Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File:                     dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier:          DxUqRxAKrfaZB1w/XMJ5e9lo+IgxGMENBTWWd27bMmI=
Subject key identifier:   52:27:98:67:31:72:8C:23:36:08:E5:A7:19:45:8E:7C:01:99:E2:D1
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer:       /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial:       01962E2B4EFF9FF1FAAFECBA7F3DCF6B5A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number:          0ED5
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
                          2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
                          3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
                          4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
                          5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
                          6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: gv2dlvb0VcYSrIrInGglYw7HKPuSJvj/3nI28opKaq4=)
                          7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
                          8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
                          9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4e:ff:9f:f1:fa:af:ec:ba:7f:3d:cf:6b:5a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=5227986731728c233608e5a719458e7c0199e2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:94:2a:72:86:46:9f:26:f5:99:9b:27:cb:
                    8d:3a:46:1c:4c:eb:45:80:5a:c4:d5:12:2c:99:e8:
                    39:4e:09:32:bc:f7:b2:f4:55:1a:5a:eb:79:66:c1:
                    a5:80:6d:bd:96:77:70:6d:8b:5f:f7:f4:28:48:29:
                    ac:36:06:e0:35:34:7b:73:b8:e3:b8:be:41:9a:73:
                    3b:f4:01:e9:7b:6e:6b:51:00:ff:73:2d:45:55:85:
                    47:33:a5:a5:ce:87:f0:27:b2:18:7c:49:79:ff:eb:
                    b9:d7:3c:09:a9:56:9d:7c:dd:e4:cb:c4:b5:04:c0:
                    36:a0:8f:13:7f:03:06:d0:09:61:82:16:2d:9b:69:
                    d5:a1:9f:1e:d4:c7:82:7f:5e:38:ce:81:c6:17:12:
                    13:d3:ad:d7:a5:e8:ff:bb:c3:95:89:b4:86:22:ac:
                    4c:89:89:1b:34:dc:20:84:2c:b0:86:ef:38:da:2c:
                    e5:28:de:78:b1:74:57:25:71:b3:30:d3:cd:ac:d4:
                    17:a2:a9:98:41:a0:2f:b3:6e:f4:73:ce:63:c3:3e:
                    82:8d:7b:44:2f:ff:2b:65:f0:81:7b:56:d0:91:fc:
                    d1:11:9d:f4:d8:28:46:6d:e3:3c:64:e4:16:ff:0c:
                    0a:3a:85:2e:20:49:c0:57:39:dd:88:20:27:28:e7:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:98:67:31:72:8C:23:36:08:E5:A7:19:45:8E:7C:01:99:E2:D1
            X509v3 Authority Key Identifier:
                keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:18:d7:1f:19:7c:28:4b:37:a2:b1:c4:81:d5:9a:e6:a9:
         0c:aa:35:00:52:34:cf:09:6e:82:0f:c4:84:12:42:5b:6f:7f:
         e6:cf:63:60:89:43:eb:d3:32:c1:1a:97:58:c5:0c:83:ad:a6:
         62:fe:ae:5b:b9:0d:b5:5f:6a:6e:0e:f0:06:9f:24:fe:ca:68:
         85:21:d7:3a:df:0c:ea:c4:53:f1:17:a8:16:0c:b1:85:ad:5b:
         0e:c0:2c:b3:31:b2:69:11:0e:6d:84:63:43:2e:ed:76:56:19:
         68:fd:10:b2:28:44:eb:d8:46:88:cc:63:a0:aa:5d:93:b8:c3:
         a4:57:0e:fc:6e:48:21:5d:9d:4f:1f:36:a1:78:e5:41:6c:a6:
         2f:12:54:ff:a0:56:9b:2d:23:9a:01:70:d2:91:cf:b7:be:5d:
         b2:c4:05:05:61:90:ed:cd:f2:1d:9e:73:d8:a6:f3:a1:ef:a8:
         64:85:3f:c2:28:df:d5:62:bc:2b:7b:a2:aa:e6:31:8c:87:00:
         4e:44:10:57:6b:32:cb:6f:8a:42:ed:2a:45:d7:68:71:36:4a:
         fa:72:ab:64:bc:58:5e:27:93:e5:f0:6c:a5:45:35:3e:2f:62:
         34:d3:db:f0:38:ec:d8:f3:99:2d:4e:bd:a1:7a:52:7a:ed:5d:
         ab:49:c6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK07/n/H6r+y6fz3Pa1omMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUwNDEzMDgwMTUyWhcNMjUwNDE0MDgwMTUyWjAzMTEwLwYDVQQD
Eyg1MjI3OTg2NzMxNzI4YzIzMzYwOGU1YTcxOTQ1OGU3YzAxOTllMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+iUKnKGRp8m9ZmbJ8uNOkYcTOtF
gFrE1RIsmeg5TgkyvPey9FUaWut5ZsGlgG29lndwbYtf9/QoSCmsNgbgNTR7c7jj
uL5BmnM79AHpe25rUQD/cy1FVYVHM6WlzofwJ7IYfEl5/+u51zwJqVadfN3ky8S1
BMA2oI8TfwMG0AlhghYtm2nVoZ8e1MeCf144zoHGFxIT063Xpej/u8OVibSGIqxM
iYkbNNwghCywhu842izlKN54sXRXJXGzMNPNrNQXoqmYQaAvs270c85jwz6CjXtE
L/8rZfCBe1bQkfzREZ302ChGbeM8ZOQW/wwKOoUuIEnAVzndiCAnKOer+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFInmGcxcowjNgjlpxlFjnwBmeLRMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa8Y1x8Z
fChLN6KxxIHVmuapDKo1AFI0zwlugg/EhBJCW29/5s9jYIlD69MywRqXWMUMg62m
Yv6uW7kNtV9qbg7wBp8k/spohSHXOt8M6sRT8ReoFgyxha1bDsAsszGyaREObYRj
Qy7tdlYZaP0QsihE69hGiMxjoKpdk7jDpFcO/G5IIV2dTx82oXjlQWymLxJU/6BW
my0jmgFw0pHPt75dssQFBWGQ7c3yHZ5z2Kbzoe+oZIU/wijf1WK8K3uiquYxjIcA
TkQQV2syy2+KQu0qRddocTZK+nKrZLxYXieT5fBspUU1Pi9iNNPb8Djs2POZLU69
oXpSeu1dq0nGgA==
-----END CERTIFICATE-----