Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File:                     4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier:          wO0NtMibnIgxZr0asKpkwSZVxuRvhOzaicWt+4vdtg8=
Subject key identifier:   F8:DB:B0:12:5E:E4:25:73:9B:8D:1F:93:0D:C3:00:A6:25:F1:21:BA
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer:       /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial:       01962E62008CC8A7DC0BFC5291C2C03647E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number:          03DC
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: 49fjegeH7ia7evo06SNV4k9rD/7QXgWmwslKG8fQgUo=)
                          2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:00:8c:c8:a7:dc:0b:fc:52:91:c2:c0:36:47:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=f8dbb0125ee425739b8d1f930dc300a625f121ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:09:14:63:46:86:92:88:9a:35:b3:63:c9:
                    7b:14:13:84:4c:eb:07:06:33:7c:ea:75:a3:2f:90:
                    6e:8d:7e:ff:8e:55:86:c4:3f:90:c0:fc:9c:3d:03:
                    14:5d:21:b9:94:61:57:7a:04:7d:8d:ed:f2:83:9e:
                    58:a8:39:82:ad:04:dc:67:7c:42:2d:66:a4:a7:95:
                    55:33:87:49:5d:70:6c:5b:88:c7:e6:0e:f5:7e:45:
                    5b:ef:e8:e2:fd:9d:3b:1c:c7:33:4b:29:b2:ef:be:
                    a7:e8:9d:ee:74:c0:be:92:76:d2:d7:12:aa:5f:d8:
                    05:04:fe:f1:93:67:e8:7a:79:32:c8:b3:d9:b0:df:
                    5b:3d:dd:95:7d:cf:02:97:9d:e4:0c:cd:41:24:a3:
                    8e:53:d8:70:7f:40:7f:f9:ed:9b:b9:bb:4d:40:ee:
                    c2:6e:27:2c:fa:37:cf:43:62:af:dd:47:e3:de:4a:
                    69:56:b8:2c:18:0a:c4:20:c2:49:43:e1:5a:09:a8:
                    80:28:a5:55:86:2b:9e:b5:24:c3:cf:cb:4c:04:e3:
                    5e:2a:f9:61:ae:5c:7f:bc:ea:27:9c:60:34:33:79:
                    4b:57:8c:a3:38:b8:1a:1d:c1:fa:d6:8f:3d:5a:f9:
                    2d:ee:44:33:f4:2d:21:10:54:2d:6e:89:7a:c0:79:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DB:B0:12:5E:E4:25:73:9B:8D:1F:93:0D:C3:00:A6:25:F1:21:BA
            X509v3 Authority Key Identifier:
                keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:34:1e:99:c2:7b:cc:c3:92:27:30:cf:ce:9b:44:b4:14:
         51:fc:8b:59:1e:c6:f2:5b:c1:e9:a7:b5:66:1d:36:95:25:c6:
         c8:d8:6b:67:98:a6:d0:09:5a:4d:ea:6a:d2:3b:4d:1c:8a:3e:
         45:4d:ee:a6:ed:44:d1:fb:4b:71:55:39:d8:d0:6c:a2:56:65:
         36:4b:9a:a8:ab:89:88:14:55:dd:66:31:19:70:3e:c7:f5:38:
         38:e9:22:71:70:0a:f2:29:47:65:64:9e:3e:ec:9f:bb:6a:c9:
         ff:1c:a1:94:10:30:fb:f6:fa:b4:ed:04:d0:13:e2:fc:74:91:
         e9:55:e6:ca:9c:23:1c:74:00:4f:1e:e7:59:b1:93:46:d4:67:
         b8:19:f9:e4:97:78:f4:55:34:73:d7:93:f5:9f:05:10:f6:c5:
         8c:42:6e:a7:6a:90:e4:bf:05:18:a5:1b:71:a9:05:0d:e3:92:
         4b:96:5c:5d:5f:49:a8:b9:8e:dc:82:b6:d7:0d:fc:81:d1:fe:
         84:c4:b9:b9:48:51:d3:65:4d:86:ae:41:e6:fe:ce:fe:78:1c:
         6c:4b:41:91:69:cc:e0:52:71:71:e3:a8:f4:a4:51:90:fe:7d:
         07:1d:05:78:aa:36:5f:20:80:13:5e:aa:19:e6:6f:76:9e:56:
         cc:e3:52:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgCMyKfcC/xSkcLANkfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
EyhmOGRiYjAxMjVlZTQyNTczOWI4ZDFmOTMwZGMzMDBhNjI1ZjEyMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZAJFGNGhpKImjWzY8l7FBOETOsH
BjN86nWjL5BujX7/jlWGxD+QwPycPQMUXSG5lGFXegR9je3yg55YqDmCrQTcZ3xC
LWakp5VVM4dJXXBsW4jH5g71fkVb7+ji/Z07HMczSymy776n6J3udMC+knbS1xKq
X9gFBP7xk2foenkyyLPZsN9bPd2Vfc8Cl53kDM1BJKOOU9hwf0B/+e2bubtNQO7C
bics+jfPQ2Kv3Ufj3kppVrgsGArEIMJJQ+FaCaiAKKVVhiuetSTDz8tMBONeKvlh
rlx/vOonnGA0M3lLV4yjOLgaHcH61o89Wvkt7kQz9C0hEFQtbol6wHmKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjbsBJe5CVzm40fkw3DAKYl8SG6MB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJo0HpnC
e8zDkicwz86bRLQUUfyLWR7G8lvB6ae1Zh02lSXGyNhrZ5im0AlaTepq0jtNHIo+
RU3upu1E0ftLcVU52NBsolZlNkuaqKuJiBRV3WYxGXA+x/U4OOkicXAK8ilHZWSe
Puyfu2rJ/xyhlBAw+/b6tO0E0BPi/HSR6VXmypwjHHQATx7nWbGTRtRnuBn55Jd4
9FU0c9eT9Z8FEPbFjEJup2qQ5L8FGKUbcakFDeOSS5ZcXV9JqLmO3IK21w38gdH+
hMS5uUhR02VNhq5B5v7O/ngcbEtBkWnM4FJxceOo9KRRkP59Bx0FeKo2XyCAE16q
GeZvdp5WzONS8g==
-----END CERTIFICATE-----