Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          xmEB1rGDVEhPcVLzV/a9fmK+O1ITtNWGPcSQkfwUXcQ=
Subject key identifier:   CB:7B:9E:47:7E:DE:E9:82:0C:D3:DC:1F:6E:63:34:7C:F8:A6:4A:50
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       01962E988B6BE72062207B9099C1949A9FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          13EE
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=)
                          2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: LgeDTpEF9OeMJ7vCz+pa1wxFN9mbfJZMP+J025FyFF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8b:6b:e7:20:62:20:7b:90:99:c1:94:9a:9f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=cb7b9e477edee9820cd3dc1f6e63347cf8a64a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:d1:fa:8c:df:6b:70:71:bd:93:11:aa:60:
                    6a:14:4f:91:a1:2f:17:d0:b9:5f:44:de:32:af:fc:
                    8d:3b:98:0e:56:bf:87:e0:0b:e9:75:56:14:e1:f2:
                    99:8e:03:af:53:81:c1:18:a8:02:b8:ee:1b:d9:05:
                    88:4d:8a:ec:5e:10:2c:a5:6e:ac:84:33:a5:c4:24:
                    76:db:34:ac:a5:d3:42:78:e0:e6:4b:05:ac:00:a6:
                    1e:ca:9a:a5:d7:7b:ee:2d:53:ff:33:69:74:3f:9a:
                    a8:22:de:d6:ee:76:ee:fb:a5:a6:ed:d5:d9:b1:f1:
                    f5:60:ec:cc:64:c3:ff:24:bb:fc:05:b2:25:14:dc:
                    ba:b6:c5:ee:d0:26:d5:7e:68:ca:ae:b4:67:eb:fe:
                    df:77:fe:1e:c7:4d:49:da:5b:06:45:64:ff:d0:b1:
                    ac:c2:32:a6:89:ae:4f:f7:fa:c0:ab:70:f2:f7:77:
                    31:c5:b0:1e:44:51:cb:f5:f2:70:19:99:c6:28:cd:
                    80:5b:e7:43:e8:eb:54:5c:76:ca:68:e0:7a:39:98:
                    24:1c:5b:ef:ee:1b:10:ba:64:cb:26:e2:47:c0:83:
                    a6:62:02:2d:d3:94:c6:de:ab:ce:e3:41:d1:23:e9:
                    90:9e:47:c9:16:07:b7:bc:ab:ab:7e:b2:cd:cb:b0:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7B:9E:47:7E:DE:E9:82:0C:D3:DC:1F:6E:63:34:7C:F8:A6:4A:50
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:eb:6f:f0:ac:2d:a9:68:a6:dd:6f:ae:66:a6:1b:1d:5d:2e:
         d9:36:8c:27:be:cb:6f:e4:ce:3b:28:35:84:2a:b4:29:08:2e:
         29:d7:81:59:fd:c4:0c:e9:d9:1f:03:55:bb:78:06:60:4b:07:
         cb:6c:fa:85:71:fb:a2:43:b9:e0:92:0d:ac:98:42:d8:d9:6f:
         ab:e4:a6:20:ed:90:24:da:b6:0e:c7:34:2e:09:d2:53:bd:07:
         c5:67:30:02:6f:c6:2c:b7:ba:17:38:98:b7:a3:02:bc:88:58:
         d4:42:23:6e:7a:67:56:50:09:6b:19:e9:e1:28:be:99:69:34:
         55:1f:c7:9d:07:6f:44:ec:21:f3:88:f0:75:6e:ff:54:65:a5:
         ba:87:54:df:1c:87:3f:e0:b5:88:41:3b:1f:e1:53:70:4f:b2:
         34:06:a9:33:92:49:a8:85:5b:13:7b:cc:51:0f:22:bb:db:2a:
         50:df:82:df:8e:0e:c9:7d:7f:fc:14:95:6a:ff:22:ef:10:67:
         d4:46:4c:0b:a4:ed:e7:45:7f:c3:82:7a:42:2b:aa:55:44:b0:
         2f:f4:f7:2e:7b:34:7d:08:9b:32:d2:ed:b1:a6:31:03:40:99:
         c7:3f:dc:64:dd:f6:40:59:86:1b:8b:98:95:48:79:18:8a:3e:
         d8:86:56:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumItr5yBiIHuQmcGUmp/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZDBlYmQ4ZjU2NmUzZmFiN2UyMzU0YjcxNDA2MGM2ZmE0
N2UyNTQwHhcNMjUwNDEzMTAwMTExWhcNMjUwNDE0MTAwMTExWjAzMTEwLwYDVQQD
EyhjYjdiOWU0NzdlZGVlOTgyMGNkM2RjMWY2ZTYzMzQ3Y2Y4YTY0YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdvR+ozfa3BxvZMRqmBqFE+RoS8X
0LlfRN4yr/yNO5gOVr+H4AvpdVYU4fKZjgOvU4HBGKgCuO4b2QWITYrsXhAspW6s
hDOlxCR22zSspdNCeODmSwWsAKYeypql13vuLVP/M2l0P5qoIt7W7nbu+6Wm7dXZ
sfH1YOzMZMP/JLv8BbIlFNy6tsXu0CbVfmjKrrRn6/7fd/4ex01J2lsGRWT/0LGs
wjKmia5P9/rAq3Dy93cxxbAeRFHL9fJwGZnGKM2AW+dD6OtUXHbKaOB6OZgkHFvv
7hsQumTLJuJHwIOmYgIt05TG3qvO40HRI+mQnkfJFge3vKurfrLNy7Dj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt7nkd+3umCDNPcH25jNHz4pkpQMB8GA1UdIwQY
MBaAFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAt
Mzk3NjVhM2Y5ZGJjLzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAtMzk3NjVhM2Y5ZGJj
LzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOtv8Kwt
qWim3W+uZqYbHV0u2TaMJ77Lb+TOOyg1hCq0KQguKdeBWf3EDOnZHwNVu3gGYEsH
y2z6hXH7okO54JINrJhC2Nlvq+SmIO2QJNq2Dsc0LgnSU70HxWcwAm/GLLe6FziY
t6MCvIhY1EIjbnpnVlAJaxnp4Si+mWk0VR/HnQdvROwh84jwdW7/VGWluodU3xyH
P+C1iEE7H+FTcE+yNAapM5JJqIVbE3vMUQ8iu9sqUN+C344OyX1//BSVav8i7xBn
1EZMC6Tt50V/w4J6QiuqVUSwL/T3Lns0fQibMtLtsaYxA0CZxz/cZN32QFmGG4uY
lUh5GIo+2IZWhg==
-----END CERTIFICATE-----