Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File:                     MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier:          4+7/SsCl7kQ6Sm17ICQBNiyXSfH/cb6Ga87Y+EYDuVg=
Subject key identifier:   3D:F8:39:26:1D:C4:AC:9E:F7:A5:51:61:56:14:1C:BD:82:DB:01:24
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer:       /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial:       01962E2B3C58E1ADB7062D2C7BC53973D134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: b1NMzm1BK2rcOVNSudEUb8KHiXQwH09zbaFQYmWGsqo=)
                          2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3c:58:e1:ad:b7:06:2d:2c:7b:c5:39:73:d1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=3df839261dc4ac9ef7a5516156141cbd82db0124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:e1:28:f6:c8:06:da:1e:47:7b:55:64:13:
                    52:91:76:48:95:a3:70:6c:a8:0c:67:e6:7e:c6:ce:
                    ee:2c:c1:89:63:dd:5c:c0:5e:ad:4d:ec:30:ef:dc:
                    8e:93:59:ed:0b:e9:bc:d5:ea:80:1e:95:2e:ee:b1:
                    f3:19:db:ab:4b:3c:55:2d:6c:65:32:26:18:d4:05:
                    8c:12:bb:62:a3:31:3f:bd:2c:1d:27:a3:8f:42:e0:
                    39:3c:ee:03:80:49:77:74:97:c6:60:64:25:c8:ae:
                    85:13:62:1a:b2:fc:c5:79:68:d0:5b:71:60:39:78:
                    3f:f1:f4:91:e3:cc:63:a1:67:e0:61:1c:9e:8f:1d:
                    37:19:8b:55:fb:39:08:55:94:ab:8c:fc:f0:7b:bd:
                    28:1e:44:bb:a7:74:20:6d:a3:d4:ef:c4:d1:0a:82:
                    93:a8:25:c8:32:1a:9c:27:3e:86:ac:ab:86:96:26:
                    44:99:64:83:46:8e:28:1b:0e:70:cb:43:ab:6f:7f:
                    ef:05:36:cb:67:48:25:f8:ec:63:27:51:c7:24:c5:
                    3a:e5:55:aa:b5:56:52:e9:65:52:60:84:ac:3e:35:
                    be:4e:48:30:d3:18:cb:ac:59:dd:06:ee:ce:38:79:
                    93:8a:1d:ae:68:d6:87:79:63:c3:ca:36:52:f6:72:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F8:39:26:1D:C4:AC:9E:F7:A5:51:61:56:14:1C:BD:82:DB:01:24
            X509v3 Authority Key Identifier:
                keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:e5:e4:3a:41:da:44:f0:bb:8f:f4:a4:d2:8c:c1:76:2b:
         5f:ef:0c:ef:36:51:76:ab:70:2a:8c:13:39:94:bb:3d:b2:ae:
         4c:fa:7c:ec:bd:36:4e:62:d1:c7:c0:3e:45:62:a7:e2:de:ce:
         95:c5:a5:f7:43:1b:83:73:2f:52:f0:26:49:c7:ec:60:e6:5a:
         a1:09:46:63:f3:83:59:4b:89:d3:a7:8f:2d:00:40:9e:7d:51:
         a1:33:97:af:b2:cc:67:01:f0:29:85:73:fe:8e:18:3b:26:cd:
         e3:93:d6:ab:92:c7:a0:ef:50:d7:6c:d1:12:87:c2:09:2d:60:
         a6:7e:6c:83:81:a3:a0:69:c1:2b:55:3f:6d:f6:d3:b9:f7:f1:
         1b:db:85:26:41:d2:cb:65:92:f4:91:e5:c7:ec:e2:ed:36:e6:
         f2:21:f5:6a:05:98:2b:35:f6:c8:53:de:e8:58:1f:ea:dc:9e:
         df:02:b0:61:2a:60:a8:bf:a7:d9:36:ee:c3:2b:28:05:fc:32:
         b0:26:34:5e:bf:13:ae:c5:55:de:57:89:80:4d:7f:a5:0c:a6:
         d4:e1:69:75:5b:06:7d:78:07:0f:22:ba:c4:47:5c:17:32:9f:
         29:06:d3:eb:f2:7c:95:a8:d5:96:c1:9a:11:e5:a7:05:fb:86:
         b3:e9:a7:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzxY4a23Bi0se8U5c9E0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTM2MjU0YjNlNzQ5MDA2NzViYzZlYmQ1MGFlODI1ODI4
YjlhNzYwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
EygzZGY4MzkyNjFkYzRhYzllZjdhNTUxNjE1NjE0MWNiZDgyZGIwMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z7hKPbIBtoeR3tVZBNSkXZIlaNw
bKgMZ+Z+xs7uLMGJY91cwF6tTeww79yOk1ntC+m81eqAHpUu7rHzGdurSzxVLWxl
MiYY1AWMErtiozE/vSwdJ6OPQuA5PO4DgEl3dJfGYGQlyK6FE2IasvzFeWjQW3Fg
OXg/8fSR48xjoWfgYRyejx03GYtV+zkIVZSrjPzwe70oHkS7p3QgbaPU78TRCoKT
qCXIMhqcJz6GrKuGliZEmWSDRo4oGw5wy0Orb3/vBTbLZ0gl+OxjJ1HHJMU65VWq
tVZS6WVSYISsPjW+Tkgw0xjLrFndBu7OOHmTih2uaNaHeWPDyjZS9nLv6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD34OSYdxKye96VRYVYUHL2C2wEkMB8GA1UdIwQY
MBaAFDJTYlSz50kAZ1vG69UK6CWCi5p2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUt
YTU3ZDQ4ODc0NGMyLzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUtYTU3ZDQ4ODc0NGMy
LzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKLl5DpB
2kTwu4/0pNKMwXYrX+8M7zZRdqtwKowTOZS7PbKuTPp87L02TmLRx8A+RWKn4t7O
lcWl90Mbg3MvUvAmScfsYOZaoQlGY/ODWUuJ06ePLQBAnn1RoTOXr7LMZwHwKYVz
/o4YOybN45PWq5LHoO9Q12zREofCCS1gpn5sg4GjoGnBK1U/bfbTuffxG9uFJkHS
y2WS9JHlx+zi7Tbm8iH1agWYKzX2yFPe6Fgf6tye3wKwYSpgqL+n2TbuwysoBfwy
sCY0Xr8TrsVV3leJgE1/pQym1OFpdVsGfXgHDyK6xEdcFzKfKQbT6/J8lajVlsGa
EeWnBfuGs+mnjg==
-----END CERTIFICATE-----