Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File:                     Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier:          76tdOd7Afxo7pm/NJnahqdXYMPNGmDhv3Z11geRpysk=
Subject key identifier:   4D:B9:67:E3:D7:B7:BA:3A:FF:1A:36:18:35:F7:4D:59:ED:22:CE:76
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer:       /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial:       01962E991F02F2BA4E47563A0DF9F38D1206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: QOCqlo1XI+CcdvrXOlBqUecVYYIMJ4B3SVb6JpIjVyg=)
                          2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1f:02:f2:ba:4e:47:56:3a:0d:f9:f3:8d:12:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=4db967e3d7b7ba3aff1a361835f74d59ed22ce76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:00:1b:0e:20:0c:26:fc:b5:4a:13:db:5a:
                    ab:36:0b:7f:ca:00:e3:db:a6:c2:fd:30:dc:80:b4:
                    e9:e5:56:0c:e7:74:ab:97:4b:16:21:63:29:fb:30:
                    3c:c2:ec:e2:c4:0a:93:e7:02:49:a9:58:9f:5c:b6:
                    fd:63:01:24:67:b7:94:b9:b4:1c:d9:c8:34:bc:a5:
                    2f:9e:32:c1:ff:48:b8:a7:33:7b:77:b1:d3:79:a4:
                    15:2f:d9:87:43:98:c7:41:6f:5b:19:e5:66:b3:86:
                    78:d0:9d:66:96:8b:a1:52:f5:4d:18:7c:e0:6f:bf:
                    f5:a8:80:4a:91:93:84:1c:fd:1e:90:51:c0:f0:9a:
                    e6:5b:6c:e9:23:05:7c:08:4c:50:72:25:3b:5a:c2:
                    86:63:1b:36:9e:8d:24:e8:48:8f:77:91:a4:aa:ef:
                    11:ff:d4:30:3a:2c:5b:f3:a8:f4:af:46:8f:a0:d1:
                    f6:9f:3e:83:11:5b:63:5a:0c:42:79:39:1c:2a:9b:
                    1c:86:af:99:d8:af:6e:df:ed:22:4b:e8:bb:16:29:
                    cd:3d:0a:c8:bc:b7:7f:81:23:dc:37:c9:09:60:84:
                    21:b6:8f:5c:24:d5:ab:62:03:cc:e2:4e:c1:5d:ad:
                    b8:11:a8:6a:10:34:f4:ff:f6:50:d2:7d:a8:55:63:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:67:E3:D7:B7:BA:3A:FF:1A:36:18:35:F7:4D:59:ED:22:CE:76
            X509v3 Authority Key Identifier:
                keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:18:d8:f9:1a:5d:d1:52:d3:7e:25:59:81:b5:68:89:da:65:
         60:c9:00:32:4e:ce:4f:a7:e3:bb:63:ce:2f:61:87:f9:85:dc:
         38:51:e2:70:df:44:5b:62:6d:46:10:08:fd:83:00:46:0f:09:
         63:92:24:36:ee:0e:1c:00:0d:bf:c7:30:78:aa:49:b8:24:fe:
         86:fc:be:7d:96:5a:8e:54:21:8d:65:2f:de:2a:08:7b:20:9f:
         1c:79:a3:0a:08:6e:5c:b4:ed:9d:4e:72:a3:24:0b:b1:76:fc:
         34:ed:df:58:45:81:85:08:6d:13:77:5c:90:e5:97:6a:3f:6c:
         23:fa:ed:50:a5:d9:08:a5:8c:6b:d1:ff:39:de:83:97:f4:24:
         7b:00:9f:83:f6:54:c1:97:b6:14:68:23:a6:ca:c6:ce:7b:6c:
         f5:74:53:e7:41:ea:18:62:a5:36:83:d4:0c:d2:4d:5e:2c:f5:
         32:47:08:a4:3f:b7:f3:f7:e2:94:ac:b7:3f:e6:c4:1c:45:cf:
         84:4e:dd:6e:60:8e:68:a5:80:f6:00:d6:7c:a6:e9:72:26:5c:
         52:11:60:09:7c:8e:8a:b5:8d:05:5b:ac:7a:02:6f:d0:e1:c5:
         44:b7:c2:c2:11:0b:7d:b8:c6:a7:09:26:c3:af:75:65:e0:1c:
         13:ff:7a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumR8C8rpOR1Y6DfnzjRIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhM2UwOGVmM2Q3NTRiYzZhZmE5MWZhNmMxMDAyMGY1ODUw
NWMxNjEwHhcNMjUwNDEzMTAwMTQ4WhcNMjUwNDE0MTAwMTQ4WjAzMTEwLwYDVQQD
Eyg0ZGI5NjdlM2Q3YjdiYTNhZmYxYTM2MTgzNWY3NGQ1OWVkMjJjZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPEAGw4gDCb8tUoT21qrNgt/ygDj
26bC/TDcgLTp5VYM53Srl0sWIWMp+zA8wuzixAqT5wJJqVifXLb9YwEkZ7eUubQc
2cg0vKUvnjLB/0i4pzN7d7HTeaQVL9mHQ5jHQW9bGeVms4Z40J1mlouhUvVNGHzg
b7/1qIBKkZOEHP0ekFHA8JrmW2zpIwV8CExQciU7WsKGYxs2no0k6EiPd5Gkqu8R
/9QwOixb86j0r0aPoNH2nz6DEVtjWgxCeTkcKpschq+Z2K9u3+0iS+i7FinNPQrI
vLd/gSPcN8kJYIQhto9cJNWrYgPM4k7BXa24EahqEDT0//ZQ0n2oVWMsgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE25Z+PXt7o6/xo2GDX3TVntIs52MB8GA1UdIwQY
MBaAFAo+CO89dUvGr6kfpsEAIPWFBcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUt
NGQxZDM3ZGM4MWI0LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUtNGQxZDM3ZGM4MWI0
LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxjY+Rpd
0VLTfiVZgbVoidplYMkAMk7OT6fju2POL2GH+YXcOFHicN9EW2JtRhAI/YMARg8J
Y5IkNu4OHAANv8cweKpJuCT+hvy+fZZajlQhjWUv3ioIeyCfHHmjCghuXLTtnU5y
oyQLsXb8NO3fWEWBhQhtE3dckOWXaj9sI/rtUKXZCKWMa9H/Od6Dl/QkewCfg/ZU
wZe2FGgjpsrGznts9XRT50HqGGKlNoPUDNJNXiz1MkcIpD+38/filKy3P+bEHEXP
hE7dbmCOaKWA9gDWfKbpciZcUhFgCXyOirWNBVusegJv0OHFRLfCwhELfbjGpwkm
w691ZeAcE/96EQ==
-----END CERTIFICATE-----