Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File:                     myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier:          QMG1GeMPCC7hC8iaVXQ4J/Y/GaU9VAd9F1l/DHnCfPo=
Subject key identifier:   CC:9A:E0:A5:50:56:ED:5C:37:76:54:D8:D3:A6:F7:C8:D2:81:08:47
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       01962FAB0D98DCA0A1EB931491694EFBDFB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (hash: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=)
                          2: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
                          3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: bsZxApphEy7QTWOgHwwUQDBlThKEz32cpGMTO8oQNDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0d:98:dc:a0:a1:eb:93:14:91:69:4e:fb:df:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=cc9ae0a55056ed5c377654d8d3a6f7c8d2810847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:1b:66:28:ac:14:aa:af:24:ac:b8:3e:9e:
                    3c:89:0c:cc:fa:99:30:1e:dd:9d:da:31:f3:a3:3a:
                    04:fb:25:aa:03:f6:f8:23:fa:49:a5:7b:55:78:1b:
                    f7:ef:7f:b4:8a:af:b5:c7:0b:23:4e:34:b5:ed:05:
                    d4:b9:c7:cc:d3:29:5e:3a:6e:6a:ef:5b:c7:d9:ed:
                    fb:a4:5f:64:06:23:e0:28:bc:ad:51:f9:99:0a:97:
                    91:ac:43:c6:d8:bd:5b:32:59:23:22:e6:bc:ae:66:
                    e4:7a:09:2c:6d:0a:55:99:08:20:05:0c:0c:fb:85:
                    34:7e:20:32:49:11:c6:1e:8c:06:ae:16:38:6e:0e:
                    38:32:ec:65:45:c2:f7:f3:24:0a:a9:25:c4:05:5e:
                    f2:1b:cd:c2:95:cd:9a:7d:32:59:88:38:6a:70:a7:
                    74:60:fa:dc:e7:62:ca:6b:ce:8a:f4:1c:59:83:ee:
                    5c:1e:53:fa:1d:2c:1e:9d:7c:6e:b5:de:fe:95:1d:
                    36:e4:1f:df:ac:5f:64:9e:05:22:76:bb:37:5d:a1:
                    70:74:4e:53:fb:c5:19:0d:75:a2:5f:a6:52:0f:08:
                    c8:83:be:cb:4f:a7:a5:93:27:b4:44:e2:8f:34:88:
                    e2:2b:ba:2b:4c:64:66:1b:2c:cd:46:4c:7a:4b:ad:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9A:E0:A5:50:56:ED:5C:37:76:54:D8:D3:A6:F7:C8:D2:81:08:47
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:17:1a:9f:fd:50:32:50:dc:d6:bf:f3:46:bc:06:87:5c:04:
         ad:38:2b:55:f8:f0:3b:a7:52:20:70:12:fd:ef:f6:f7:ad:42:
         ef:74:59:67:7b:7e:9e:f6:53:1d:ba:6c:a0:8d:e7:c6:0c:72:
         1a:db:d8:c6:23:11:de:09:72:e9:75:3c:c7:02:6c:c9:2e:5f:
         8b:c1:21:17:18:02:46:6c:aa:9c:23:05:ee:f5:a6:97:52:99:
         2a:00:63:b9:08:e2:b0:00:7e:50:4f:41:5a:d1:b2:f5:b1:3a:
         e8:63:d9:8c:ea:f3:20:ca:eb:16:89:6e:df:44:e4:58:5b:4a:
         e4:87:82:e0:64:ca:17:ad:89:75:9b:c4:46:86:62:d5:0a:5e:
         b0:e8:3e:fb:78:40:21:a3:48:4d:1a:09:de:45:cd:9d:9b:25:
         2b:03:89:25:f8:76:1a:5c:ba:cd:d7:7b:0d:bb:ba:4e:ab:ca:
         5c:4c:39:f5:71:69:75:37:e5:5a:db:43:ee:96:a9:44:e1:d9:
         63:15:6c:bb:f7:82:af:4d:a3:6d:bf:98:7a:6c:ce:d8:0b:1e:
         57:2b:ef:3c:a4:b3:10:2a:0c:65:ea:d8:41:bd:a4:2a:e8:a3:
         8c:57:d7:fb:53:90:e5:2d:5e:80:4a:19:fd:10:69:54:f1:35:
         e3:a8:32:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqw2Y3KCh65MUkWlO+9+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz
YTZhMWUwHhcNMjUwNDEzMTUwMTAxWhcNMjUwNDE0MTUwMTAxWjAzMTEwLwYDVQQD
EyhjYzlhZTBhNTUwNTZlZDVjMzc3NjU0ZDhkM2E2ZjdjOGQyODEwODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YbZiisFKqvJKy4Pp48iQzM+pkw
Ht2d2jHzozoE+yWqA/b4I/pJpXtVeBv373+0iq+1xwsjTjS17QXUucfM0yleOm5q
71vH2e37pF9kBiPgKLytUfmZCpeRrEPG2L1bMlkjIua8rmbkegksbQpVmQggBQwM
+4U0fiAySRHGHowGrhY4bg44MuxlRcL38yQKqSXEBV7yG83Clc2afTJZiDhqcKd0
YPrc52LKa86K9BxZg+5cHlP6HSwenXxutd7+lR025B/frF9kngUidrs3XaFwdE5T
+8UZDXWiX6ZSDwjIg77LT6elkye0ROKPNIjiK7orTGRmGyzNRkx6S60NBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMya4KVQVu1cN3ZU2NOm98jSgQhHMB8GA1UdIwQY
MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt
YTRmMDhkYmI4NWE1LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1
LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBcan/1Q
MlDc1r/zRrwGh1wErTgrVfjwO6dSIHAS/e/2961C73RZZ3t+nvZTHbpsoI3nxgxy
GtvYxiMR3gly6XU8xwJsyS5fi8EhFxgCRmyqnCMF7vWml1KZKgBjuQjisAB+UE9B
WtGy9bE66GPZjOrzIMrrFolu30TkWFtK5IeC4GTKF62JdZvERoZi1QpesOg++3hA
IaNITRoJ3kXNnZslKwOJJfh2Gly6zdd7Dbu6TqvKXEw59XFpdTflWttD7papROHZ
YxVsu/eCr02jbb+YemzO2AseVyvvPKSzECoMZerYQb2kKuijjFfX+1OQ5S1egEoZ
/RBpVPE146gy7Q==
-----END CERTIFICATE-----