Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File:                     0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier:          /zD7wewRtj39BOmegOuh+nXSakNUD6CkJ6iiPOr9ogM=
Subject key identifier:   32:FC:5B:CA:FD:19:95:2A:B9:2C:31:A9:C0:DF:30:6F:BC:DC:68:60
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer:       /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial:       01962F3D7FD1C1A24DD14D4B2DCFA3B5F0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: VVZgOJQH5nuwXqD4m31K7WddY9pRclz1gsS0jvRNK10=)
                          2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7f:d1:c1:a2:4d:d1:4d:4b:2d:cf:a3:b5:f0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=32fc5bcafd19952ab92c31a9c0df306fbcdc6860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:82:13:7f:f1:65:a1:93:2a:9c:cb:9a:ce:
                    67:fe:5f:b4:c5:a2:85:07:75:8d:92:d2:f7:bb:80:
                    94:13:e4:d4:52:20:01:bf:b4:7d:13:37:b0:aa:2f:
                    9c:3f:aa:f1:de:ad:2c:30:bb:4d:e2:a4:c9:1b:33:
                    9c:d1:db:db:76:7c:aa:93:ac:c8:7b:fe:a1:9b:b3:
                    60:86:2e:e2:eb:14:54:96:35:b1:78:79:e2:f1:fa:
                    6d:34:69:a8:03:6e:54:0e:f3:c3:69:da:9c:e0:aa:
                    d6:50:9b:ca:85:b3:16:4d:3b:71:58:a8:08:d4:8c:
                    29:f3:89:97:34:d2:25:c1:c6:79:59:41:63:1d:a4:
                    9c:74:0a:5f:aa:ba:ac:d1:a6:63:49:34:88:65:d1:
                    99:9d:9d:23:1b:8f:b9:c6:df:62:cb:c6:b1:55:b3:
                    35:2a:3b:ea:7f:cb:6e:e7:d3:7a:ec:f1:ed:3b:31:
                    45:a3:58:a7:d2:cc:4e:2a:c7:e0:c5:88:a8:fe:22:
                    5a:45:c6:3f:f4:37:9f:a4:5d:10:ca:34:e4:0a:63:
                    65:59:32:32:f0:41:60:7a:ab:fb:b8:f8:b9:0b:32:
                    c1:7f:69:00:24:55:4b:51:1f:4e:a2:b0:9c:75:7b:
                    30:a1:79:1a:e4:d8:e1:0f:77:5f:84:c5:ed:00:80:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:5B:CA:FD:19:95:2A:B9:2C:31:A9:C0:DF:30:6F:BC:DC:68:60
            X509v3 Authority Key Identifier:
                keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:c7:3d:14:32:42:a6:42:57:61:0f:66:a2:a6:b4:42:8e:
         ff:f0:23:7b:7e:2e:0c:97:6d:4a:f3:47:2a:09:fe:83:9d:13:
         25:4e:03:e0:b6:ee:a7:78:db:83:e8:d9:f3:49:c5:14:f4:da:
         06:c6:43:39:c8:f2:29:4a:63:73:a0:b2:a3:a6:3a:c2:60:1b:
         af:b5:56:cc:a0:6b:47:bb:24:99:36:0e:0f:34:b1:af:51:20:
         c4:07:f0:fa:be:d0:73:d4:ad:11:48:d1:39:bc:83:6c:1c:c2:
         08:6f:78:01:cc:dc:16:72:5b:06:33:8a:34:e9:4d:89:eb:fc:
         33:7e:76:e4:1f:a0:08:7f:8e:f8:22:3d:51:10:45:3f:5e:c6:
         8d:80:ce:36:55:b0:b4:e6:44:bf:1a:04:00:5b:95:7a:7d:7f:
         3c:52:59:0c:a7:5f:f9:90:79:cd:b3:8e:9b:58:43:b4:03:7a:
         40:8b:6d:3a:b0:12:a3:4d:37:37:01:5e:88:b4:1b:ec:89:d8:
         de:cf:4f:e3:86:fb:cb:2c:d0:cc:88:d7:b0:2a:e1:ab:29:e4:
         26:ad:30:e1:8b:a1:86:11:5a:b2:28:a7:ef:d8:1b:19:07:44:
         ab:f3:c0:b8:23:ac:be:91:03:19:b3:80:3a:0c:fb:bc:b9:92:
         3e:d3:b0:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPX/RwaJN0U1LLc+jtfC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
EygzMmZjNWJjYWZkMTk5NTJhYjkyYzMxYTljMGRmMzA2ZmJjZGM2ODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9qCE3/xZaGTKpzLms5n/l+0xaKF
B3WNktL3u4CUE+TUUiABv7R9Ezewqi+cP6rx3q0sMLtN4qTJGzOc0dvbdnyqk6zI
e/6hm7Nghi7i6xRUljWxeHni8fptNGmoA25UDvPDadqc4KrWUJvKhbMWTTtxWKgI
1Iwp84mXNNIlwcZ5WUFjHaScdApfqrqs0aZjSTSIZdGZnZ0jG4+5xt9iy8axVbM1
Kjvqf8tu59N67PHtOzFFo1in0sxOKsfgxYio/iJaRcY/9DefpF0QyjTkCmNlWTIy
8EFgeqv7uPi5CzLBf2kAJFVLUR9OorCcdXswoXka5NjhD3dfhMXtAIA12wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL8W8r9GZUquSwxqcDfMG+83GhgMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0LHPRQy
QqZCV2EPZqKmtEKO//Aje34uDJdtSvNHKgn+g50TJU4D4Lbup3jbg+jZ80nFFPTa
BsZDOcjyKUpjc6Cyo6Y6wmAbr7VWzKBrR7skmTYODzSxr1EgxAfw+r7Qc9StEUjR
ObyDbBzCCG94AczcFnJbBjOKNOlNiev8M3525B+gCH+O+CI9URBFP17GjYDONlWw
tOZEvxoEAFuVen1/PFJZDKdf+ZB5zbOOm1hDtAN6QIttOrASo003NwFeiLQb7InY
3s9P44b7yyzQzIjXsCrhqynkJq0w4YuhhhFasiin79gbGQdEq/PAuCOsvpEDGbOA
Ogz7vLmSPtOwjQ==
-----END CERTIFICATE-----