Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File:                     MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier:          lypCl3YGZU793CFUizxeG0fzQLYEP/TZ7jrWuLc+K5M=
Subject key identifier:   E9:A7:D8:2A:36:79:05:21:1F:B6:23:FB:2A:B5:EA:16:88:23:40:49
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer:       /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial:       01962FAB9E6EC6181D76C8AC5A57E1149C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number:          05C0
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
                          2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: cn7JewTNzmoWyr7Q/9vghEWhiPNCsfiytfd03bhOeHQ=)
                          3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9e:6e:c6:18:1d:76:c8:ac:5a:57:e1:14:9c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=e9a7d82a367905211fb623fb2ab5ea1688234049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:fd:3a:a1:e5:3c:7d:e5:ca:ad:5a:25:82:
                    32:e1:e7:05:b1:d3:d5:05:06:58:ed:81:e2:5f:ad:
                    4a:e8:e8:46:4d:92:63:e5:d1:b8:0b:99:c6:48:28:
                    7a:c1:a8:a6:fc:37:ca:b9:10:8c:1f:a6:b1:ba:4d:
                    42:a5:be:6b:b2:af:11:7a:2c:9f:be:75:f5:53:79:
                    57:1c:38:36:7f:a1:a7:c3:0a:aa:ce:68:7a:8f:ad:
                    be:a7:ac:8f:f6:1b:e7:cf:b0:77:68:52:4c:96:14:
                    4e:59:b9:b8:e2:44:69:d8:4e:34:b6:15:e1:cc:0d:
                    33:e5:56:f3:15:e3:f8:45:0c:9d:d4:b5:24:22:d2:
                    4c:ec:01:93:af:1a:f5:fe:5f:6d:18:c3:f0:38:0f:
                    09:9c:ae:01:f9:47:0d:f2:9d:98:2c:66:cc:04:66:
                    81:01:17:da:ae:40:93:8a:58:13:1f:e4:fd:96:ba:
                    8a:5e:9f:3f:8e:a2:18:de:48:49:67:6e:fc:aa:d6:
                    37:56:75:8b:77:54:62:bb:4a:b7:fb:69:6a:e2:31:
                    89:a2:0e:9c:07:4b:98:7b:69:18:ad:4c:fc:44:09:
                    e5:71:6e:50:19:3f:d7:8a:4d:16:36:28:db:2e:c3:
                    f5:1b:8f:8f:1e:04:95:9e:d5:c2:aa:64:54:d9:06:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:D8:2A:36:79:05:21:1F:B6:23:FB:2A:B5:EA:16:88:23:40:49
            X509v3 Authority Key Identifier:
                keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:28:85:98:54:fd:21:81:c6:8d:01:77:61:e9:50:6d:c5:31:
         42:6a:45:53:52:2a:f8:aa:c8:6a:70:17:97:e1:57:a3:88:b9:
         1e:25:f7:bf:62:24:c5:f3:77:9e:fd:dc:b2:c8:ca:4b:6c:a5:
         eb:d8:00:0e:e6:0c:12:23:88:8a:86:57:17:1b:db:c6:72:99:
         b4:bc:6f:d6:9a:af:9f:06:93:42:3a:61:7a:98:cc:ac:8b:b0:
         a8:0a:9d:1c:3b:84:1b:09:0b:6e:15:9e:32:22:74:92:5e:35:
         89:fa:9a:a7:32:6b:59:f5:a1:dd:e1:76:80:98:23:0a:05:dc:
         93:92:73:b8:bf:56:04:da:9b:75:2b:15:35:d1:6c:a6:b1:96:
         4a:69:65:ad:43:20:69:83:ce:b5:e9:78:0f:62:6d:85:f0:6d:
         97:21:5e:5c:2e:3f:2d:04:a0:24:13:3f:72:75:ae:90:43:5e:
         6c:07:01:02:26:97:b2:2c:09:ac:34:e1:9b:9e:70:f6:ca:ee:
         cc:5c:44:b8:a1:6b:4b:96:45:62:07:bb:89:c7:69:84:6c:70:
         b3:78:de:45:98:4b:2f:f0:e3:19:c1:63:db:dc:c6:16:ca:5b:
         16:f9:f7:f7:67:13:e3:c9:63:77:92:89:78:7b:44:dd:7b:8f:
         68:68:8f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq55uxhgddsisWlfhFJyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjUwNDEzMTUwMTM4WhcNMjUwNDE0MTUwMTM4WjAzMTEwLwYDVQQD
EyhlOWE3ZDgyYTM2NzkwNTIxMWZiNjIzZmIyYWI1ZWExNjg4MjM0MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FP9OqHlPH3lyq1aJYIy4ecFsdPV
BQZY7YHiX61K6OhGTZJj5dG4C5nGSCh6waim/DfKuRCMH6axuk1Cpb5rsq8Reiyf
vnX1U3lXHDg2f6Gnwwqqzmh6j62+p6yP9hvnz7B3aFJMlhROWbm44kRp2E40thXh
zA0z5VbzFeP4RQyd1LUkItJM7AGTrxr1/l9tGMPwOA8JnK4B+UcN8p2YLGbMBGaB
ARfarkCTilgTH+T9lrqKXp8/jqIY3khJZ278qtY3VnWLd1Riu0q3+2lq4jGJog6c
B0uYe2kYrUz8RAnlcW5QGT/Xik0WNijbLsP1G4+PHgSVntXCqmRU2QarXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmn2Co2eQUhH7Yj+yq16haII0BJMB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyiFmFT9
IYHGjQF3YelQbcUxQmpFU1Iq+KrIanAXl+FXo4i5HiX3v2IkxfN3nv3cssjKS2yl
69gADuYMEiOIioZXFxvbxnKZtLxv1pqvnwaTQjphepjMrIuwqAqdHDuEGwkLbhWe
MiJ0kl41ifqapzJrWfWh3eF2gJgjCgXck5JzuL9WBNqbdSsVNdFsprGWSmllrUMg
aYPOtel4D2JthfBtlyFeXC4/LQSgJBM/cnWukENebAcBAiaXsiwJrDThm55w9sru
zFxEuKFrS5ZFYge7icdphGxws3jeRZhLL/DjGcFj29zGFspbFvn392cT48ljd5KJ
eHtE3XuPaGiPiw==
-----END CERTIFICATE-----