Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          6gbdbr5v6dLd7MdSBzI5ERi1p8OFOcuIzG8rngF07QQ=
Subject key identifier:   DD:28:A7:9F:96:85:67:48:97:4D:B2:43:2A:C4:56:E2:C9:42:33:5C
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       01962FAB38D1F1D3BF5F0D6828A3353C465C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          111F
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: a+27bVhCeyfVi575qooURKsNMJJYhitUcAWNaMa7aUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:38:d1:f1:d3:bf:5f:0d:68:28:a3:35:3c:46:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=dd28a79f96856748974db2432ac456e2c942335c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:97:60:a9:55:dd:31:da:a9:96:60:c6:e6:
                    f6:60:86:7f:1d:f1:85:9e:f9:70:91:36:b5:01:fc:
                    49:b2:87:76:4b:89:98:66:ed:f4:40:c7:76:89:0d:
                    d6:e7:12:de:7a:54:68:4a:83:ab:02:ff:38:59:36:
                    7e:c2:d8:09:f1:1c:4c:6d:2b:16:e0:b1:a3:18:c1:
                    30:92:b7:ab:6b:23:2e:1a:ba:48:a1:e8:33:f3:fd:
                    e7:19:2e:78:14:1e:ce:ed:23:72:4f:02:55:2a:74:
                    9b:86:99:12:87:d9:7d:79:e5:52:15:74:d7:35:02:
                    35:8c:01:5b:ee:10:e8:58:ae:fc:34:cd:65:a9:c5:
                    36:ef:6c:65:70:ea:20:24:f1:88:b0:3f:46:31:a3:
                    e6:10:07:fc:cb:ac:4c:11:e6:7f:b2:88:17:56:3c:
                    6d:fb:7f:bd:4d:04:2a:8a:c0:7c:aa:36:93:8e:d9:
                    3a:b4:8a:6b:28:65:2e:b5:d8:79:76:1c:01:5f:39:
                    11:66:94:05:ee:a4:76:70:cc:63:fe:28:fc:28:35:
                    27:e7:3c:10:5b:64:8f:99:aa:11:69:32:ed:9e:72:
                    10:62:f0:89:d5:56:6b:7e:43:74:66:72:b8:85:4a:
                    2e:72:db:28:0a:ed:32:e1:df:75:01:2f:ff:12:ff:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:28:A7:9F:96:85:67:48:97:4D:B2:43:2A:C4:56:E2:C9:42:33:5C
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:91:c3:b4:31:dd:4e:bf:43:da:7b:c0:bc:7c:52:c5:85:
         35:db:65:8f:e1:a7:76:fb:d0:3c:14:61:b5:4a:50:19:ed:fd:
         a1:ad:cf:39:85:40:90:03:62:d6:e5:c1:b7:ee:a4:76:79:05:
         bb:3b:e9:56:a0:03:87:93:ce:89:6d:85:f8:ca:10:d1:f9:70:
         11:a7:d7:b7:3f:42:64:5d:cb:ff:8d:79:40:31:31:b5:ee:b7:
         fd:83:cb:99:6a:eb:c7:58:db:a1:a3:d6:df:0b:6d:83:bb:5d:
         c9:e4:f2:70:70:ba:83:bc:dd:9a:75:aa:05:34:f9:9f:fd:23:
         cc:32:c1:3e:f2:2e:95:80:46:47:e9:0f:83:4e:a3:4e:2b:23:
         73:c5:89:2b:1e:d2:83:35:41:19:3c:7c:f3:c3:dd:0f:1f:68:
         f4:c7:41:39:4b:37:1e:52:c3:1e:f4:b0:0e:d6:9f:90:2f:1a:
         11:1b:0e:51:a1:d4:51:51:06:91:71:e4:35:60:59:65:b6:5c:
         a2:0b:a2:d2:e0:f6:5e:ff:cc:e1:47:32:fa:7a:6b:27:8c:ef:
         a9:4f:68:e9:55:02:3a:68:5e:43:c4:f9:70:fa:28:0f:d9:38:
         66:e2:d6:47:f1:40:04:dd:0c:41:4a:d8:98:d8:5b:cf:bc:c5:
         32:64:d7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzjR8dO/Xw1oKKM1PEZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk
OWYxZGUwHhcNMjUwNDEzMTUwMTEyWhcNMjUwNDE0MTUwMTEyWjAzMTEwLwYDVQQD
EyhkZDI4YTc5Zjk2ODU2NzQ4OTc0ZGIyNDMyYWM0NTZlMmM5NDIzMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ+XYKlV3THaqZZgxub2YIZ/HfGF
nvlwkTa1AfxJsod2S4mYZu30QMd2iQ3W5xLeelRoSoOrAv84WTZ+wtgJ8RxMbSsW
4LGjGMEwkrerayMuGrpIoegz8/3nGS54FB7O7SNyTwJVKnSbhpkSh9l9eeVSFXTX
NQI1jAFb7hDoWK78NM1lqcU272xlcOogJPGIsD9GMaPmEAf8y6xMEeZ/sogXVjxt
+3+9TQQqisB8qjaTjtk6tIprKGUutdh5dhwBXzkRZpQF7qR2cMxj/ij8KDUn5zwQ
W2SPmaoRaTLtnnIQYvCJ1VZrfkN0ZnK4hUouctsoCu0y4d91AS//Ev/ZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0op5+WhWdIl02yQyrEVuLJQjNcMB8GA1UdIwQY
MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt
MDJhMTJiODYxODBkLzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk
LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmyRw7Qx
3U6/Q9p7wLx8UsWFNdtlj+GndvvQPBRhtUpQGe39oa3POYVAkANi1uXBt+6kdnkF
uzvpVqADh5POiW2F+MoQ0flwEafXtz9CZF3L/415QDExte63/YPLmWrrx1jboaPW
3wttg7tdyeTycHC6g7zdmnWqBTT5n/0jzDLBPvIulYBGR+kPg06jTisjc8WJKx7S
gzVBGTx888PdDx9o9MdBOUs3HlLDHvSwDtafkC8aERsOUaHUUVEGkXHkNWBZZbZc
ogui0uD2Xv/M4Ucy+nprJ4zvqU9o6VUCOmheQ8T5cPooD9k4ZuLWR/FABN0MQUrY
mNhbz7zFMmTXNQ==
-----END CERTIFICATE-----