Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File:                     2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier:          aPoet6xwtf4neZPXoozCOJw5vwQ+xRo3dx/TjRuTw3g=
Subject key identifier:   2F:E8:E7:2D:F6:D6:08:C6:8B:83:5D:A0:EB:6C:43:AF:02:2D:F3:C4
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer:       /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial:       01962F3DE2127B5E67671E1DE6C4DC045677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number:          08B3
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: i13gMWKJ1wCipBVd+AJqO1LM5wivYhvna/t5WnTa9IU=)
                          2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e2:12:7b:5e:67:67:1e:1d:e6:c4:dc:04:56:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=2fe8e72df6d608c68b835da0eb6c43af022df3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:5f:99:28:71:d1:6a:79:d9:bb:a7:45:09:
                    fd:a1:c4:da:9b:28:1c:b6:ae:67:67:3d:80:ec:5c:
                    cb:bc:1b:8a:b3:a9:88:cc:a3:b8:f1:1a:06:49:5f:
                    ef:ff:a1:08:a1:00:9b:50:91:52:c6:e1:7a:78:0e:
                    10:6e:54:2f:a9:bf:c4:32:c4:1c:dc:dd:d3:30:dd:
                    ba:ed:fb:c2:b7:be:6d:dd:d6:a0:38:37:c4:54:a1:
                    ff:ea:a0:3e:a0:a9:5c:24:f3:db:8a:aa:95:d0:b5:
                    e7:7e:7e:68:50:67:e9:4e:39:00:e6:86:eb:2b:b9:
                    d5:77:cf:7d:b0:da:3c:63:f2:5a:77:ba:05:dd:de:
                    f3:37:f0:a9:32:cf:3f:f0:8e:85:3c:c0:12:30:31:
                    54:33:67:3d:3d:68:29:e7:3b:f1:ed:85:ca:0e:f4:
                    92:f9:b2:da:57:b6:b9:38:ad:9b:95:b7:43:4a:9b:
                    b8:38:49:9a:90:00:68:66:dd:3a:9b:a7:1b:e7:84:
                    1d:e1:2c:5c:22:98:36:27:4a:64:de:80:2d:14:0c:
                    dc:dc:d7:48:b1:96:74:9b:29:24:16:2b:55:d8:66:
                    32:e1:c3:dc:27:91:24:60:73:7a:31:14:9e:a3:1a:
                    bc:c1:f2:39:12:37:a6:d0:76:48:eb:f0:96:dc:86:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:E7:2D:F6:D6:08:C6:8B:83:5D:A0:EB:6C:43:AF:02:2D:F3:C4
            X509v3 Authority Key Identifier:
                keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:20:66:14:63:43:7f:4e:d3:45:78:bd:4f:87:23:cb:5d:
         d1:45:97:3e:24:b4:a3:bf:5d:e7:c6:84:86:45:cf:78:46:70:
         84:14:4b:98:3e:20:7c:88:b1:a5:02:b0:4f:1b:49:ad:3d:d2:
         ac:85:4e:31:12:67:a1:01:76:2d:14:02:27:3a:46:36:ab:ba:
         f5:33:b9:b9:1b:3c:1e:07:70:82:69:8b:52:c7:20:ba:fd:df:
         58:e5:2c:da:a9:9a:d5:34:c8:7f:be:85:88:69:6a:33:9c:e6:
         4d:be:66:f8:a0:39:ba:1e:78:5f:18:2c:24:60:5c:c1:85:42:
         00:58:f2:f4:fb:63:36:62:da:c9:29:7e:18:93:14:cb:61:17:
         18:a7:83:33:20:8f:e1:ee:bd:66:d2:f7:12:ca:df:c1:d5:25:
         09:fd:a6:00:22:7b:0d:70:43:7e:ab:f3:2d:db:fd:2a:52:a7:
         17:27:16:46:f0:eb:e9:8c:9c:3b:59:fd:e9:b0:28:7a:2c:4f:
         49:a6:c9:b7:0f:e3:e8:fd:a9:20:d6:79:c8:8a:d3:1f:54:d4:
         75:05:ba:48:76:db:d7:63:10:86:db:1a:54:93:26:11:7a:d3:
         ec:f6:4f:f0:c8:93:13:b0:7f:c0:a3:56:01:22:8e:91:09:34:
         0b:97:55:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeISe15nZx4d5sTcBFZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmI2ZjU2MGVjNTQyYWM2NmMzMDgwMjAzYzY2MzM1ODcz
YWU4ZWUwHhcNMjUwNDEzMTMwMTQ2WhcNMjUwNDE0MTMwMTQ2WjAzMTEwLwYDVQQD
EygyZmU4ZTcyZGY2ZDYwOGM2OGI4MzVkYTBlYjZjNDNhZjAyMmRmM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOxfmShx0Wp52bunRQn9ocTamygc
tq5nZz2A7FzLvBuKs6mIzKO48RoGSV/v/6EIoQCbUJFSxuF6eA4QblQvqb/EMsQc
3N3TMN267fvCt75t3dagODfEVKH/6qA+oKlcJPPbiqqV0LXnfn5oUGfpTjkA5obr
K7nVd899sNo8Y/Jad7oF3d7zN/CpMs8/8I6FPMASMDFUM2c9PWgp5zvx7YXKDvSS
+bLaV7a5OK2blbdDSpu4OEmakABoZt06m6cb54Qd4SxcIpg2J0pk3oAtFAzc3NdI
sZZ0mykkFitV2GYy4cPcJ5EkYHN6MRSeoxq8wfI5Ejem0HZI6/CW3IYtIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/o5y321gjGi4NdoOtsQ68CLfPEMB8GA1UdIwQY
MBaAFNv7b1YOxUKsZsMIAgPGYzWHOujuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAt
YjI1MDg1MDUxYWI4LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTgxNWItYWQwYi00YTA2LWJiZTAtYjI1MDg1MDUxYWI4
LzEvMl90dlZnN0ZRcXhtd3dnQ0E4WmpOWWM2Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSIgZhRj
Q39O00V4vU+HI8td0UWXPiS0o79d58aEhkXPeEZwhBRLmD4gfIixpQKwTxtJrT3S
rIVOMRJnoQF2LRQCJzpGNqu69TO5uRs8HgdwgmmLUscguv3fWOUs2qma1TTIf76F
iGlqM5zmTb5m+KA5uh54XxgsJGBcwYVCAFjy9PtjNmLaySl+GJMUy2EXGKeDMyCP
4e69ZtL3EsrfwdUlCf2mACJ7DXBDfqvzLdv9KlKnFycWRvDr6YycO1n96bAoeixP
SabJtw/j6P2pINZ5yIrTH1TUdQW6SHbb12MQhtsaVJMmEXrT7PZP8MiTE7B/wKNW
ASKOkQk0C5dVMQ==
-----END CERTIFICATE-----