Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          bk3QMEfAk5BpyPBmWXzKqAuleIRivVjJkOgGi/IRNuM=
Subject key identifier:   E7:D7:60:F2:EF:EB:75:D6:D1:8B:1B:A4:26:A6:18:19:AB:65:3E:C5
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       01962ECF85719A44DAEE15187178B842A695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          0CA3
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
                          2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: q/IwhNCd9ZvjmrgK1wsFnU5iND7oNnRbMdtbPqm5V8Q=)
                          4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:85:71:9a:44:da:ee:15:18:71:78:b8:42:a6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=e7d760f2efeb75d6d18b1ba426a61819ab653ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:5b:c7:3c:11:38:2c:01:c3:82:03:74:d5:
                    94:d1:d9:59:a7:7b:4d:3d:53:32:a4:a5:70:06:c5:
                    b8:1c:f9:36:2f:b5:18:4e:8a:01:ac:8b:4b:bc:75:
                    ee:37:3c:05:7d:40:bf:47:4c:52:ef:ec:6e:3c:0e:
                    3d:a9:4c:70:af:31:e2:a1:5e:d7:09:a5:21:6e:5b:
                    c8:b0:da:5e:0e:0b:2d:2f:75:6b:d1:90:34:e2:2f:
                    e6:06:64:42:af:ce:6f:7f:09:57:25:27:8e:cd:3a:
                    8c:92:cd:b6:0f:d6:9c:e5:4e:bb:71:7f:d7:e3:01:
                    c8:04:89:db:bb:b9:7d:29:22:71:a4:e7:e1:ad:dd:
                    63:85:85:42:90:c7:b8:e4:5a:55:53:fd:74:a5:47:
                    0a:d7:cf:47:5c:fe:e1:d7:d6:d2:c9:d9:5e:8a:aa:
                    bf:10:62:2b:41:61:ed:81:d8:85:5f:cf:f4:c9:e3:
                    af:50:81:3b:cc:84:f4:2b:da:da:d2:0d:00:8a:2f:
                    4b:ab:be:bd:0e:4d:18:b8:05:cc:71:75:94:68:8b:
                    13:43:9e:06:74:de:e0:df:ae:33:ca:65:28:d3:d7:
                    d6:a1:24:05:e0:3d:99:52:95:cb:9c:fd:bc:bb:69:
                    fa:26:8a:28:2a:95:f1:a1:49:c0:83:a5:5f:7e:58:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:60:F2:EF:EB:75:D6:D1:8B:1B:A4:26:A6:18:19:AB:65:3E:C5
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:c6:f9:3b:7d:4e:88:73:0f:80:a5:3c:fd:73:d0:18:1e:
         c8:1c:ab:cb:6c:ae:d5:a4:2f:14:68:31:d5:bf:55:7a:75:ed:
         07:95:75:86:68:47:05:d1:5a:d9:8d:ff:ca:13:de:85:65:92:
         07:92:31:a1:26:8f:7c:03:a4:21:f0:14:f8:75:4e:39:d1:07:
         7d:88:a3:0b:bf:9e:9d:d2:11:e4:dd:cf:67:c6:fb:bd:69:40:
         e5:8d:dc:bc:48:86:38:6c:ba:41:60:de:2e:98:17:28:b9:ad:
         c8:e9:55:fe:94:3c:9b:a5:ff:70:c2:7a:15:31:bd:9f:61:06:
         09:ae:4b:d7:e0:ff:af:f0:31:e5:96:4b:a8:a2:30:b5:06:1d:
         07:28:27:4f:79:48:c5:09:2b:6c:54:ab:0b:67:12:6d:a2:b0:
         71:27:16:54:dd:07:ac:30:c1:6c:98:16:ae:c3:60:eb:4b:d1:
         cd:68:ab:7d:a2:05:c3:59:88:8c:73:62:d9:55:5f:42:29:d6:
         f9:0f:d3:11:dc:40:e7:b4:06:3f:f3:77:06:93:1b:9d:34:87:
         06:6b:cc:4c:bb:18:cb:ab:d9:8f:0f:a3:fe:63:13:09:53:00:
         ff:ea:0f:ae:3f:3d:a8:f6:eb:c2:7a:4d:23:78:39:03:9d:7c:
         c9:64:e4:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4VxmkTa7hUYcXi4QqaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl
ZWVlYTAwHhcNMjUwNDEzMTEwMTEzWhcNMjUwNDE0MTEwMTEzWjAzMTEwLwYDVQQD
EyhlN2Q3NjBmMmVmZWI3NWQ2ZDE4YjFiYTQyNmE2MTgxOWFiNjUzZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRRbxzwROCwBw4IDdNWU0dlZp3tN
PVMypKVwBsW4HPk2L7UYTooBrItLvHXuNzwFfUC/R0xS7+xuPA49qUxwrzHioV7X
CaUhblvIsNpeDgstL3Vr0ZA04i/mBmRCr85vfwlXJSeOzTqMks22D9ac5U67cX/X
4wHIBInbu7l9KSJxpOfhrd1jhYVCkMe45FpVU/10pUcK189HXP7h19bSydleiqq/
EGIrQWHtgdiFX8/0yeOvUIE7zIT0K9ra0g0Aii9Lq769Dk0YuAXMcXWUaIsTQ54G
dN7g364zymUo09fWoSQF4D2ZUpXLnP28u2n6JoooKpXxoUnAg6VffljjhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfXYPLv63XW0YsbpCamGBmrZT7FMB8GA1UdIwQY
MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt
ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5
LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNXG+Tt9
TohzD4ClPP1z0BgeyByry2yu1aQvFGgx1b9VenXtB5V1hmhHBdFa2Y3/yhPehWWS
B5IxoSaPfAOkIfAU+HVOOdEHfYijC7+endIR5N3PZ8b7vWlA5Y3cvEiGOGy6QWDe
LpgXKLmtyOlV/pQ8m6X/cMJ6FTG9n2EGCa5L1+D/r/Ax5ZZLqKIwtQYdBygnT3lI
xQkrbFSrC2cSbaKwcScWVN0HrDDBbJgWrsNg60vRzWirfaIFw1mIjHNi2VVfQinW
+Q/TEdxA57QGP/N3BpMbnTSHBmvMTLsYy6vZjw+j/mMTCVMA/+oPrj89qPbrwnpN
I3g5A518yWTklQ==
-----END CERTIFICATE-----