Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File:                     RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier:          EVeACy3qjTrTaaPryrLX5GrigcxD+tqy62leikROAC4=
Subject key identifier:   3C:52:22:07:86:F1:1A:2F:A7:B0:5C:0E:98:AE:DC:1B:21:81:15:83
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer:       /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial:       01962DF442A3B3E4FD84A3DFB188B18335B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number:          0346
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: YqQh4aUYQXQc2peyIq1Zv0pIvQIPsF+We6fagtL6II0=)
                          2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:42:a3:b3:e4:fd:84:a3:df:b1:88:b1:83:35:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=3c52220786f11a2fa7b05c0e98aedc1b21811583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:92:91:79:57:5f:3c:68:5b:f3:24:5d:18:
                    ef:06:3d:2d:16:71:c8:13:c9:93:63:d5:94:c1:53:
                    a7:d9:f9:3a:76:5f:28:7d:ff:45:67:01:f3:82:ec:
                    4e:d5:93:b7:9b:f3:f1:ae:a1:32:b1:f1:b8:7b:4b:
                    1f:f8:75:c5:65:48:17:f6:a4:a5:7d:70:44:ca:7a:
                    df:a2:76:e9:a6:87:48:d4:2b:49:61:6a:68:1d:1d:
                    22:62:5d:c8:1b:ac:f4:0d:c4:eb:a5:50:94:8b:db:
                    04:f7:41:7f:1d:2b:08:8f:6b:35:a2:67:95:c9:c2:
                    7d:f5:0c:a0:4c:18:12:5d:35:b8:f7:7a:bb:4b:c3:
                    a7:f2:97:be:8a:4b:81:07:b2:77:b5:16:9a:13:7c:
                    b7:04:45:aa:51:c6:b7:84:9d:1e:a8:70:3c:68:9c:
                    e9:89:01:65:ab:e5:cd:0c:7f:f5:3d:59:0a:46:13:
                    f3:8e:78:dc:63:27:e3:6c:79:d4:1b:aa:1f:d6:89:
                    35:aa:70:78:64:af:54:e1:f0:ef:2e:cc:49:b5:88:
                    1d:fb:18:9d:17:ec:1c:78:5d:ab:62:d8:34:1f:f5:
                    a9:f3:b8:a0:e0:c5:e7:41:05:cc:cb:4c:fa:fe:9d:
                    13:79:95:c7:08:2a:73:2d:10:a0:ac:31:55:2a:16:
                    b4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:22:07:86:F1:1A:2F:A7:B0:5C:0E:98:AE:DC:1B:21:81:15:83
            X509v3 Authority Key Identifier:
                keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:26:c3:8c:0f:8e:a4:ae:10:87:95:8b:c5:64:10:5c:b5:79:
         8f:0a:e7:05:ec:d9:79:1a:d0:73:88:01:3e:b7:5e:e8:8c:87:
         0f:dd:f6:6e:d5:57:4e:47:eb:6c:6e:85:5c:b8:82:49:bf:23:
         fb:e0:82:fa:04:44:c7:ae:b5:0e:cb:b5:45:4f:d7:8a:34:a8:
         96:cd:71:20:81:5d:b0:33:30:c7:cb:11:7d:a0:6d:92:8e:90:
         b4:00:80:4b:e7:43:c8:12:ab:0c:ef:7c:80:ef:35:c5:e2:b5:
         f8:81:1c:2a:b5:81:49:78:3c:92:65:e1:30:ec:61:3f:d2:f2:
         0f:1d:ad:12:73:ee:bc:4d:b1:13:ca:2c:93:98:19:13:32:30:
         94:88:f6:68:04:81:3a:90:73:1d:6d:d2:71:1d:61:f6:a0:bc:
         1a:4f:40:56:c9:c4:c0:a3:12:ff:6a:26:cb:07:de:fe:5a:70:
         8a:46:47:1e:7a:82:cb:ad:61:af:be:40:8b:c4:7b:8e:e4:75:
         2c:05:15:b9:b6:a9:37:83:87:f6:ea:f0:fc:e2:ad:b0:00:51:
         24:ad:ab:fc:1d:5c:84:17:dc:81:22:1b:6d:46:21:b8:76:80:
         72:69:89:78:a7:a1:1f:17:d0:0c:04:d4:47:46:47:f2:0b:3d:
         72:34:bf:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EKjs+T9hKPfsYixgzW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjE0NjdjMjA0ODFkMTFiNjdmZjdiYWM2NDk4OTU5Zjcx
OGUxZjUwHhcNMjUwNDEzMDcwMTQ0WhcNMjUwNDE0MDcwMTQ0WjAzMTEwLwYDVQQD
EygzYzUyMjIwNzg2ZjExYTJmYTdiMDVjMGU5OGFlZGMxYjIxODExNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5mSkXlXXzxoW/MkXRjvBj0tFnHI
E8mTY9WUwVOn2fk6dl8off9FZwHzguxO1ZO3m/PxrqEysfG4e0sf+HXFZUgX9qSl
fXBEynrfonbppodI1CtJYWpoHR0iYl3IG6z0DcTrpVCUi9sE90F/HSsIj2s1omeV
ycJ99QygTBgSXTW493q7S8On8pe+ikuBB7J3tRaaE3y3BEWqUca3hJ0eqHA8aJzp
iQFlq+XNDH/1PVkKRhPzjnjcYyfjbHnUG6of1ok1qnB4ZK9U4fDvLsxJtYgd+xid
F+wceF2rYtg0H/Wp87ig4MXnQQXMy0z6/p0TeZXHCCpzLRCgrDFVKha0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxSIgeG8Rovp7BcDpiu3BshgRWDMB8GA1UdIwQY
MBaAFESxRnwgSB0Rtn/3usZJiVn3GOH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUt
MTlmODc0YTE4MWM1LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUtMTlmODc0YTE4MWM1
LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSbDjA+O
pK4Qh5WLxWQQXLV5jwrnBezZeRrQc4gBPrde6IyHD932btVXTkfrbG6FXLiCSb8j
++CC+gREx661Dsu1RU/XijSols1xIIFdsDMwx8sRfaBtko6QtACAS+dDyBKrDO98
gO81xeK1+IEcKrWBSXg8kmXhMOxhP9LyDx2tEnPuvE2xE8osk5gZEzIwlIj2aASB
OpBzHW3ScR1h9qC8Gk9AVsnEwKMS/2omywfe/lpwikZHHnqCy61hr75Ai8R7juR1
LAUVubapN4OH9urw/OKtsABRJK2r/B1chBfcgSIbbUYhuHaAcmmJeKehHxfQDATU
R0ZH8gs9cjS/jg==
-----END CERTIFICATE-----