Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File:                     0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier:          RLfxQgecMdeHJSzyp4HZ65EcZD6iK0uUVWfiQPko1qE=
Subject key identifier:   AE:9E:B9:BC:6F:E3:6B:E5:C0:73:9A:40:D3:DF:A7:34:B3:B9:D4:94
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer:       /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial:       01962E991B071D01F67541181E053BBFEA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: 93egTheFahnDmiNxnTFedA72KBrIr9Jh/QSyxoHblio=)
                          2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:07:1d:01:f6:75:41:18:1e:05:3b:bf:ea:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=ae9eb9bc6fe36be5c0739a40d3dfa734b3b9d494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:fc:a4:94:ca:fe:fc:c2:30:46:d6:61:7f:
                    45:74:23:55:78:42:0b:4a:90:8c:30:04:87:09:6b:
                    72:4e:57:f9:39:37:3b:67:2b:39:d4:cc:f3:0f:b8:
                    aa:dc:8d:87:62:ef:d8:df:76:a2:e5:f1:af:19:3a:
                    0b:4c:d9:fd:3a:ea:83:d8:f0:aa:7f:0e:e9:47:fb:
                    60:81:a3:f7:6d:ec:30:cf:60:7a:f2:88:25:a7:d6:
                    21:a3:1e:86:6c:4a:24:93:f9:5e:b3:4e:9a:8c:66:
                    1a:08:38:5e:5e:b3:b3:8f:c8:99:6f:75:ab:ab:13:
                    60:8b:30:cb:1d:2d:d2:e9:ed:79:0c:48:f9:58:5f:
                    88:01:5d:72:60:5d:e2:74:42:04:c0:4f:76:27:9e:
                    3e:a2:ae:ef:05:b8:67:23:fc:20:00:a4:3a:ee:64:
                    36:9e:1f:46:ed:81:6a:55:a7:22:01:b3:c8:c4:f7:
                    8f:a6:1f:be:79:33:00:16:21:2f:6a:98:62:24:e6:
                    9d:4d:65:4d:c0:35:4c:88:47:e7:60:bc:b7:51:fc:
                    94:b9:3f:2d:58:e5:cf:78:c5:5a:2c:44:49:d4:41:
                    be:f4:7d:b8:80:b7:7d:e2:2a:5f:28:50:15:ee:d1:
                    54:fa:77:13:ee:b1:42:98:96:21:5a:8a:b1:01:82:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:B9:BC:6F:E3:6B:E5:C0:73:9A:40:D3:DF:A7:34:B3:B9:D4:94
            X509v3 Authority Key Identifier:
                keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:0c:c1:fc:d7:fc:8f:c4:e8:c3:58:88:48:34:44:ae:5b:
         42:bf:4e:ba:36:0a:42:54:fa:10:65:23:f1:a0:b3:1d:02:f6:
         01:96:1c:c5:62:f0:9f:90:09:38:55:66:90:42:c4:32:b7:bd:
         7b:e7:f6:f8:d8:22:ae:df:0e:79:84:1a:3a:be:61:55:b0:3b:
         1e:70:3c:f3:98:15:47:7a:c8:a6:c9:bc:17:b6:95:6a:8f:27:
         20:8a:c8:38:b5:ac:71:8d:44:14:7b:67:92:e4:7a:54:ef:3c:
         54:d3:c4:b3:d8:c2:78:a8:a6:b9:74:b1:04:1c:56:de:ce:79:
         16:26:75:25:8c:b9:93:31:92:25:85:02:11:e2:01:24:98:e9:
         d0:72:4d:17:b5:3c:f0:c7:a3:56:c5:37:52:e5:55:68:47:2c:
         ed:26:65:a3:e6:1f:08:c0:2f:31:70:39:52:1d:1d:9f:7c:87:
         4d:e9:10:69:3e:85:0f:92:87:f9:77:43:4e:03:30:86:55:eb:
         f9:05:62:57:1a:7c:a1:f6:cd:69:fb:01:05:41:4e:2d:ac:c5:
         ca:cb:36:8e:6f:e0:96:90:26:ca:7b:95:27:f3:ef:28:ab:5e:
         e1:e6:43:b8:64:6a:83:31:09:54:8d:89:b5:7a:ce:ad:74:31:
         ee:a0:c7:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRsHHQH2dUEYHgU7v+obMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz
NTcyOTMwHhcNMjUwNDEzMTAwMTQ3WhcNMjUwNDE0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhhZTllYjliYzZmZTM2YmU1YzA3MzlhNDBkM2RmYTczNGIzYjlkNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE38pJTK/vzCMEbWYX9FdCNVeEIL
SpCMMASHCWtyTlf5OTc7Zys51MzzD7iq3I2HYu/Y33ai5fGvGToLTNn9OuqD2PCq
fw7pR/tggaP3bewwz2B68oglp9Yhox6GbEokk/les06ajGYaCDheXrOzj8iZb3Wr
qxNgizDLHS3S6e15DEj5WF+IAV1yYF3idEIEwE92J54+oq7vBbhnI/wgAKQ67mQ2
nh9G7YFqVaciAbPIxPePph++eTMAFiEvaphiJOadTWVNwDVMiEfnYLy3UfyUuT8t
WOXPeMVaLERJ1EG+9H24gLd94ipfKFAV7tFU+ncT7rFCmJYhWoqxAYKueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6eubxv42vlwHOaQNPfpzSzudSUMB8GA1UdIwQY
MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt
MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2
LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX4MwfzX
/I/E6MNYiEg0RK5bQr9OujYKQlT6EGUj8aCzHQL2AZYcxWLwn5AJOFVmkELEMre9
e+f2+Ngirt8OeYQaOr5hVbA7HnA885gVR3rIpsm8F7aVao8nIIrIOLWscY1EFHtn
kuR6VO88VNPEs9jCeKimuXSxBBxW3s55FiZ1JYy5kzGSJYUCEeIBJJjp0HJNF7U8
8MejVsU3UuVVaEcs7SZlo+YfCMAvMXA5Uh0dn3yHTekQaT6FD5KH+XdDTgMwhlXr
+QViVxp8ofbNafsBBUFOLazFyss2jm/glpAmynuVJ/PvKKte4eZDuGRqgzEJVI2J
tXrOrXQx7qDHtA==
-----END CERTIFICATE-----