Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File:                     3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier:          TWMA52XlWfFq9LOSpzL8eHm2GLAA8pmAgj/vSM///Ok=
Subject key identifier:   57:6F:C8:D5:8E:FD:A9:77:CA:D4:8C:97:E5:1B:68:A4:31:A6:F5:48
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer:       /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial:       01962F0728388B39824317B3D3C387B85B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number:          0E00
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: 3fQXjwuSyLxnBduU/I6gpXF3ASzubJYqg8HSsvBwzfk=)
                          2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:38:8b:39:82:43:17:b3:d3:c3:87:b8:5b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=576fc8d58efda977cad48c97e51b68a431a6f548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:98:34:4b:7e:47:20:31:47:79:8e:cc:13:
                    7b:cc:00:77:aa:f9:cc:68:6a:f1:4c:81:57:3a:1c:
                    9b:81:3a:87:76:44:ac:d0:50:6f:c6:ea:59:4d:a7:
                    51:48:c0:46:61:71:88:c4:a7:b4:63:f1:95:a3:bd:
                    f7:01:77:b8:81:cd:a2:50:23:79:47:29:b1:e6:e1:
                    96:45:30:3c:3f:af:6f:e3:9e:06:7e:57:9e:db:53:
                    2b:51:26:e2:02:73:e9:02:6e:bc:9a:9f:1d:a4:5f:
                    b2:27:ca:26:f8:70:8e:a8:63:6c:21:fa:9b:07:3b:
                    b7:6c:b7:b0:87:20:54:1e:b0:33:54:8a:62:50:1d:
                    4b:66:17:14:b9:d5:31:c7:55:24:70:0d:c7:05:46:
                    99:dc:85:9d:ad:35:d1:2e:0a:03:31:49:bc:ea:66:
                    db:b8:37:33:06:ce:66:79:b8:93:bd:63:a2:59:6a:
                    47:8d:0c:cd:ba:60:51:05:c1:5a:ee:26:00:ab:50:
                    69:19:9d:99:fc:9d:17:1b:32:97:e4:3b:37:5e:83:
                    e9:4e:04:07:61:bf:b3:43:6f:bf:ec:61:f5:a6:92:
                    a5:df:6b:d8:5d:cc:40:9d:b0:a7:85:6d:7e:20:d5:
                    b1:81:d9:a0:15:68:3c:be:9a:1b:53:e4:ec:3f:49:
                    9e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:C8:D5:8E:FD:A9:77:CA:D4:8C:97:E5:1B:68:A4:31:A6:F5:48
            X509v3 Authority Key Identifier:
                keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:f4:3f:fa:c0:fa:2f:b5:e3:5b:b3:83:2b:74:2a:a3:00:
         5e:d5:b3:0d:60:2b:aa:56:3f:b8:4e:2e:51:00:90:f3:12:5b:
         65:35:e8:8c:e1:7d:39:e0:bf:a2:70:6f:fd:1f:33:fd:4c:e9:
         db:6c:eb:96:2b:81:92:f8:2a:9c:0b:a1:3e:0c:30:35:a7:ee:
         b5:6b:15:aa:a9:d1:81:08:32:e1:65:43:92:24:8c:cc:4e:75:
         b2:61:c2:4e:8a:0e:99:07:9b:e2:c1:b2:54:7e:c6:49:57:bf:
         03:15:af:5b:d1:6e:13:2b:4c:57:d0:67:bc:30:d8:25:a2:07:
         70:7d:a0:15:1a:7e:7c:02:fc:31:1d:19:11:44:b8:30:00:1a:
         f0:5d:bf:54:54:27:41:5b:e0:fe:69:9b:9b:f4:65:b0:0d:0f:
         42:46:c3:8c:01:1f:a9:91:da:b5:15:9c:e7:60:bd:c6:84:ff:
         5e:0f:e7:66:1a:8f:fe:47:4f:dc:f6:a2:f8:0c:17:b2:d8:50:
         6c:b2:5b:2d:de:4e:b5:0c:ec:e9:74:a7:08:e9:90:9f:84:3a:
         b5:82:9c:8d:51:53:3a:ad:20:8c:17:9c:96:0c:8a:f2:4e:40:
         91:79:f1:6c:fa:48:1c:74:61:b9:24:3d:ca:35:4f:1f:a3:e6:
         25:dc:a2:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByg4izmCQxez08OHuFufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj
OWY1NjYwHhcNMjUwNDEzMTIwMjAwWhcNMjUwNDE0MTIwMjAwWjAzMTEwLwYDVQQD
Eyg1NzZmYzhkNThlZmRhOTc3Y2FkNDhjOTdlNTFiNjhhNDMxYTZmNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArliYNEt+RyAxR3mOzBN7zAB3qvnM
aGrxTIFXOhybgTqHdkSs0FBvxupZTadRSMBGYXGIxKe0Y/GVo733AXe4gc2iUCN5
Rymx5uGWRTA8P69v454Gflee21MrUSbiAnPpAm68mp8dpF+yJ8om+HCOqGNsIfqb
Bzu3bLewhyBUHrAzVIpiUB1LZhcUudUxx1UkcA3HBUaZ3IWdrTXRLgoDMUm86mbb
uDczBs5mebiTvWOiWWpHjQzNumBRBcFa7iYAq1BpGZ2Z/J0XGzKX5Ds3XoPpTgQH
Yb+zQ2+/7GH1ppKl32vYXcxAnbCnhW1+INWxgdmgFWg8vpobU+TsP0meuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdvyNWO/al3ytSMl+UbaKQxpvVIMB8GA1UdIwQY
MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt
NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri
LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8r0P/rA
+i+141uzgyt0KqMAXtWzDWArqlY/uE4uUQCQ8xJbZTXojOF9OeC/onBv/R8z/Uzp
22zrliuBkvgqnAuhPgwwNafutWsVqqnRgQgy4WVDkiSMzE51smHCTooOmQeb4sGy
VH7GSVe/AxWvW9FuEytMV9BnvDDYJaIHcH2gFRp+fAL8MR0ZEUS4MAAa8F2/VFQn
QVvg/mmbm/RlsA0PQkbDjAEfqZHatRWc52C9xoT/Xg/nZhqP/kdP3Pai+AwXsthQ
bLJbLd5OtQzs6XSnCOmQn4Q6tYKcjVFTOq0gjBeclgyK8k5AkXnxbPpIHHRhuSQ9
yjVPH6PmJdyiDw==
-----END CERTIFICATE-----