Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File:                     r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier:          JeZOg+bVygoUKSGNWvaTArqVNHr72dWH5Qq3tOj8WHI=
Subject key identifier:   0C:08:AC:AC:3F:F7:DB:C4:E3:01:29:EE:34:7F:AA:13:C0:CF:84:A9
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer:       /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial:       01962F74A66BCFF8CBC1F48D6212EDCDA925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
                          2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
                          3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: O9JpkQ+BB68tWk2qr7IG6juLJ2JUR0Vbb+g9Ny9h8XI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a6:6b:cf:f8:cb:c1:f4:8d:62:12:ed:cd:a9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=0c08acac3ff7dbc4e30129ee347faa13c0cf84a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:4c:3a:93:f7:21:4e:4b:cf:ca:5d:3f:00:
                    c3:43:18:80:0e:56:07:27:b8:29:1b:ab:90:26:0d:
                    6a:52:b7:a1:b0:22:e8:aa:f2:b3:8e:40:77:1b:55:
                    bb:49:c6:89:d9:11:46:d7:82:c0:cd:ef:e8:95:53:
                    d3:93:f7:8b:1f:1c:47:67:2a:c4:fe:a1:69:c5:aa:
                    f9:10:37:8c:b3:50:5e:52:b3:9c:70:e3:ae:48:da:
                    0a:0b:9f:dc:1e:2e:e6:c4:57:06:ac:39:bd:a0:d6:
                    f9:f0:b3:9c:df:56:08:83:36:7f:40:ed:05:8b:20:
                    2c:56:b5:58:e6:45:a5:7b:b0:6c:b2:6c:8f:b9:b9:
                    95:1e:1d:7c:ab:3a:47:99:46:39:e8:0c:fc:cb:53:
                    42:37:20:7c:f4:c0:92:95:8b:aa:83:a5:9b:cf:bd:
                    e2:48:89:74:fb:25:68:fd:83:ad:bf:05:bd:67:a9:
                    b7:46:36:64:1b:64:a0:4e:a2:54:ca:4f:ac:9e:79:
                    5c:06:7b:6b:cc:a8:cf:99:c0:90:a1:d8:2b:28:8d:
                    ae:66:3f:04:42:63:16:43:3b:c2:e5:0d:86:af:aa:
                    13:7e:d4:bb:64:fe:eb:50:a7:80:a0:6f:fc:5f:ee:
                    62:c8:a2:dc:ff:fd:02:62:9b:64:4b:ff:fa:9d:86:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:08:AC:AC:3F:F7:DB:C4:E3:01:29:EE:34:7F:AA:13:C0:CF:84:A9
            X509v3 Authority Key Identifier:
                keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:1f:c2:d5:2b:0b:f1:9c:8b:a1:0f:0c:df:0a:d4:34:a3:
         02:2f:99:c2:33:c8:28:11:b0:27:81:bc:21:47:57:90:29:b8:
         92:0e:f6:ec:5a:cc:1a:74:38:81:ab:ac:c1:56:2d:57:ef:cf:
         57:be:36:eb:da:b0:01:7a:27:19:24:62:f2:d4:26:ca:39:4f:
         3b:44:72:de:5e:75:20:74:7d:aa:04:54:09:8a:da:97:f3:ca:
         27:28:a6:0a:7a:a2:56:4d:27:57:24:3d:c6:7b:e6:83:36:1f:
         b0:2a:0f:73:8a:40:39:a5:39:33:ab:e1:70:79:2c:c3:ff:2e:
         0e:8e:f9:79:d3:2f:92:89:a8:21:79:1c:11:1f:73:03:71:36:
         26:54:f1:2d:dc:1e:49:f6:75:c7:a8:de:49:b6:86:81:50:a4:
         cb:83:fb:c2:7b:01:10:37:7f:86:a0:40:5b:f6:5b:48:01:50:
         2c:58:89:81:e9:f5:c4:dc:fe:b5:d4:c0:75:e6:e6:47:bb:06:
         33:49:d1:a7:da:d0:dd:3a:ca:de:81:06:90:0c:16:4b:c0:4d:
         48:7a:d7:4c:be:d0:20:09:f6:8f:f0:7d:12:3e:5b:7e:14:38:
         78:29:fc:c0:07:d8:76:c8:59:b4:a9:55:14:c0:94:fc:cc:2d:
         8c:96:23:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKZrz/jLwfSNYhLtzaklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw
MGViMjYwHhcNMjUwNDEzMTQwMTM1WhcNMjUwNDE0MTQwMTM1WjAzMTEwLwYDVQQD
EygwYzA4YWNhYzNmZjdkYmM0ZTMwMTI5ZWUzNDdmYWExM2MwY2Y4NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTlMOpP3IU5Lz8pdPwDDQxiADlYH
J7gpG6uQJg1qUrehsCLoqvKzjkB3G1W7ScaJ2RFG14LAze/olVPTk/eLHxxHZyrE
/qFpxar5EDeMs1BeUrOccOOuSNoKC5/cHi7mxFcGrDm9oNb58LOc31YIgzZ/QO0F
iyAsVrVY5kWle7BssmyPubmVHh18qzpHmUY56Az8y1NCNyB89MCSlYuqg6Wbz73i
SIl0+yVo/YOtvwW9Z6m3RjZkG2SgTqJUyk+snnlcBntrzKjPmcCQodgrKI2uZj8E
QmMWQzvC5Q2Gr6oTftS7ZP7rUKeAoG/8X+5iyKLc//0CYptkS//6nYbtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwIrKw/99vE4wEp7jR/qhPAz4SpMB8GA1UdIwQY
MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt
MmM2MmRlN2IzZTQ1LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1
LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCkfwtUr
C/Gci6EPDN8K1DSjAi+ZwjPIKBGwJ4G8IUdXkCm4kg727FrMGnQ4gauswVYtV+/P
V74269qwAXonGSRi8tQmyjlPO0Ry3l51IHR9qgRUCYral/PKJyimCnqiVk0nVyQ9
xnvmgzYfsCoPc4pAOaU5M6vhcHksw/8uDo75edMvkomoIXkcER9zA3E2JlTxLdwe
SfZ1x6jeSbaGgVCky4P7wnsBEDd/hqBAW/ZbSAFQLFiJgen1xNz+tdTAdebmR7sG
M0nRp9rQ3TrK3oEGkAwWS8BNSHrXTL7QIAn2j/B9Ej5bfhQ4eCn8wAfYdshZtKlV
FMCU/MwtjJYjWw==
-----END CERTIFICATE-----