Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File:                     CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier:          qIYiFo6770JcAzIOHe4hTU0Sgjup652zU3dhF7c3HtM=
Subject key identifier:   A8:6D:DA:54:9F:03:3A:64:05:E0:98:E0:6E:FE:BF:D2:7A:D0:8A:5C
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer:       /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial:       01962F3DCE4A729863E0423D92899B78E999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number:          0FCC
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: 5P7S87LeXahQq6lothkdNlopC4SeQRNl6/7F28r9KO4=)
                          2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=)
                          3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ce:4a:72:98:63:e0:42:3d:92:89:9b:78:e9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=a86dda549f033a6405e098e06efebfd27ad08a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:37:82:de:0e:b9:84:62:eb:ee:9d:01:6f:
                    22:34:42:82:f4:57:af:fb:0c:fe:83:7b:54:d2:d7:
                    3a:e8:43:6a:39:8c:15:f3:08:0f:98:ba:28:c3:db:
                    10:fa:66:34:d2:a6:f5:b4:44:5e:0d:8b:ca:c3:eb:
                    06:cd:c7:46:4d:e6:c1:e5:99:b7:97:be:72:1f:e5:
                    4d:44:93:19:c7:24:40:47:3a:ca:18:40:06:08:a5:
                    df:ec:6c:75:74:1a:71:a6:cf:1f:76:a5:32:93:d5:
                    85:fa:fb:47:17:fd:6b:d9:bf:b2:3b:d6:91:a7:c0:
                    d0:a9:af:41:39:a7:84:86:08:e0:48:e2:ed:df:c2:
                    f5:17:34:b7:86:fd:ee:31:16:a6:e0:4b:3a:ae:5d:
                    6a:ca:57:5b:51:6c:a4:cc:5f:ee:d6:40:5b:8c:15:
                    3e:2b:c1:b0:eb:7f:e6:5a:05:b8:1e:ae:d8:50:0a:
                    06:c4:8f:2e:19:c9:e5:a3:82:a5:98:d4:71:f6:cf:
                    ab:f9:ec:2d:e8:79:fd:f2:c5:ad:27:db:d1:9a:ed:
                    f7:5c:54:d0:21:6b:81:18:12:75:23:72:79:38:4a:
                    a1:ad:99:ec:34:db:2a:37:e4:a3:3b:6a:1d:16:d3:
                    c5:c7:7b:30:cd:19:ef:10:25:41:15:3b:55:c2:fb:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6D:DA:54:9F:03:3A:64:05:E0:98:E0:6E:FE:BF:D2:7A:D0:8A:5C
            X509v3 Authority Key Identifier:
                keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ac:80:bf:f4:0e:ae:c4:f8:e1:34:4e:cc:e5:23:97:bb:c3:
         30:95:3b:65:55:08:13:8d:d5:c6:83:8f:8d:4e:4e:79:31:82:
         b3:9e:3c:77:1f:72:9b:b2:42:a8:7c:4c:06:f9:df:ec:7c:49:
         9b:23:40:da:6c:55:54:39:9b:6e:85:3c:94:e2:28:ae:0c:02:
         54:ad:89:a8:19:6b:b3:97:cb:c6:52:e9:6b:13:14:e0:ca:bd:
         00:3f:79:c7:e6:6a:29:ff:5d:83:8e:64:6b:15:e8:55:7b:ca:
         e3:98:ba:ff:fa:2e:85:30:78:d2:c8:7d:b6:be:dc:ab:77:1c:
         dd:5c:3a:f9:d6:28:f5:ce:cf:c2:97:c7:30:03:76:70:34:99:
         91:32:39:47:e7:0a:6c:4e:0f:00:20:07:51:27:87:d8:75:70:
         a7:40:2e:ca:13:6c:ce:c7:9a:1e:f0:4a:e9:28:14:e9:26:13:
         4a:a1:91:f0:82:f1:e1:24:91:a7:7d:4c:84:6f:91:f6:c5:81:
         92:83:3d:2c:51:9d:60:81:a2:e6:e4:c1:33:0a:bf:2a:ed:72:
         d0:49:ed:3e:58:ca:c6:86:a9:c2:02:dc:f1:d0:3d:47:d3:d6:
         ae:77:c2:51:a6:bc:e7:a7:4b:07:3f:9f:f9:95:ea:3e:fb:57:
         e7:b4:0f:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPc5Kcphj4EI9kombeOmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDIxNGExYmYxZDNhZmQyZGQ2NmIyM2E5OTczMTA2YjVk
MzE2Y2EwHhcNMjUwNDEzMTMwMTQxWhcNMjUwNDE0MTMwMTQxWjAzMTEwLwYDVQQD
EyhhODZkZGE1NDlmMDMzYTY0MDVlMDk4ZTA2ZWZlYmZkMjdhZDA4YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+k3gt4OuYRi6+6dAW8iNEKC9Fev
+wz+g3tU0tc66ENqOYwV8wgPmLoow9sQ+mY00qb1tEReDYvKw+sGzcdGTebB5Zm3
l75yH+VNRJMZxyRARzrKGEAGCKXf7Gx1dBpxps8fdqUyk9WF+vtHF/1r2b+yO9aR
p8DQqa9BOaeEhgjgSOLt38L1FzS3hv3uMRam4Es6rl1qyldbUWykzF/u1kBbjBU+
K8Gw63/mWgW4Hq7YUAoGxI8uGcnlo4KlmNRx9s+r+ewt6Hn98sWtJ9vRmu33XFTQ
IWuBGBJ1I3J5OEqhrZnsNNsqN+SjO2odFtPFx3swzRnvECVBFTtVwvvsPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKht2lSfAzpkBeCY4G7+v9J60IpcMB8GA1UdIwQY
MBaAFAoCFKG/HTr9LdZrI6mXMQa10xbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQt
MzMyZWU1NDI1YzdhLzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQtMzMyZWU1NDI1Yzdh
LzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6yAv/QO
rsT44TROzOUjl7vDMJU7ZVUIE43VxoOPjU5OeTGCs548dx9ym7JCqHxMBvnf7HxJ
myNA2mxVVDmbboU8lOIorgwCVK2JqBlrs5fLxlLpaxMU4Mq9AD95x+ZqKf9dg45k
axXoVXvK45i6//ouhTB40sh9tr7cq3cc3Vw6+dYo9c7PwpfHMAN2cDSZkTI5R+cK
bE4PACAHUSeH2HVwp0AuyhNszseaHvBK6SgU6SYTSqGR8ILx4SSRp31MhG+R9sWB
koM9LFGdYIGi5uTBMwq/Ku1y0EntPljKxoapwgLc8dA9R9PWrnfCUaa856dLBz+f
+ZXqPvtX57QPDg==
-----END CERTIFICATE-----