Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File:                     1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier:          E7smwDZTwBKCRpfdfA/lhin9oH3MPJJ1aFUzRGsgYi0=
Subject key identifier:   3A:96:4D:2C:71:C0:4F:AA:E7:2B:EE:E8:25:63:42:C1:08:15:45:17
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer:       /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial:       01962E99168D8D5FB1EE6C4F61D7EF00575E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number:          0B92
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: qrv86YmmJ3njU1sclRHIG5sLQ+OfBDLY/OilObCgSJw=)
                          2: 1-eEKcv2-HlB3jOunD8sGEQP3iuo.roa (hash: 1bxmvhYpMOeABQ7wYp60dzQC7ktJL7nqMNn/zKkAUDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:8d:8d:5f:b1:ee:6c:4f:61:d7:ef:00:57:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=3a964d2c71c04faae72beee8256342c108154517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:a9:a3:8b:e4:2e:67:d0:fd:1d:87:41:3c:
                    c7:6a:08:2c:31:ad:7a:e0:a9:a9:b9:82:51:d9:3e:
                    ca:ed:77:3b:aa:3c:20:4a:fd:55:23:ea:d0:e9:66:
                    b2:af:4c:0e:a6:43:f5:6c:65:ba:d4:0d:2f:3d:fe:
                    e8:e2:b1:c8:d0:87:fd:f5:67:83:4a:a6:62:17:f5:
                    2f:eb:07:52:a6:fe:bf:0b:45:63:cd:28:bb:c7:07:
                    8b:86:9d:8b:a5:bb:3c:e3:db:4d:77:0d:ca:3c:bf:
                    7a:d7:a8:41:7d:f6:39:de:c2:0f:9b:73:42:5d:4c:
                    1d:fa:a9:45:8e:e7:52:0f:f0:86:de:e2:c0:c4:36:
                    b3:88:d8:eb:5a:1a:c0:99:bc:f2:ae:a8:d5:0e:52:
                    9a:3e:33:d3:99:bf:b8:a4:a3:a4:df:d8:81:ce:37:
                    e2:5c:f2:d8:53:34:02:25:c0:a6:a7:a2:6a:b5:b9:
                    db:97:cf:0c:77:11:a6:f4:1d:df:ce:1d:71:e7:cb:
                    96:52:6b:81:a4:21:7b:ba:5e:34:fd:03:3e:55:69:
                    7d:4b:24:2b:20:15:f1:a6:bd:4b:b7:a3:e4:db:6c:
                    3f:8a:af:f3:31:ef:26:86:9e:3d:b6:5d:da:19:b7:
                    8f:39:e2:68:d6:c2:7a:82:b4:83:0b:a3:af:42:89:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:4D:2C:71:C0:4F:AA:E7:2B:EE:E8:25:63:42:C1:08:15:45:17
            X509v3 Authority Key Identifier:
                keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d6:79:9e:94:ae:bd:f9:83:ba:5d:0b:4a:ba:bf:0a:e9:ac:
         13:bd:ce:f4:0f:fa:e1:a8:72:68:fb:2a:e5:1a:f2:37:3c:8d:
         c3:bb:c7:58:c9:f9:ca:39:b2:5d:6e:cb:b9:ba:d7:d4:fb:31:
         24:2b:04:b1:29:10:7b:3b:d0:62:27:9c:30:0d:8d:8d:07:33:
         37:2b:45:37:fa:ff:6f:48:52:72:56:4f:6d:3a:72:5e:b3:e0:
         ff:5c:a9:fa:e3:2d:07:60:7f:61:58:9e:96:f7:e8:15:b8:cd:
         73:d1:48:c0:74:8c:26:a0:36:07:55:f6:83:88:ed:ec:99:8a:
         c9:79:ce:b7:7d:cc:79:5a:05:c2:93:9e:26:17:33:a6:20:68:
         3c:e1:4b:19:f5:94:41:dd:18:8e:51:3b:ae:ea:6f:57:7d:f4:
         56:cd:f6:a0:b8:bf:f6:f7:1a:5b:54:a0:2f:13:ef:94:38:ff:
         56:f5:37:5d:0d:6a:c0:38:a5:4e:2f:7c:13:23:eb:3d:58:9e:
         bc:bb:9e:82:1e:8e:16:7c:93:b2:81:ef:59:3b:ff:19:ac:fa:
         6a:08:69:5c:d0:57:7e:ec:a6:7f:76:86:ec:14:94:93:e4:5a:
         5d:cd:37:23:e2:80:59:c1:c7:ec:c9:e8:7d:b2:cb:7e:b2:5c:
         54:41:49:f6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYumRaNjV+x7mxPYdfvAFdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTE2ZDFmNGM3YTY1M2UzZTIwZjg0ZDliYTU5ZmRiMjdj
MmE2MWYwHhcNMjUwNDEzMTAwMTQ2WhcNMjUwNDE0MTAwMTQ2WjAzMTEwLwYDVQQD
EygzYTk2NGQyYzcxYzA0ZmFhZTcyYmVlZTgyNTYzNDJjMTA4MTU0NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ripo4vkLmfQ/R2HQTzHaggsMa16
4KmpuYJR2T7K7Xc7qjwgSv1VI+rQ6Wayr0wOpkP1bGW61A0vPf7o4rHI0If99WeD
SqZiF/Uv6wdSpv6/C0VjzSi7xweLhp2Lpbs849tNdw3KPL9616hBffY53sIPm3NC
XUwd+qlFjudSD/CG3uLAxDaziNjrWhrAmbzyrqjVDlKaPjPTmb+4pKOk39iBzjfi
XPLYUzQCJcCmp6Jqtbnbl88MdxGm9B3fzh1x58uWUmuBpCF7ul40/QM+VWl9SyQr
IBXxpr1Lt6Pk22w/iq/zMe8mhp49tl3aGbePOeJo1sJ6grSDC6OvQolG1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDqWTSxxwE+q5yvu6CVjQsEIFUUXMB8GA1UdIwQY
MBaAFPmhbR9MemU+PiD4TZuln9snwqYfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hRnRIMHg2WlQ0LUlQaE5tNldmMnlmQ3BoOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOThjMWI1LTMzOTYtNGQ5Yy1iY2Fj
LTk5MjYyN2VlYTllYS8xLzEtYUZ0SDB4NlpUNC1JUGhObTZXZjJ5ZkNwaDgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZmLzk4YzFiNS0zMzk2LTRkOWMtYmNhYy05OTI2MjdlZWE5
ZWEvMS8xLWFGdEgweDZaVDQtSVBoTm02V2YyeWZDcGg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNZ5
npSuvfmDul0LSrq/CumsE73O9A/64ahyaPsq5RryNzyNw7vHWMn5yjmyXW7LubrX
1PsxJCsEsSkQezvQYiecMA2NjQczNytFN/r/b0hSclZPbTpyXrPg/1yp+uMtB2B/
YVielvfoFbjNc9FIwHSMJqA2B1X2g4jt7JmKyXnOt33MeVoFwpOeJhczpiBoPOFL
GfWUQd0YjlE7rupvV330Vs32oLi/9vcaW1SgLxPvlDj/VvU3XQ1qwDilTi98EyPr
PVievLuegh6OFnyTsoHvWTv/Gaz6aghpXNBXfuymf3aG7BSUk+RaXc03I+KAWcHH
7MnofbLLfrJcVEFJ9g==
-----END CERTIFICATE-----