Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File:                     ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier:          ox6LFCgJIlaERkv8h9ScK0JjrrAZwts4NmZEeWIhQXQ=
Subject key identifier:   DD:39:27:A5:38:04:FC:A7:15:D4:A5:9B:67:60:7E:05:5E:77:2B:EB
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer:       /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial:       01962E617BDBA79F1E5698ADBDA6F40857F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number:          0FC5
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: NTCcMK8rEMLSDd2AvbbugZkDpIoIaqvRZLYSewFxBPA=)
                          2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7b:db:a7:9f:1e:56:98:ad:bd:a6:f4:08:57:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=dd3927a53804fca715d4a59b67607e055e772beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:5d:f7:5b:48:21:6b:10:cb:46:fc:54:9a:
                    97:1d:c5:19:c2:82:bb:14:3e:7c:d0:ed:fa:c1:b1:
                    00:d9:60:71:bc:c1:55:e2:31:17:55:c2:8e:93:8e:
                    6a:84:51:65:69:8a:99:12:b2:f0:b9:d4:63:16:c9:
                    3b:c6:ec:36:76:c8:bd:2a:ec:cd:27:81:df:0f:3a:
                    02:c7:4a:1f:be:43:4a:b9:af:92:2e:19:0a:32:53:
                    92:47:e0:dc:c5:4e:ec:97:6d:e6:84:da:cb:dd:fe:
                    37:48:3b:50:5c:53:74:f7:66:cd:6a:cb:c4:00:20:
                    aa:87:23:97:ff:eb:d3:9c:6c:39:f9:99:e6:da:d8:
                    3f:86:fb:bc:21:8d:77:a5:00:27:50:9a:3e:0e:a4:
                    2a:bc:9e:e3:f7:3f:c4:fc:58:9d:21:c2:d2:aa:18:
                    72:aa:f1:37:78:dc:74:eb:07:90:0f:ea:24:51:99:
                    91:5f:85:43:3f:4e:da:58:b2:0b:86:3b:f6:75:f6:
                    4a:ab:bd:6d:63:0a:d2:c8:a1:20:c1:91:79:75:cf:
                    29:8e:0a:f4:c4:37:03:8f:10:3e:dd:41:2f:0f:cd:
                    14:d3:57:8e:8b:fc:2f:42:31:47:c5:c1:e9:6e:1e:
                    e5:9f:2f:dc:20:71:6e:03:e9:7f:e8:51:50:b6:e1:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:27:A5:38:04:FC:A7:15:D4:A5:9B:67:60:7E:05:5E:77:2B:EB
            X509v3 Authority Key Identifier:
                keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:67:fd:69:f1:ef:fa:ad:5e:43:ed:98:23:bf:8a:63:52:6c:
         86:c4:29:eb:36:87:59:bf:da:e8:64:57:24:04:76:ae:c5:89:
         cf:eb:06:f7:02:34:fb:f5:ae:aa:06:5a:ad:e5:22:43:fd:68:
         4b:e7:4b:42:d3:e3:a3:0c:38:4c:fe:13:06:9d:8a:44:a0:92:
         66:73:8a:3b:e0:7b:7b:01:cd:68:f0:04:a7:cf:2d:e9:d1:71:
         d7:0c:1a:e7:6e:21:14:43:43:8a:62:1e:a8:c3:79:a2:f1:73:
         7c:81:3a:e8:c0:a6:41:a9:e2:8e:bb:95:23:5d:42:b9:72:b8:
         73:61:9c:33:81:5d:e9:57:2b:b1:5c:83:df:85:d3:b2:c1:28:
         7c:9a:61:e9:e5:f1:a0:9e:a5:48:84:d9:6b:a3:16:e3:76:60:
         b5:bc:af:83:b3:af:c8:e8:ec:76:80:41:52:d2:e1:8c:06:0c:
         ce:44:cf:c1:4e:a3:33:2a:7e:14:7e:09:56:38:50:c1:47:8c:
         90:ea:00:79:8a:a7:16:b2:76:bd:40:0c:21:2d:7c:10:62:15:
         5a:9b:02:a6:c9:0b:aa:5a:eb:0c:04:91:f6:73:b5:83:c3:3c:
         91:a3:be:b3:ed:77:46:28:f1:3a:6d:3c:39:27:1a:04:cc:84:
         f4:94:0b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXvbp58eVpitvab0CFfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2YwM2JmMTQ1MWVlZTYyZWE3MjQwNWZhOGI2NGFiZmFl
M2M0ZTkwHhcNMjUwNDEzMDkwMTAyWhcNMjUwNDE0MDkwMTAyWjAzMTEwLwYDVQQD
EyhkZDM5MjdhNTM4MDRmY2E3MTVkNGE1OWI2NzYwN2UwNTVlNzcyYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLBd91tIIWsQy0b8VJqXHcUZwoK7
FD580O36wbEA2WBxvMFV4jEXVcKOk45qhFFlaYqZErLwudRjFsk7xuw2dsi9KuzN
J4HfDzoCx0ofvkNKua+SLhkKMlOSR+DcxU7sl23mhNrL3f43SDtQXFN092bNasvE
ACCqhyOX/+vTnGw5+Znm2tg/hvu8IY13pQAnUJo+DqQqvJ7j9z/E/FidIcLSqhhy
qvE3eNx06weQD+okUZmRX4VDP07aWLILhjv2dfZKq71tYwrSyKEgwZF5dc8pjgr0
xDcDjxA+3UEvD80U01eOi/wvQjFHxcHpbh7lny/cIHFuA+l/6FFQtuFSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN05J6U4BPynFdSlm2dgfgVedyvrMB8GA1UdIwQY
MBaAFBE/A78UUe7mLqckBfqLZKv648TpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQt
ZGViZTU3NDdiMjkzLzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQtZGViZTU3NDdiMjkz
LzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGf9afHv
+q1eQ+2YI7+KY1JshsQp6zaHWb/a6GRXJAR2rsWJz+sG9wI0+/WuqgZareUiQ/1o
S+dLQtPjoww4TP4TBp2KRKCSZnOKO+B7ewHNaPAEp88t6dFx1wwa524hFENDimIe
qMN5ovFzfIE66MCmQanijruVI11CuXK4c2GcM4Fd6VcrsVyD34XTssEofJph6eXx
oJ6lSITZa6MW43Zgtbyvg7OvyOjsdoBBUtLhjAYMzkTPwU6jMyp+FH4JVjhQwUeM
kOoAeYqnFrJ2vUAMIS18EGIVWpsCpskLqlrrDASR9nO1g8M8kaO+s+13RijxOm08
OScaBMyE9JQLcg==
-----END CERTIFICATE-----