Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          XXsNs4NjZKhgRmxITUh/Ii0v//9sAji3ESJ6VnyLA/w=
Subject key identifier:   F6:C8:00:74:65:79:8E:C7:3A:5A:A9:20:A7:92:DB:82:38:C5:93:00
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       01962ECF70F7FC74490B65B1F6657F02CF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: kO33Rf6VWvB9RErcd/+nlt9r1xfrFpBRFslemLMUbNk=)
                          2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
                          3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
                          4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
                          5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
                          6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:f7:fc:74:49:0b:65:b1:f6:65:7f:02:cf:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=f6c8007465798ec73a5aa920a792db8238c59300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a4:27:2b:d6:ce:1a:26:63:0e:6a:ef:c6:a9:
                    d9:70:5e:96:43:e8:bc:a9:a9:28:53:5a:f4:99:dd:
                    f6:32:1d:21:0a:e1:4c:ff:8e:67:65:46:09:8f:cc:
                    78:3c:e3:15:af:af:71:d0:f4:4d:eb:3c:55:9f:dc:
                    37:86:01:80:75:0a:7a:37:20:14:25:64:d9:2a:5e:
                    51:79:c7:39:f1:53:e4:3c:fc:1d:a0:09:3d:79:58:
                    ae:5e:08:92:fc:0a:37:d2:43:9f:8a:a7:57:67:5e:
                    51:8e:c5:f9:de:dd:d6:1d:68:a5:d4:b8:f5:eb:54:
                    d1:7f:9a:a6:9f:15:dc:40:16:1e:5a:01:c1:6d:50:
                    a0:86:10:45:52:f2:60:d2:ef:74:a5:b2:22:9a:6b:
                    50:e0:d2:5b:cf:0c:d9:3e:d6:c6:e0:40:fe:26:22:
                    7e:dd:be:9b:14:b3:48:b7:67:ce:b5:c8:0e:5b:7c:
                    63:b8:2a:74:7e:42:5f:a6:c9:f0:6d:93:01:ce:5f:
                    5f:3d:52:d0:16:82:4b:1b:b3:9e:37:a1:b7:96:12:
                    d8:43:5d:d4:05:5f:df:d3:85:bb:61:d3:f8:0c:54:
                    e0:83:fd:f7:07:3e:3c:75:81:b3:f9:fc:98:00:36:
                    97:1a:ec:f6:53:a8:67:c7:55:a9:ac:45:b7:10:b7:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:00:74:65:79:8E:C7:3A:5A:A9:20:A7:92:DB:82:38:C5:93:00
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:19:dc:56:f7:ee:52:40:02:61:fb:9d:c8:03:24:b2:91:be:
         11:6e:8f:3b:6e:64:f5:ba:4e:c5:54:05:b0:67:87:0f:42:d3:
         4d:35:38:2a:98:4d:80:6c:07:79:6a:14:e0:67:23:4a:ed:bb:
         c2:1e:e6:62:6e:d6:1a:d6:90:86:08:a8:5e:ed:70:80:2f:14:
         2c:4c:a0:42:a9:60:b5:07:57:66:94:9b:49:a9:b3:de:1f:b9:
         0d:1c:db:e0:de:6e:b6:f3:19:84:ee:72:da:29:8c:38:99:aa:
         25:eb:9e:45:1f:5d:38:dc:9e:49:a1:aa:34:5f:2b:c4:c7:0a:
         c3:47:43:de:93:4f:2e:aa:c9:b8:45:ca:51:93:c5:c2:3e:f8:
         b0:be:cb:41:29:e8:46:a9:a8:49:64:b1:2d:d4:15:5b:63:22:
         9d:9c:79:35:47:6e:32:98:a2:ca:fe:c7:44:f7:b1:c9:6f:ef:
         48:4d:e1:60:b8:06:27:1f:43:40:47:84:3a:99:ce:41:28:43:
         ce:32:11:99:3d:9f:ca:9c:2c:b2:2b:69:69:f7:81:51:64:04:
         35:a4:62:e7:34:4f:3b:36:d4:f5:e2:09:42:86:f6:ae:2e:16:
         d1:51:54:f9:b1:de:ec:98:2f:50:90:8f:3d:eb:19:9b:3f:e8:
         10:bf:0b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3D3/HRJC2Wx9mV/As8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5
M2U3ODkwHhcNMjUwNDEzMTEwMTA4WhcNMjUwNDE0MTEwMTA4WjAzMTEwLwYDVQQD
EyhmNmM4MDA3NDY1Nzk4ZWM3M2E1YWE5MjBhNzkyZGI4MjM4YzU5MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KQnK9bOGiZjDmrvxqnZcF6WQ+i8
qakoU1r0md32Mh0hCuFM/45nZUYJj8x4POMVr69x0PRN6zxVn9w3hgGAdQp6NyAU
JWTZKl5Recc58VPkPPwdoAk9eViuXgiS/Ao30kOfiqdXZ15RjsX53t3WHWil1Lj1
61TRf5qmnxXcQBYeWgHBbVCghhBFUvJg0u90pbIimmtQ4NJbzwzZPtbG4ED+JiJ+
3b6bFLNIt2fOtcgOW3xjuCp0fkJfpsnwbZMBzl9fPVLQFoJLG7OeN6G3lhLYQ13U
BV/f04W7YdP4DFTgg/33Bz48dYGz+fyYADaXGuz2U6hnx1WprEW3ELey4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbIAHRleY7HOlqpIKeS24I4xZMAMB8GA1UdIwQY
MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt
NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2
LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRncVvfu
UkACYfudyAMkspG+EW6PO25k9bpOxVQFsGeHD0LTTTU4KphNgGwHeWoU4GcjSu27
wh7mYm7WGtaQhgioXu1wgC8ULEygQqlgtQdXZpSbSamz3h+5DRzb4N5utvMZhO5y
2imMOJmqJeueRR9dONyeSaGqNF8rxMcKw0dD3pNPLqrJuEXKUZPFwj74sL7LQSno
RqmoSWSxLdQVW2MinZx5NUduMpiiyv7HRPexyW/vSE3hYLgGJx9DQEeEOpnOQShD
zjIRmT2fypwssitpafeBUWQENaRi5zRPOzbU9eIJQob2ri4W0VFU+bHe7JgvUJCP
PesZmz/oEL8Ltw==
-----END CERTIFICATE-----