Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File:                     0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier:          1cqRVNkhT2GgSYMqTKhvCvL/BrUROX9ao1/Q13I1gKU=
Subject key identifier:   F3:81:A4:DB:22:15:0A:9B:3C:CD:A6:C5:C7:92:B7:E5:4B:05:79:AA
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer:       /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial:       01962F06C25EC864E376CE72D4B3DD044D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number:          0DD1
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: /BO63K9L3tJtUMPz0roAETQwUeUD4+4FJ+/5+TuAOtA=)
                          2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
                          3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c2:5e:c8:64:e3:76:ce:72:d4:b3:dd:04:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=f381a4db22150a9b3ccda6c5c792b7e54b0579aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:4f:13:8a:75:68:d7:1a:4b:61:69:52:b4:
                    41:fd:fe:0d:25:9f:e4:cc:fa:cd:ac:be:e6:3d:8d:
                    d6:67:16:98:af:e4:23:52:40:cf:a5:d1:78:b6:23:
                    a4:01:d2:e9:c7:21:ef:c3:11:20:20:7f:f5:c2:36:
                    b4:1e:39:45:ec:69:b1:98:8b:ad:cf:90:06:75:fe:
                    3d:75:7a:e2:a1:d7:2b:9e:ed:37:cb:d9:b5:55:c2:
                    76:fe:67:45:0b:7c:ac:f3:45:61:92:81:d2:68:6e:
                    e4:8e:f3:07:e6:62:79:a1:81:78:ef:67:7b:2d:4b:
                    c2:c5:a5:4a:15:50:63:a5:0d:cb:c1:3f:16:40:45:
                    06:a6:13:4e:97:85:92:56:66:1d:35:35:d0:57:fd:
                    8d:0f:a4:0f:b3:ae:62:ab:6b:4f:3f:a2:10:15:a8:
                    68:ec:b7:48:f3:1c:58:36:e8:68:83:e1:2c:f8:fb:
                    e1:d0:18:16:b2:03:c2:65:a6:c7:a2:33:2e:e9:c3:
                    f3:e1:37:a6:f1:ff:33:73:96:53:09:b7:51:1f:6d:
                    7b:d1:81:61:08:b5:7a:db:be:89:00:64:08:1e:3b:
                    e2:77:7e:f8:61:6b:f7:e9:32:51:7b:e2:9b:e7:18:
                    fc:19:d5:0a:77:ef:ac:ad:36:c4:95:b3:c0:04:e9:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:81:A4:DB:22:15:0A:9B:3C:CD:A6:C5:C7:92:B7:E5:4B:05:79:AA
            X509v3 Authority Key Identifier:
                keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:33:8d:d8:04:4b:b7:29:60:60:86:97:f0:a2:43:3f:54:
         84:bc:79:72:a6:bd:2e:69:c6:a4:a8:06:e9:37:52:05:a3:51:
         96:e5:ed:e5:bb:74:db:90:94:4c:a8:25:e3:38:7d:0e:d3:8b:
         b0:39:95:76:97:3a:63:78:98:da:f4:6d:14:05:e1:62:a6:e1:
         b7:30:8c:34:fa:c2:54:77:8c:b7:8f:a3:65:0e:5b:50:c7:da:
         a9:d6:1e:62:15:7d:1b:65:6f:3b:97:a5:47:20:54:5c:94:6d:
         3b:7e:0e:b0:39:ce:9f:34:dc:e3:08:21:13:91:e1:60:19:84:
         67:c0:ea:69:ba:1e:44:05:a9:bf:86:65:e5:0a:44:66:aa:a7:
         f4:d3:74:4e:c1:7a:a6:d0:d3:9b:f7:a3:31:de:93:52:95:07:
         46:aa:ab:c4:8c:ea:0c:38:5c:6a:d0:ae:72:13:0a:ef:16:ec:
         6e:54:e9:89:62:bd:b0:20:35:b0:aa:cd:99:bc:80:80:80:81:
         66:68:7d:d8:df:06:08:37:00:18:f0:02:0f:ee:98:00:9c:cf:
         90:93:d5:ec:7d:10:42:a3:c4:52:bb:f0:3c:a4:98:84:3e:72:
         3f:98:1e:45:bc:b4:dd:65:ba:26:49:4b:8c:46:8d:41:26:b5:
         7c:d2:83:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsJeyGTjds5y1LPdBE0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3
YTg3MmMwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
EyhmMzgxYTRkYjIyMTUwYTliM2NjZGE2YzVjNzkyYjdlNTRiMDU3OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pVPE4p1aNcaS2FpUrRB/f4NJZ/k
zPrNrL7mPY3WZxaYr+QjUkDPpdF4tiOkAdLpxyHvwxEgIH/1wja0HjlF7GmxmIut
z5AGdf49dXriodcrnu03y9m1VcJ2/mdFC3ys80VhkoHSaG7kjvMH5mJ5oYF472d7
LUvCxaVKFVBjpQ3LwT8WQEUGphNOl4WSVmYdNTXQV/2ND6QPs65iq2tPP6IQFaho
7LdI8xxYNuhog+Es+Pvh0BgWsgPCZabHojMu6cPz4Tem8f8zc5ZTCbdRH2170YFh
CLV6276JAGQIHjvid374YWv36TJRe+Kb5xj8GdUKd++srTbElbPABOkCywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOBpNsiFQqbPM2mxceSt+VLBXmqMB8GA1UdIwQY
MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It
NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk
LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxUzjdgE
S7cpYGCGl/CiQz9UhLx5cqa9LmnGpKgG6TdSBaNRluXt5bt025CUTKgl4zh9DtOL
sDmVdpc6Y3iY2vRtFAXhYqbhtzCMNPrCVHeMt4+jZQ5bUMfaqdYeYhV9G2VvO5el
RyBUXJRtO34OsDnOnzTc4wghE5HhYBmEZ8DqaboeRAWpv4Zl5QpEZqqn9NN0TsF6
ptDTm/ejMd6TUpUHRqqrxIzqDDhcatCuchMK7xbsblTpiWK9sCA1sKrNmbyAgICB
Zmh92N8GCDcAGPACD+6YAJzPkJPV7H0QQqPEUrvwPKSYhD5yP5geRby03WW6JklL
jEaNQSa1fNKDyg==
-----END CERTIFICATE-----