Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File:                     9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier:          lGEq3SaCEH6npAoN6MipybaI+1iesJMxUZdc8sexJMU=
Subject key identifier:   D6:B2:0D:C6:19:F3:D5:3D:5A:E9:14:97:CE:8A:A9:21:92:74:21:D7
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer:       /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial:       01962F06C35A6011F50C5AFD847A4E6D9D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: GXdpyULRnHi8KgOD7YTRvMk5HZ23MOuoX5ZhRdxj3Qw=)
                          2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
                          3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c3:5a:60:11:f5:0c:5a:fd:84:7a:4e:6d:9d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=d6b20dc619f3d53d5ae91497ce8aa921927421d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:75:54:98:c7:c2:f4:35:ce:46:a7:96:f5:
                    26:a5:55:81:6b:40:4b:3d:71:91:39:ef:2d:0a:95:
                    1a:a1:48:7b:a4:82:82:db:cb:bc:8e:0c:7b:d1:ce:
                    c1:39:ff:61:c9:94:59:ec:1c:34:21:f7:54:ed:fc:
                    87:94:7d:4c:a6:78:30:e2:a5:34:f8:b5:fd:e7:4c:
                    ba:c9:0b:93:2c:9f:c6:15:4d:a4:5c:4f:f5:4f:c4:
                    7f:b4:e9:70:a1:54:6e:76:80:7b:7d:22:bf:c3:88:
                    e0:8f:12:a9:f5:1e:df:c7:8d:0a:85:3b:71:0c:02:
                    24:cb:d5:c2:47:d5:3d:0c:83:bd:e2:5d:56:ba:dc:
                    3a:80:a2:00:f3:fa:d2:d8:bf:0c:59:e1:f6:63:63:
                    cd:76:d5:65:b8:4c:8b:5d:c7:fd:dd:bf:76:96:15:
                    31:f1:2d:4d:d6:3a:6f:1c:ec:8d:37:93:da:4b:5d:
                    58:7f:d0:ef:21:61:9c:73:ef:68:b4:9c:06:c2:bc:
                    a5:d5:a4:90:7e:7b:75:bb:4f:ce:8e:d0:a0:86:84:
                    a2:e0:ef:f8:1a:26:da:56:4f:e2:f7:18:16:ae:fd:
                    03:87:44:7c:3c:67:a3:0d:8e:5a:fb:97:0b:85:8a:
                    64:a4:6d:49:77:c7:14:b0:02:f5:15:6b:2f:4e:8f:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B2:0D:C6:19:F3:D5:3D:5A:E9:14:97:CE:8A:A9:21:92:74:21:D7
            X509v3 Authority Key Identifier:
                keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:62:7e:43:6e:9e:aa:c3:64:d4:9b:4e:a3:86:3d:e2:4b:07:
         30:d8:3e:13:a3:6e:fe:0d:49:80:07:fa:f9:92:eb:2f:9f:2f:
         6d:68:eb:c0:3b:5c:fb:d7:e6:7d:33:a5:b7:2b:6c:b0:03:c9:
         8d:64:b0:33:37:06:19:79:e7:ae:e8:de:b6:cd:c4:43:19:6d:
         d4:13:63:52:bc:0f:18:90:09:70:25:12:ed:54:e6:f1:7a:72:
         c1:4e:86:5c:ea:7d:58:04:1e:34:96:51:ba:d5:eb:f2:c0:64:
         dc:61:72:45:91:15:2a:2b:4f:63:8c:5d:02:3d:da:7d:b8:fb:
         c8:1f:93:cc:ae:24:15:6b:95:bb:27:05:a9:9c:d0:3a:33:86:
         46:7c:ec:7b:7b:21:c4:dc:b7:33:45:d2:65:eb:59:66:31:f1:
         68:2f:7a:fa:22:4b:7d:41:f3:ff:61:6f:8b:5b:0c:a6:c1:4e:
         83:b4:1c:8a:c1:c7:30:b7:d1:ad:d7:97:f3:8d:c7:e9:d1:28:
         c0:e4:36:ec:9b:94:62:0b:11:92:de:af:35:98:b9:97:82:59:
         bb:28:c6:07:5b:f6:b2:64:28:22:2a:26:9d:54:ea:0e:b0:6a:
         9a:31:5c:5d:5d:98:6e:af:79:79:5b:92:8d:1a:66:54:c2:6a:
         40:ca:03:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsNaYBH1DFr9hHpObZ1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk
OGNiNmMwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
EyhkNmIyMGRjNjE5ZjNkNTNkNWFlOTE0OTdjZThhYTkyMTkyNzQyMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKN1VJjHwvQ1zkanlvUmpVWBa0BL
PXGROe8tCpUaoUh7pIKC28u8jgx70c7BOf9hyZRZ7Bw0IfdU7fyHlH1Mpngw4qU0
+LX950y6yQuTLJ/GFU2kXE/1T8R/tOlwoVRudoB7fSK/w4jgjxKp9R7fx40KhTtx
DAIky9XCR9U9DIO94l1Wutw6gKIA8/rS2L8MWeH2Y2PNdtVluEyLXcf93b92lhUx
8S1N1jpvHOyNN5PaS11Yf9DvIWGcc+9otJwGwryl1aSQfnt1u0/OjtCghoSi4O/4
GibaVk/i9xgWrv0Dh0R8PGejDY5a+5cLhYpkpG1Jd8cUsAL1FWsvTo8OZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNayDcYZ89U9WukUl86KqSGSdCHXMB8GA1UdIwQY
MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt
MGVjN2VjYjI1MDMwLzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw
LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGJ+Q26e
qsNk1JtOo4Y94ksHMNg+E6Nu/g1JgAf6+ZLrL58vbWjrwDtc+9fmfTOltytssAPJ
jWSwMzcGGXnnrujets3EQxlt1BNjUrwPGJAJcCUS7VTm8XpywU6GXOp9WAQeNJZR
utXr8sBk3GFyRZEVKitPY4xdAj3afbj7yB+TzK4kFWuVuycFqZzQOjOGRnzse3sh
xNy3M0XSZetZZjHxaC96+iJLfUHz/2Fvi1sMpsFOg7QcisHHMLfRrdeX843H6dEo
wOQ27JuUYgsRkt6vNZi5l4JZuyjGB1v2smQoIiomnVTqDrBqmjFcXV2Ybq95eVuS
jRpmVMJqQMoDlw==
-----END CERTIFICATE-----