Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          JcFrHHIY+9uyulCbH42SvizVaTnJeM3BLOJ1piRBvQw=
Subject key identifier:   EC:87:D6:6A:04:7F:A9:89:E9:ED:34:7F:1B:54:32:3A:85:8B:BD:E9
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       01962F74D57FDD5FFE99589EE0088546E9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1528
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: HV6okiZ_Mm9pgAnQyp-neXvD9Ys.roa (hash: Z8kbWAqPsQVcPrsGh46E3DnYGpnTYUasQHe7qcWJi5s=)
                          2: KChU0Ss7IUSMmcrbp9hvvsOcKSI.roa (hash: tqUwPcZIIPi8c5hbtPgv87qi30gm6VRMDquHIJzvPTE=)
                          3: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: G0ndqmKUQRxgc+hHMN/bO9wT5DGiYZXyF+aldA7vSws=)
                          4: nTfJHvOT3Md0YAT3TOEczzSv8EE.roa (hash: VL31GlFtYpNeSOK+C/j2TrSHKldZgXfdQN4cx739hDI=)
                          5: phbXQYwJCQjuQ5dKxd5byinNiNQ.roa (hash: kHOoH2iIMj11c3Wy2E0Dsfj63b+DkqvcxB6hcxTgJsc=)
                          6: vG8ApR1CQ1vNge3dxtdCOeCSYfo.roa (hash: nw6PuYrQxCJ0rSOnM3T0R5CkZe6WaGcEiSuktc0QJXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:7f:dd:5f:fe:99:58:9e:e0:08:85:46:e9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=ec87d66a047fa989e9ed347f1b54323a858bbde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:57:20:f1:b2:15:06:42:af:e5:f2:27:cf:
                    f9:16:c5:ad:2c:b5:f5:27:f7:81:b6:00:57:13:35:
                    90:db:fc:31:1b:06:25:e7:f3:9c:9c:fa:81:57:c8:
                    45:b5:b2:7d:76:71:57:93:25:64:3a:9d:f2:10:51:
                    b9:1f:1d:af:46:9b:f9:c9:df:c1:10:fa:a7:c1:49:
                    9e:13:e4:48:a7:97:34:82:12:97:23:b6:34:6f:7a:
                    03:7e:cf:fb:bc:20:ff:f9:cc:db:64:97:f7:86:c0:
                    85:28:55:f4:c1:b1:55:66:2b:f6:4d:53:95:eb:5c:
                    87:8c:58:24:03:a7:fa:fb:4a:f7:a0:f5:72:7a:c5:
                    4b:b4:e2:5d:2c:39:1d:4b:72:e3:34:67:bc:29:1b:
                    a3:6b:eb:c8:40:36:0b:2c:fe:55:10:1e:49:3a:90:
                    f2:bf:ee:f0:cb:f0:ba:05:7d:69:e2:65:f6:65:8b:
                    1a:03:11:49:e3:17:9a:75:00:71:fe:e5:71:a7:e2:
                    1b:5a:bb:d8:5d:c6:73:2e:8c:a2:53:18:f8:df:52:
                    c6:87:07:94:0c:f2:92:1f:2e:3b:2c:da:95:3f:85:
                    5e:a8:95:7a:07:8c:b4:34:d5:e1:92:a2:65:fc:fb:
                    63:e6:8c:1c:34:84:9a:6f:52:74:1c:e9:de:be:31:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:D6:6A:04:7F:A9:89:E9:ED:34:7F:1B:54:32:3A:85:8B:BD:E9
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:3a:16:c1:d6:e4:82:0a:45:0b:f6:5b:fc:4b:cb:6c:bd:
         b8:29:fc:73:c6:66:90:6c:02:23:88:1d:d0:2c:9b:a9:fc:f6:
         97:6a:63:5a:bb:a4:3f:d3:f0:9e:b9:4e:e1:cf:a1:b6:23:52:
         2e:36:ac:e2:d7:67:03:7a:04:ec:dc:a2:cd:8e:51:eb:56:dd:
         a4:0f:f9:72:7f:99:3b:3b:cb:a0:70:cc:6f:8b:2c:e3:72:d9:
         01:1f:77:35:dd:01:3a:a8:99:e2:68:fc:80:df:b8:5f:b3:62:
         95:7a:db:a0:a3:ed:a4:40:ec:5a:03:84:c2:75:0c:43:96:d2:
         ef:cd:a0:65:e9:46:5f:da:46:e6:81:71:6b:bf:cd:6e:b1:eb:
         a9:8d:21:52:34:e3:aa:f9:ca:46:9e:f2:5f:36:9e:83:07:29:
         a0:bf:c2:3c:96:22:26:05:76:39:94:b7:4d:3f:90:cf:6a:0e:
         7a:2d:62:b3:94:6c:02:fd:90:72:b8:c9:b8:26:9e:80:3d:a5:
         9f:5b:46:6a:99:62:f0:7f:6f:88:a2:12:a7:bc:17:07:8a:35:
         9a:2d:15:23:50:23:d6:79:ff:b4:9d:5a:d1:56:78:47:ff:73:
         24:09:1a:ad:7e:75:4b:08:2b:fd:25:e7:86:b2:9d:7a:00:03:
         c0:6f:c1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNV/3V/+mVie4AiFRum1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjUwNDEzMTQwMTQ4WhcNMjUwNDE0MTQwMTQ4WjAzMTEwLwYDVQQD
EyhlYzg3ZDY2YTA0N2ZhOTg5ZTllZDM0N2YxYjU0MzIzYTg1OGJiZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYBXIPGyFQZCr+XyJ8/5FsWtLLX1
J/eBtgBXEzWQ2/wxGwYl5/OcnPqBV8hFtbJ9dnFXkyVkOp3yEFG5Hx2vRpv5yd/B
EPqnwUmeE+RIp5c0ghKXI7Y0b3oDfs/7vCD/+czbZJf3hsCFKFX0wbFVZiv2TVOV
61yHjFgkA6f6+0r3oPVyesVLtOJdLDkdS3LjNGe8KRuja+vIQDYLLP5VEB5JOpDy
v+7wy/C6BX1p4mX2ZYsaAxFJ4xeadQBx/uVxp+IbWrvYXcZzLoyiUxj431LGhweU
DPKSHy47LNqVP4VeqJV6B4y0NNXhkqJl/Ptj5owcNISab1J0HOnevjHVvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyH1moEf6mJ6e00fxtUMjqFi73pMB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBY6FsHW
5IIKRQv2W/xLy2y9uCn8c8ZmkGwCI4gd0Cybqfz2l2pjWrukP9PwnrlO4c+htiNS
Ljas4tdnA3oE7NyizY5R61bdpA/5cn+ZOzvLoHDMb4ss43LZAR93Nd0BOqiZ4mj8
gN+4X7NilXrboKPtpEDsWgOEwnUMQ5bS782gZelGX9pG5oFxa7/NbrHrqY0hUjTj
qvnKRp7yXzaegwcpoL/CPJYiJgV2OZS3TT+Qz2oOei1is5RsAv2QcrjJuCaegD2l
n1tGapli8H9viKISp7wXB4o1mi0VI1Aj1nn/tJ1a0VZ4R/9zJAkarX51Swgr/SXn
hrKdegADwG/BMA==
-----END CERTIFICATE-----