4f:38:7b:4f:6b:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F1:C9:2D:5D:83:D7:5A:94:1F:AB:BF:EF:DD:25:F0:09:28:16:95
            X509v3 Authority Key Identifier:
                keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b1:dc:40:65:82:bb:f9:e5:af:ec:8d:01:84:40:a0:01:16:
         87:5b:fc:9d:1f:c7:4a:82:0f:43:c8:05:70:9c:44:ac:6f:d2:
         1b:f8:a9:d4:5d:63:d5:be:9d:16:39:25:59:64:4d:42:b6:5f:
         c1:b9:e6:ca:6a:17:75:3e:e2:81:38:7f:70:13:4a:0b:2a:eb:
         bb:f9:92:a6:f3:2b:41:7b:4d:82:01:68:52:55:14:cb:e7:bf:
         aa:87:e6:3f:06:4b:f3:3d:1f:99:9f:fd:d9:15:f2:33:2a:fd:
         d4:28:e2:84:a6:88:44:55:6a:2f:35:64:33:20:a4:79:a9:81:
         4f:27:fb:22:b7:52:07:bd:cc:85:a2:ae:c7:14:7d:a0:51:d2:
         bb:71:28:78:4e:b8:22:60:b3:5d:c3:2a:50:7a:09:10:61:c9:
         3f:71:6f:0b:fd:cc:82:08:0f:81:f7:c5:11:88:8f:c1:4a:7d:
         64:87:93:a5:b9:f6:71:b7:ef:aa:4a:35:05:d3:ad:fd:b0:32:
         6f:8f:d6:89:c1:5f:74:bf:58:f7:fd:13:9f:f2:f1:5a:4e:90:
         a2:2f:45:d7:82:1c:be:31:ac:a5:8e:c8:03:fb:bc:e2:05:85:
         1b:f6:dc:ea:50:35:8d:7d:d3:d0:fa:be:1e:8e:55:a2:13:8a:
         27:61:5f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9vizPn0//txeeaDDQvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTcyMTFmOGE2NjU2MWI1NzcwZmYxOWI0NzFhZWY1MTFl
ODM3NzgwHhcNMjUwNDEzMTEwMTM2WhcNMjUwNDE0MTEwMTM2WjAzMTEwLwYDVQQD
EygwN2YxYzkyZDVkODNkNzVhOTQxZmFiYmZlZmRkMjVmMDA5MjgxNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62AyiBB0OVULnWq4eFtqr8uL4gz1
fV7xDTmHBKAJIhku5aVIxIE2hejzlJ/quNXEmQjhrkykCg2rvbWtl694yMsYPWZw
3fWvJKXEnu4pyhOtjWt4sfG5x8oogbAEL+51OItGwA3KH3MJGSrenQXgaw4wmkOg
hNKmim5anFtCpagdrGiW338k6quvP97sCAWxgeYIEGoSZ5tbSb9sI/X+IEov4rE8
Pds9WbT6buNUPpnNwmweBiV0933hd9MuBiMI2qkyplgsivJ1Xb8JWbcobbi9Qq1l
NLySsAawnRJ7rgdZNd3/y0401ZbzVTgFvF4ekB0uL3GYkBG9Tzh7T2uQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfxyS1dg9dalB+rv+/dJfAJKBaVMB8GA1UdIwQY
MBaAFHZXIR+KZlYbV3D/GbRxrvUR6Dd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDkt
NzQzMWQ2ODlhOGU4LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDktNzQzMWQ2ODlhOGU4
LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7HcQGWC
u/nlr+yNAYRAoAEWh1v8nR/HSoIPQ8gFcJxErG/SG/ip1F1j1b6dFjklWWRNQrZf
wbnmymoXdT7igTh/cBNKCyrru/mSpvMrQXtNggFoUlUUy+e/qofmPwZL8z0fmZ/9
2RXyMyr91CjihKaIRFVqLzVkMyCkeamBTyf7IrdSB73MhaKuxxR9oFHSu3EoeE64
ImCzXcMqUHoJEGHJP3FvC/3MgggPgffFEYiPwUp9ZIeTpbn2cbfvqko1BdOt/bAy
b4/WicFfdL9Y9/0Tn/LxWk6Qoi9F14IcvjGspY7IA/u84gWFG/bc6lA1jX3T0Pq+
Ho5VohOKJ2FfrA==
-----END CERTIFICATE-----