Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File:                     DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier:          kVwpaV4YL9yCpBc5L/mmsWMgaRvA1Ia+4QQZizUsFow=
Subject key identifier:   94:5B:A0:36:F6:7C:20:01:C5:EF:87:81:76:24:88:E6:7A:A2:F1:14
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer:       /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial:       01962E2ABA510F6149299AB6574A14D57F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number:          0F64
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: 6eQif5LD57aBl8wxeUYfrtwmMEvrsUC6T1ptRcFdAwg=)
                          2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:51:0f:61:49:29:9a:b6:57:4a:14:d5:7f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=945ba036f67c2001c5ef8781762488e67aa2f114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:22:98:e5:71:6c:ea:3f:b2:33:0f:f7:c0:
                    79:c4:bf:ae:8e:82:ff:08:ed:e7:44:e3:9d:a1:7b:
                    df:bf:6a:34:a3:f8:16:10:8b:bf:fe:96:9a:da:27:
                    8c:b2:a3:ca:45:2c:c7:a1:12:ee:d1:5f:a9:a6:06:
                    06:3f:d8:4f:3f:28:7a:33:64:6e:03:44:79:8a:c1:
                    8d:59:6d:84:c8:77:14:ab:1e:8e:cb:44:0a:4a:17:
                    75:38:eb:b7:4d:1f:d1:98:72:76:a0:7e:48:80:80:
                    9b:0a:31:ae:91:04:f0:2a:63:a6:ee:ab:2f:82:fe:
                    13:e7:68:16:0b:6f:83:63:a3:c2:89:49:61:5c:71:
                    5f:0f:6d:79:a2:21:ba:28:d0:7d:46:df:d6:20:78:
                    39:d1:a3:a8:b2:de:84:b6:81:af:e3:1f:2e:7c:ed:
                    63:64:76:aa:f1:cf:6f:b3:75:8f:9c:6e:df:1b:74:
                    aa:0a:fc:56:ed:e2:05:00:22:94:c8:2d:67:8f:c1:
                    a2:af:ff:e1:91:35:ad:0e:87:f8:86:7b:ff:83:ae:
                    9f:fe:97:9c:40:ba:72:b6:30:4b:98:6a:92:21:55:
                    0e:4f:07:58:ec:5b:2b:55:eb:05:85:4e:ef:28:b7:
                    8f:86:68:b7:8b:9e:0a:7e:45:b8:8f:96:fd:53:1a:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5B:A0:36:F6:7C:20:01:C5:EF:87:81:76:24:88:E6:7A:A2:F1:14
            X509v3 Authority Key Identifier:
                keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d1:1f:ec:22:cc:40:0b:e0:c2:cc:ee:44:26:08:9e:19:ff:
         0f:00:aa:48:8f:a1:c4:f1:10:f4:a2:e4:e8:a5:91:9e:27:5f:
         75:a7:09:04:ce:e8:e8:15:b0:09:f8:e1:39:4a:8b:ae:ae:8f:
         83:62:a5:f9:b9:cc:3e:ed:08:be:cc:0a:d8:f9:ca:1c:22:ed:
         3a:96:f6:e8:ce:77:cc:56:89:12:f3:c9:4e:82:5a:ac:d8:ac:
         dc:50:55:40:1b:fe:5f:a6:67:bf:0b:d4:4c:59:b4:9e:4c:2b:
         56:ac:26:ac:42:f9:ae:e2:5b:21:01:35:53:a1:e2:32:b0:2d:
         2a:68:29:e4:cd:24:4f:eb:0f:af:5b:30:f9:0c:dd:76:77:48:
         b8:18:d3:4f:df:6f:fb:45:30:20:4a:2e:ce:74:1d:96:bc:35:
         f8:85:6b:8c:91:5e:8d:87:fc:64:92:2f:ec:05:ee:ad:56:6c:
         34:b3:f3:b6:a1:c9:b1:cd:f8:fe:2a:c5:8b:75:77:21:37:c6:
         7b:89:45:dc:6b:38:29:71:ac:53:dd:9a:34:f0:25:43:91:ae:
         9d:66:3e:af:c3:c5:41:5d:0b:b9:70:ae:be:33:20:be:46:c3:
         90:39:78:15:c1:b4:14:3c:bb:86:12:3d:1e:83:29:ff:0e:b4:
         78:03:e3:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKrpRD2FJKZq2V0oU1X+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjUwNDEzMDgwMTE0WhcNMjUwNDE0MDgwMTE0WjAzMTEwLwYDVQQD
Eyg5NDViYTAzNmY2N2MyMDAxYzVlZjg3ODE3NjI0ODhlNjdhYTJmMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RoimOVxbOo/sjMP98B5xL+ujoL/
CO3nROOdoXvfv2o0o/gWEIu//paa2ieMsqPKRSzHoRLu0V+ppgYGP9hPPyh6M2Ru
A0R5isGNWW2EyHcUqx6Oy0QKShd1OOu3TR/RmHJ2oH5IgICbCjGukQTwKmOm7qsv
gv4T52gWC2+DY6PCiUlhXHFfD215oiG6KNB9Rt/WIHg50aOost6EtoGv4x8ufO1j
ZHaq8c9vs3WPnG7fG3SqCvxW7eIFACKUyC1nj8Gir//hkTWtDof4hnv/g66f/pec
QLpytjBLmGqSIVUOTwdY7FsrVesFhU7vKLePhmi3i54KfkW4j5b9Uxq+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRboDb2fCABxe+HgXYkiOZ6ovEUMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9Ef7CLM
QAvgwszuRCYInhn/DwCqSI+hxPEQ9KLk6KWRnidfdacJBM7o6BWwCfjhOUqLrq6P
g2Kl+bnMPu0IvswK2PnKHCLtOpb26M53zFaJEvPJToJarNis3FBVQBv+X6ZnvwvU
TFm0nkwrVqwmrEL5ruJbIQE1U6HiMrAtKmgp5M0kT+sPr1sw+QzddndIuBjTT99v
+0UwIEouznQdlrw1+IVrjJFejYf8ZJIv7AXurVZsNLPztqHJsc34/irFi3V3ITfG
e4lF3Gs4KXGsU92aNPAlQ5GunWY+r8PFQV0LuXCuvjMgvkbDkDl4FcG0FDy7hhI9
HoMp/w60eAPjGg==
-----END CERTIFICATE-----