Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File:                     0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier:          fqy5tl3pItu+yaGKVI3Mn31Oh16+MbvObbuI4onEr34=
Subject key identifier:   82:07:2A:D5:5D:70:BC:2B:CB:B2:74:A7:F4:73:AD:61:FF:9E:0F:F9
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer:       /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial:       01962F7426C1BE9365B164F6EA2039ADBED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: qO/yJAy+Z2MsTDNf2Ivp/SIyMkCj64aKbHX4nzOME9M=)
                          2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:c1:be:93:65:b1:64:f6:ea:20:39:ad:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=82072ad55d70bc2bcbb274a7f473ad61ff9e0ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:3d:e3:fe:b0:39:9e:83:d6:16:76:1b:b7:
                    cf:8d:00:4b:be:37:eb:0f:a4:8b:f6:fc:4f:f7:79:
                    d5:ad:a4:62:ec:43:65:7e:e2:3e:fd:53:ac:b9:a9:
                    6b:80:e8:5f:14:6c:ed:d2:92:45:c6:dd:d9:e2:50:
                    03:31:82:67:5c:b3:23:bc:15:26:b5:0a:2a:3a:7e:
                    0d:d5:5a:17:c1:be:ec:12:24:99:c2:4f:41:e7:f6:
                    f5:1a:18:b1:1e:4a:15:a7:07:2a:b7:d3:eb:5f:82:
                    4e:bf:63:b5:25:6b:29:d8:41:4e:bd:e2:5a:84:47:
                    95:7d:f1:82:9a:35:0b:79:f9:37:75:61:1c:8d:16:
                    9f:c3:3b:73:72:23:a2:df:f9:e7:66:86:0b:5c:2c:
                    e4:14:8e:05:fa:39:f7:ef:9b:9d:15:b7:6e:9b:e6:
                    e1:4c:a9:81:94:ce:8d:11:13:cf:1b:b9:45:58:76:
                    c5:8a:d3:9a:49:2b:05:18:e0:d6:13:ea:e2:c7:47:
                    b3:90:0d:ac:ce:00:d4:db:b8:3d:54:04:70:1d:6f:
                    9e:99:4b:d5:03:f8:6c:d5:b9:82:b4:8c:b9:51:c5:
                    00:18:16:aa:88:86:51:e2:58:4f:94:e5:04:7b:44:
                    e1:db:73:66:fa:46:06:a5:68:5d:87:6f:99:cc:30:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:07:2A:D5:5D:70:BC:2B:CB:B2:74:A7:F4:73:AD:61:FF:9E:0F:F9
            X509v3 Authority Key Identifier:
                keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:83:76:1b:ac:82:4a:39:f1:02:93:35:20:47:6a:ec:a9:
         65:b2:f9:5c:7a:dc:4a:16:c5:63:05:52:ce:d6:ce:20:7f:6f:
         63:a5:c2:a3:49:a2:15:df:ac:1b:0c:c5:d1:a1:39:c2:33:f3:
         30:ee:59:1e:82:24:87:01:1a:de:7d:b2:b9:8c:f4:21:43:0d:
         f2:9b:58:42:38:65:4d:5d:5c:7a:3b:d5:86:fa:99:d3:8b:0b:
         7e:99:95:25:2d:4c:85:f5:bb:59:2d:fd:20:7c:76:17:05:15:
         60:31:ef:c5:ad:cc:7d:89:26:c6:7b:6c:aa:ec:dc:9f:49:56:
         61:2d:99:44:6d:74:18:93:36:1b:28:01:05:e6:29:51:19:7e:
         25:26:ba:fb:b5:fd:5c:72:db:e0:f2:22:b6:40:ad:63:e4:bf:
         e0:0c:ab:2c:74:6b:f3:a8:55:0f:87:a5:78:69:49:d9:22:09:
         b8:d5:ff:3e:e1:c3:70:8d:84:76:1d:4a:3b:61:d7:d6:58:d2:
         47:5c:2b:b2:7c:0c:cc:c3:ce:05:29:0b:c1:55:fe:55:9a:e6:
         29:c6:d5:b7:46:47:52:59:97:fb:1b:42:cf:93:f2:bf:4b:95:
         6b:58:f7:b7:a0:1d:88:09:81:43:33:ab:09:19:f6:83:13:5c:
         de:55:f4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCbBvpNlsWT26iA5rb7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk
Y2I3NmQwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
Eyg4MjA3MmFkNTVkNzBiYzJiY2JiMjc0YTdmNDczYWQ2MWZmOWUwZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApus94/6wOZ6D1hZ2G7fPjQBLvjfr
D6SL9vxP93nVraRi7ENlfuI+/VOsualrgOhfFGzt0pJFxt3Z4lADMYJnXLMjvBUm
tQoqOn4N1VoXwb7sEiSZwk9B5/b1GhixHkoVpwcqt9PrX4JOv2O1JWsp2EFOveJa
hEeVffGCmjULefk3dWEcjRafwztzciOi3/nnZoYLXCzkFI4F+jn375udFbdum+bh
TKmBlM6NERPPG7lFWHbFitOaSSsFGODWE+rix0ezkA2szgDU27g9VARwHW+emUvV
A/hs1bmCtIy5UcUAGBaqiIZR4lhPlOUEe0Th23Nm+kYGpWhdh2+ZzDCA+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIHKtVdcLwry7J0p/RzrWH/ng/5MB8GA1UdIwQY
MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt
Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh
LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtuDdhus
gko58QKTNSBHauypZbL5XHrcShbFYwVSztbOIH9vY6XCo0miFd+sGwzF0aE5wjPz
MO5ZHoIkhwEa3n2yuYz0IUMN8ptYQjhlTV1cejvVhvqZ04sLfpmVJS1MhfW7WS39
IHx2FwUVYDHvxa3MfYkmxntsquzcn0lWYS2ZRG10GJM2GygBBeYpURl+JSa6+7X9
XHLb4PIitkCtY+S/4AyrLHRr86hVD4eleGlJ2SIJuNX/PuHDcI2Edh1KO2HX1ljS
R1wrsnwMzMPOBSkLwVX+VZrmKcbVt0ZHUlmX+xtCz5Pyv0uVa1j3t6AdiAmBQzOr
CRn2gxNc3lX0Tg==
-----END CERTIFICATE-----