Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File:                     0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier:          8lvxLcxyJAfPnxSLuhavjIS+QKi6A0QAb56JaWRmlUE=
Subject key identifier:   45:AB:84:D0:2B:1D:9B:FD:9C:7C:53:6E:42:29:62:5D:62:6A:8A:1F
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer:       /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial:       01962E61F43368B7BD3651D698556175A87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number:          07A2
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: gZER2dA4EKtKs/HpJTANQQirUIp0Gve/A5mBEkHcJFw=)
                          2: 7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa (hash: FyGaqVFk+vnx+I1kj3NwUg/UfIFUtqEhpx9/rpeS44U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f4:33:68:b7:bd:36:51:d6:98:55:61:75:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=45ab84d02b1d9bfd9c7c536e4229625d626a8a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:3d:e3:42:24:6f:a4:e8:55:8f:d1:84:78:
                    32:26:19:13:d5:ca:32:80:e6:fb:92:21:24:ff:20:
                    01:04:f0:ee:8f:99:3d:ce:7d:55:5e:c7:99:e6:05:
                    eb:ef:67:3a:80:5f:91:7b:67:13:a3:ab:07:bb:eb:
                    58:06:24:32:d5:dc:4d:cc:f8:42:39:9b:96:71:11:
                    61:2b:85:f2:08:96:a4:c3:97:ee:05:09:22:28:85:
                    94:57:33:ba:21:42:9f:80:7c:98:79:00:78:5e:b7:
                    29:84:61:3f:ba:5d:0b:0e:1b:b6:2e:41:6f:2b:09:
                    89:16:17:c8:c5:b4:8d:c4:b2:61:be:9b:e0:4b:26:
                    3e:34:18:44:b2:4b:1f:d4:19:0d:4e:3f:fa:3e:75:
                    50:1b:6b:0b:31:2c:f5:c5:83:85:09:f3:91:1f:ef:
                    d1:a8:bb:fb:43:86:c8:2c:6a:b4:c7:b7:14:c1:b7:
                    81:72:f5:2e:ab:5f:f6:3c:2f:92:d9:d9:b6:85:3a:
                    a7:0e:03:4e:84:b0:0c:72:1b:29:7c:22:77:45:6b:
                    a5:eb:d3:93:88:cd:38:87:e3:05:e0:1c:ea:04:c4:
                    ab:d1:85:af:a7:6d:d4:32:47:42:23:c0:40:fe:17:
                    91:a0:79:af:af:6f:bf:8f:96:89:c7:09:07:25:7d:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:84:D0:2B:1D:9B:FD:9C:7C:53:6E:42:29:62:5D:62:6A:8A:1F
            X509v3 Authority Key Identifier:
                keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:0a:36:1f:30:64:fe:a3:b9:c3:94:35:51:a9:d2:54:4b:
         09:05:c8:aa:7b:a4:95:a0:5f:9a:f0:43:d8:b8:e8:70:e6:f5:
         ad:6a:01:58:ba:6a:b6:14:76:76:cb:b5:99:29:f0:8c:b9:6e:
         fe:34:af:85:ad:0d:84:cf:83:16:90:af:0d:e2:fc:c7:ca:32:
         57:56:73:51:37:6b:2f:8f:a6:9e:fc:0f:d3:3a:2f:e6:c9:09:
         cd:43:f3:5c:6a:2f:ef:56:3e:58:2b:77:cd:73:ed:26:a4:bc:
         0c:63:00:ec:ea:0e:14:95:cd:49:3d:11:f3:23:b9:d1:c8:87:
         ac:86:99:2b:5e:57:94:8e:77:fb:d4:62:8a:73:6d:4b:55:f6:
         83:f2:fe:8d:75:b0:7e:12:8b:25:df:ba:94:a6:66:9f:9e:95:
         c0:c0:d0:78:0b:3b:79:52:9d:d2:98:e4:3d:e0:5f:46:77:08:
         04:e6:26:60:bd:6a:43:5b:4a:f9:43:e0:fe:70:be:c3:3d:0c:
         39:ba:dc:35:ec:2a:bf:32:25:aa:5f:8c:92:64:c9:73:59:17:
         e6:6d:e1:6a:08:11:6d:fa:d6:aa:c7:3f:10:e8:64:99:fa:c2:
         64:e9:dd:3b:ff:12:6b:f1:e2:10:6a:37:b1:c7:27:1f:ce:63:
         60:46:90:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfQzaLe9NlHWmFVhdah7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm
ODUxMGIwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
Eyg0NWFiODRkMDJiMWQ5YmZkOWM3YzUzNmU0MjI5NjI1ZDYyNmE4YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qk940Ikb6ToVY/RhHgyJhkT1coy
gOb7kiEk/yABBPDuj5k9zn1VXseZ5gXr72c6gF+Re2cTo6sHu+tYBiQy1dxNzPhC
OZuWcRFhK4XyCJakw5fuBQkiKIWUVzO6IUKfgHyYeQB4XrcphGE/ul0LDhu2LkFv
KwmJFhfIxbSNxLJhvpvgSyY+NBhEsksf1BkNTj/6PnVQG2sLMSz1xYOFCfORH+/R
qLv7Q4bILGq0x7cUwbeBcvUuq1/2PC+S2dm2hTqnDgNOhLAMchspfCJ3RWul69OT
iM04h+MF4BzqBMSr0YWvp23UMkdCI8BA/heRoHmvr2+/j5aJxwkHJX2OjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWrhNArHZv9nHxTbkIpYl1iaoofMB8GA1UdIwQY
MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt
MGJkZGM4MDcxMWFlLzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl
LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxMKNh8w
ZP6jucOUNVGp0lRLCQXIqnuklaBfmvBD2LjocOb1rWoBWLpqthR2dsu1mSnwjLlu
/jSvha0NhM+DFpCvDeL8x8oyV1ZzUTdrL4+mnvwP0zov5skJzUPzXGov71Y+WCt3
zXPtJqS8DGMA7OoOFJXNST0R8yO50ciHrIaZK15XlI53+9RiinNtS1X2g/L+jXWw
fhKLJd+6lKZmn56VwMDQeAs7eVKd0pjkPeBfRncIBOYmYL1qQ1tK+UPg/nC+wz0M
ObrcNewqvzIlql+MkmTJc1kX5m3haggRbfrWqsc/EOhkmfrCZOndO/8Sa/HiEGo3
sccnH85jYEaQjQ==
-----END CERTIFICATE-----