Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File:                     IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier:          Cu75n2TfFOkyI5tUWLI9nzB5YZW+XfKLMSlZW577Kjw=
Subject key identifier:   83:C2:E8:DD:5D:94:22:77:49:EB:D5:64:2B:18:D6:C4:DC:3E:A1:67
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer:       /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial:       01962FAB33B0876750A317262DB9D53C2CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number:          03AF
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
                          2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: Xefn/qAi+g/2x9aTL6Q5Gzwo9qwjwI6S1iXl55Aa8uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:b0:87:67:50:a3:17:26:2d:b9:d5:3c:2c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=83c2e8dd5d94227749ebd5642b18d6c4dc3ea167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:39:fe:78:1a:9b:95:06:be:5b:88:4a:44:
                    db:ac:41:2a:d4:02:93:a2:d2:39:d9:5d:f3:95:ea:
                    9d:3d:2f:c0:0e:0e:4a:4b:88:16:06:14:75:37:e1:
                    87:2e:57:44:6d:a9:ad:05:9e:61:95:08:05:26:84:
                    8e:f7:51:38:3d:2c:8e:40:ad:08:0e:cc:ef:6c:ad:
                    77:7d:a3:03:00:70:8b:b3:64:5d:da:56:16:e3:20:
                    98:c7:6d:c9:c7:33:71:b2:de:01:f2:a9:c2:f0:79:
                    d6:b6:e1:6d:ff:46:5a:ec:18:c6:80:85:40:0a:4f:
                    8c:ff:70:ea:f2:61:82:7f:fe:60:b9:a5:b5:c6:45:
                    dd:60:cc:42:96:83:0d:45:35:5b:93:bd:1f:8e:6d:
                    30:11:fb:58:ba:08:bd:13:64:15:bf:51:0e:39:14:
                    0a:cc:35:a6:f0:26:a4:e8:0f:89:21:04:c2:e5:1a:
                    8c:c2:4d:25:08:02:dc:cd:c5:bf:df:ed:01:63:b2:
                    9a:74:42:41:fa:ff:b5:37:75:ba:a1:bf:55:a3:40:
                    82:40:10:91:48:75:a5:71:a7:6c:40:ad:ed:96:aa:
                    b5:a1:8c:b2:29:ec:fd:c7:1a:c7:cc:24:98:0c:04:
                    12:2e:52:57:f7:fc:95:81:fb:72:31:e9:23:04:52:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:E8:DD:5D:94:22:77:49:EB:D5:64:2B:18:D6:C4:DC:3E:A1:67
            X509v3 Authority Key Identifier:
                keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:76:c7:af:80:8d:f0:6e:72:f1:2c:1b:3e:1e:e7:30:b5:af:
         f8:a7:58:38:f0:1a:01:5d:8d:13:dd:76:72:5e:b4:ac:c4:bd:
         80:08:5d:6f:4b:c8:11:04:df:34:9d:dd:a2:8b:ff:37:a0:21:
         00:dd:b2:29:b5:bb:a6:f6:18:df:38:0c:ad:b9:5a:00:35:33:
         28:68:83:e1:b8:83:a4:33:fd:2a:2d:c4:8c:bb:ab:a2:ac:98:
         1b:c8:8b:f0:8c:19:37:67:02:14:0c:e8:01:08:5b:46:9c:04:
         94:5c:65:6c:5b:a2:5e:3d:15:e3:b3:fd:a2:c6:64:08:06:b9:
         c7:49:fb:47:7c:66:f8:53:44:22:47:87:07:28:d1:24:16:f7:
         8e:c0:76:32:28:67:54:a6:7e:bf:2a:72:34:4a:86:96:5b:6d:
         90:65:61:3a:ab:d2:56:46:7e:2d:4b:99:c0:21:d6:a8:94:41:
         05:f7:8d:e8:8f:bb:b6:43:87:62:f9:14:79:47:55:05:1b:5f:
         ec:54:c8:84:cd:7d:ad:4a:5d:75:04:b8:7b:68:6a:7f:fd:93:
         a8:05:09:0e:34:d6:1f:96:45:89:64:b0:61:9b:f0:b5:a1:0d:
         dd:f8:ac:8f:25:8e:3f:17:66:8d:94:34:24:17:5e:7a:aa:9a:
         b5:8a:04:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzOwh2dQoxcmLbnVPCzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh
ZjQ4NjEwHhcNMjUwNDEzMTUwMTExWhcNMjUwNDE0MTUwMTExWjAzMTEwLwYDVQQD
Eyg4M2MyZThkZDVkOTQyMjc3NDllYmQ1NjQyYjE4ZDZjNGRjM2VhMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkA5/ngam5UGvluISkTbrEEq1AKT
otI52V3zleqdPS/ADg5KS4gWBhR1N+GHLldEbamtBZ5hlQgFJoSO91E4PSyOQK0I
DszvbK13faMDAHCLs2Rd2lYW4yCYx23JxzNxst4B8qnC8HnWtuFt/0Za7BjGgIVA
Ck+M/3Dq8mGCf/5guaW1xkXdYMxCloMNRTVbk70fjm0wEftYugi9E2QVv1EOORQK
zDWm8Cak6A+JIQTC5RqMwk0lCALczcW/3+0BY7KadEJB+v+1N3W6ob9Vo0CCQBCR
SHWlcadsQK3tlqq1oYyyKez9xxrHzCSYDAQSLlJX9/yVgftyMekjBFL+3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPC6N1dlCJ3SevVZCsY1sTcPqFnMB8GA1UdIwQY
MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt
MTg0NTg2NjAyODg3LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3
LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnbHr4CN
8G5y8SwbPh7nMLWv+KdYOPAaAV2NE912cl60rMS9gAhdb0vIEQTfNJ3doov/N6Ah
AN2yKbW7pvYY3zgMrblaADUzKGiD4biDpDP9Ki3EjLuroqyYG8iL8IwZN2cCFAzo
AQhbRpwElFxlbFuiXj0V47P9osZkCAa5x0n7R3xm+FNEIkeHByjRJBb3jsB2Mihn
VKZ+vypyNEqGllttkGVhOqvSVkZ+LUuZwCHWqJRBBfeN6I+7tkOHYvkUeUdVBRtf
7FTIhM19rUpddQS4e2hqf/2TqAUJDjTWH5ZFiWSwYZvwtaEN3fisjyWOPxdmjZQ0
JBdeeqqatYoE3g==
-----END CERTIFICATE-----