Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          vVxRnd3J9MmoU4zPGNRqNBJWvqP/fVP1su/0UM16aoU=
Subject key identifier:   DD:AD:34:EB:E2:04:47:5E:A9:CF:2B:F8:0A:46:15:95:6A:AF:38:A3
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       01962F3D33588FCF4EDCCE6253C9DBFD939E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          0C6C
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: 3R1Q12uEmxUUPeTy/7vUnJb5PF3tGKmaqfarkg4Litg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:33:58:8f:cf:4e:dc:ce:62:53:c9:db:fd:93:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=ddad34ebe204475ea9cf2bf80a4615956aaf38a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:9d:c3:64:24:70:31:83:88:c5:9e:e1:66:
                    3e:c5:5a:91:ba:ca:ae:8a:7e:cc:cb:7d:e0:7c:e7:
                    b1:5d:7d:7e:32:cf:55:b1:96:a8:d7:22:35:c3:bf:
                    65:aa:2d:1b:b0:af:d3:b4:45:fd:1b:a1:a4:05:2e:
                    d9:a9:71:0b:8d:df:f0:81:f3:3a:c9:71:09:39:93:
                    eb:26:68:cb:3d:de:52:b1:ee:45:d5:c8:05:2d:85:
                    f2:11:72:c0:db:e4:e3:42:da:e4:a0:b8:e6:7e:f0:
                    a5:2e:56:61:d8:29:e1:11:0d:87:b0:02:fc:7f:81:
                    33:7b:fb:f0:cb:ae:87:bc:6d:54:78:3b:55:88:1b:
                    e5:a5:d2:f2:8a:cf:83:e5:d3:d2:c3:7e:68:48:f6:
                    31:f1:dd:d8:41:8d:8b:2b:68:ab:2c:d9:64:ae:92:
                    56:6b:96:20:7d:95:5d:77:d0:ac:bf:0a:e4:e1:fc:
                    5b:4b:0e:6f:9f:1e:a1:22:b9:0d:4f:cc:a4:00:f3:
                    93:c6:b2:6e:84:84:e6:ad:b2:06:d2:fc:4b:5f:0d:
                    ed:b4:c8:d8:b5:60:35:b4:93:e7:d6:78:06:5d:5d:
                    7c:81:82:c9:04:28:c7:37:c2:b1:37:d2:69:8f:14:
                    0d:62:7e:0c:cb:5f:1b:a4:7f:c9:e3:65:f9:ce:ca:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:34:EB:E2:04:47:5E:A9:CF:2B:F8:0A:46:15:95:6A:AF:38:A3
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5c:2c:16:f2:a7:3a:18:09:69:c2:bb:ab:97:92:e3:ee:55:
         b2:1b:f0:f3:54:c6:2a:62:3f:4b:54:ff:65:36:1e:dd:69:4e:
         06:9a:40:48:a1:cd:46:b1:59:a6:a7:87:6b:68:db:01:39:51:
         b4:f6:9f:f2:42:92:bd:2e:41:a1:39:f7:ac:21:fd:cf:8b:93:
         e4:d5:62:8a:f7:e9:f6:71:45:60:16:83:6c:1a:5f:7a:e3:a4:
         18:a6:9c:75:4e:ed:0b:26:b2:b9:92:b3:b4:56:2d:8d:ba:6f:
         84:7b:64:15:05:65:62:a1:f6:40:e4:e3:e4:73:08:72:3c:76:
         ac:78:f0:9b:83:64:b1:1b:e1:46:7b:de:b8:71:34:fa:73:74:
         0f:a3:e5:c7:80:8d:e1:a9:f8:ec:9c:9a:4b:8d:46:01:8e:dc:
         df:c0:04:cf:2f:56:7e:dc:41:fe:74:39:83:04:1d:eb:cf:e2:
         9b:75:68:c8:9c:40:1c:ae:5b:be:ef:2b:80:48:f0:e4:46:6d:
         86:12:af:78:f4:d9:a9:0d:71:f2:9e:09:fb:d2:14:64:3d:74:
         73:68:3d:8c:3e:96:91:8d:88:20:bd:e0:a8:c0:20:90:ce:9e:
         84:67:19:65:b5:5d:bb:cb:3f:85:45:a4:7e:54:10:55:02:87:
         90:a4:2a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTNYj89O3M5iU8nb/ZOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4
YzIyMTYwHhcNMjUwNDEzMTMwMTAxWhcNMjUwNDE0MTMwMTAxWjAzMTEwLwYDVQQD
EyhkZGFkMzRlYmUyMDQ0NzVlYTljZjJiZjgwYTQ2MTU5NTZhYWYzOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AGdw2QkcDGDiMWe4WY+xVqRusqu
in7My33gfOexXX1+Ms9VsZao1yI1w79lqi0bsK/TtEX9G6GkBS7ZqXELjd/wgfM6
yXEJOZPrJmjLPd5Sse5F1cgFLYXyEXLA2+TjQtrkoLjmfvClLlZh2CnhEQ2HsAL8
f4Eze/vwy66HvG1UeDtViBvlpdLyis+D5dPSw35oSPYx8d3YQY2LK2irLNlkrpJW
a5YgfZVdd9Csvwrk4fxbSw5vnx6hIrkNT8ykAPOTxrJuhITmrbIG0vxLXw3ttMjY
tWA1tJPn1ngGXV18gYLJBCjHN8KxN9JpjxQNYn4My18bpH/J42X5zspftQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2tNOviBEdeqc8r+ApGFZVqrzijMB8GA1UdIwQY
MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt
MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2
LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFwsFvKn
OhgJacK7q5eS4+5Vshvw81TGKmI/S1T/ZTYe3WlOBppASKHNRrFZpqeHa2jbATlR
tPaf8kKSvS5BoTn3rCH9z4uT5NViivfp9nFFYBaDbBpfeuOkGKacdU7tCyayuZKz
tFYtjbpvhHtkFQVlYqH2QOTj5HMIcjx2rHjwm4NksRvhRnveuHE0+nN0D6Plx4CN
4an47JyaS41GAY7c38AEzy9WftxB/nQ5gwQd68/im3VoyJxAHK5bvu8rgEjw5EZt
hhKvePTZqQ1x8p4J+9IUZD10c2g9jD6WkY2IIL3gqMAgkM6ehGcZZbVdu8s/hUWk
flQQVQKHkKQqvg==
-----END CERTIFICATE-----