Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          yFqTAzTSZUxs23fVRVj3lca4cuTRz4pE7LbqNPRQK4g=
Subject key identifier:   4B:F2:06:46:30:85:E1:39:25:51:CC:3D:9D:A8:63:51:54:F1:12:6B
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       01962ECFB4EE1927600B63060560A9BDD7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          0CC3
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: Mj6A3VLj+ZzsO+tWcBCzcBC6qZTCacM00C8pzinH8/4=)
                          2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:ee:19:27:60:0b:63:06:05:60:a9:bd:d7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=4bf206463085e1392551cc3d9da8635154f1126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:41:74:25:d4:5a:1b:80:93:30:d4:00:07:
                    4c:ee:5b:62:03:97:fb:30:93:2b:0b:40:79:9a:45:
                    7a:26:b2:62:8f:23:c2:69:34:29:79:a4:fb:ad:ee:
                    32:28:66:3d:63:37:00:2e:aa:78:38:c0:49:e7:cd:
                    2e:5e:7f:08:b0:ac:27:2a:44:66:bf:8c:02:de:28:
                    46:a5:8a:36:8a:a7:e9:d0:47:8a:3c:e2:28:e9:38:
                    d7:b1:b9:40:c0:83:ba:d5:76:d1:21:0c:13:aa:f7:
                    d0:d7:70:df:14:d4:e8:75:75:19:26:95:75:7f:55:
                    2b:75:66:58:a4:fa:8e:5d:18:54:18:1c:4f:5a:50:
                    98:cb:80:f8:fe:f6:e5:4c:e6:1d:59:4f:0e:72:87:
                    9d:68:57:39:13:ba:88:59:a5:18:c6:9b:a3:1e:c9:
                    94:ed:6c:0a:31:81:1d:ba:fb:be:cd:02:7c:e1:f0:
                    37:ed:a7:d7:39:fe:93:c3:80:ec:ab:55:c7:93:0f:
                    23:3a:f6:81:35:1d:2d:f0:6c:cf:cb:d1:c6:b5:fa:
                    67:3d:01:34:e5:1d:fb:6e:8a:c0:b6:4f:b1:8b:7f:
                    47:e8:e3:b3:1b:26:ed:25:54:0a:e0:12:58:1e:a5:
                    4f:dc:15:04:6a:62:8d:c3:ad:51:77:ef:86:bf:31:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:06:46:30:85:E1:39:25:51:CC:3D:9D:A8:63:51:54:F1:12:6B
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4d:6c:3b:35:14:05:b5:09:0d:c9:a3:0b:ab:65:b8:95:a6:
         e7:8e:7a:fb:33:5c:74:b4:28:f7:47:81:00:db:4a:d3:8a:fe:
         43:73:11:db:ba:ed:2a:ba:9c:fc:eb:96:3f:1a:bc:50:59:c8:
         b1:cf:d2:7d:91:45:41:53:ed:d6:10:0e:ea:c4:f1:38:b4:7f:
         15:41:86:b7:e1:69:6d:44:e4:4b:e6:02:2e:0e:2f:76:7c:e0:
         52:d1:2d:df:b5:f5:ea:e9:c3:c6:f7:06:17:fd:4c:c4:9d:72:
         4a:f1:21:66:f2:a4:cd:2a:f2:7c:b1:14:20:ad:ea:1c:95:dd:
         80:b8:60:b7:cb:a8:dd:e9:5b:eb:26:1f:d7:32:19:6b:fb:54:
         61:af:4d:28:96:3f:f4:08:79:77:7e:1b:c6:84:4f:2a:8e:c5:
         67:ce:09:2a:6c:59:ac:86:4c:41:ae:a0:03:36:5b:28:35:fa:
         3c:6c:34:3d:f4:c3:6d:77:38:64:b8:96:6b:aa:a4:07:7f:39:
         02:53:75:32:da:c5:ea:fb:37:76:93:7a:9d:26:ee:d8:59:fa:
         7c:f7:e4:f0:d5:12:a0:05:04:49:3d:34:eb:11:cb:a5:91:c0:
         bb:f8:67:92:91:b8:0e:77:d0:1f:8f:0e:e9:24:e4:69:4c:2f:
         85:76:d2:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7TuGSdgC2MGBWCpvdfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
Eyg0YmYyMDY0NjMwODVlMTM5MjU1MWNjM2Q5ZGE4NjM1MTU0ZjExMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR9BdCXUWhuAkzDUAAdM7ltiA5f7
MJMrC0B5mkV6JrJijyPCaTQpeaT7re4yKGY9YzcALqp4OMBJ580uXn8IsKwnKkRm
v4wC3ihGpYo2iqfp0EeKPOIo6TjXsblAwIO61XbRIQwTqvfQ13DfFNTodXUZJpV1
f1UrdWZYpPqOXRhUGBxPWlCYy4D4/vblTOYdWU8OcoedaFc5E7qIWaUYxpujHsmU
7WwKMYEduvu+zQJ84fA37afXOf6Tw4Dsq1XHkw8jOvaBNR0t8GzPy9HGtfpnPQE0
5R37borAtk+xi39H6OOzGybtJVQK4BJYHqVP3BUEamKNw61Rd++GvzG/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvyBkYwheE5JVHMPZ2oY1FU8RJrMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU1sOzUU
BbUJDcmjC6tluJWm5456+zNcdLQo90eBANtK04r+Q3MR27rtKrqc/OuWPxq8UFnI
sc/SfZFFQVPt1hAO6sTxOLR/FUGGt+FpbUTkS+YCLg4vdnzgUtEt37X16unDxvcG
F/1MxJ1ySvEhZvKkzSryfLEUIK3qHJXdgLhgt8uo3elb6yYf1zIZa/tUYa9NKJY/
9Ah5d34bxoRPKo7FZ84JKmxZrIZMQa6gAzZbKDX6PGw0PfTDbXc4ZLiWa6qkB385
AlN1MtrF6vs3dpN6nSbu2Fn6fPfk8NUSoAUEST006xHLpZHAu/hnkpG4DnfQH48O
6STkaUwvhXbSOQ==
-----END CERTIFICATE-----