Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
File:                     520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json)
Hash identifier:          97iBASrUMzysU2x/NXunZJvv9Mrliljf+FZ9+cLCRuY=
Subject key identifier:   D4:6C:97:33:B4:BF:E1:4E:D6:F0:50:9B:07:93:60:63:4B:27:6B:6B
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       01962F0713571D0A6E23E315BAC781A6F7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
Manifest number:          0FD5
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 1-i_ESwYWDKjvxe-cLQFb33q5Qu0.roa (hash: MWN71QN/v297mIABIQi0BIqexEx6vQv3LxWHulQ1lh0=)
                          2: 3uMGCa1hGu4z3o3-_G7z4ipL-iU.roa (hash: W9UTR4UDUFmqfh0USMFmsobpW7zQlT5fd2b07I+b238=)
                          3: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: r3xR7bherlKLm19jAEj8oUJf5Odk22TAG8a3z7SRMV4=)
                          4: 53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa (hash: cQll3lCbJxJtoxzsBZdQMm8ZJ1gmBBCp3yO2flYfKKU=)
                          5: 5aybWk2Ky5dF88Dl5BHsEFM1SO0.roa (hash: H+JwBN0SZWGViTYdzpWvA1lltG+ihuV8ot5mKPyc2Ag=)
                          6: D51k8Yufzem8ogKjVaG-BE3-N9Q.roa (hash: LfZnqpQQPapIc1GbVrcmd90U2aDXCgwED1y7JLo14nI=)
                          7: EEzCfGegHPEpdqTqvMRMlcFre1Y.roa (hash: uwoju1vAFdOs3H0Q+w/qT7aEQBJpMP98DiaXonyIQ9M=)
                          8: EQAhdlSS1FIFJlau-mazb3tbQD8.roa (hash: EYIWh35VYrIjFevk0wSjam09x/CTgAsspbJddnJMeDU=)
                          9: QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa (hash: UeTuehE3XWxqnHJAwNv7xL7hPz4xW2vyEJKj+BsbTow=)
                          10: aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa (hash: Ofs8Vq4O2KmWTmDnq5aKJmZojKw/IVecQ8WTuC45ixk=)
                          11: fjY_g_wwgFPVt57q0tJYGzzoSDw.roa (hash: qq4Ldl54/taiWut/8vwq9PH71gezdeLMf1VMPmsHUe8=)
                          12: pw1_qD5J6o76enPdGNTr_4Viub8.roa (hash: L6pLEncIISYEMGBKzu7DbyUXVYEOgT4kfh4modTEATA=)
                          13: qigZWtFurHaD054OcaOqq49am_w.roa (hash: Sa19eTl0ldE9k7oxfeYcou5g3EZnF3X8bF0Hbur3zdE=)
                          14: tKmEC4MB5hqVQbFF_5qlwwlDujU.roa (hash: DWWPvUtVR9Z8569/gJySYMoNxwD1GjHbMP8gxFtXEzs=)
                          15: tRNXUlx68rKP9UOE-hhExB1kws8.roa (hash: +Hd3tIKng2pbogIxn1dcX/j1LNU33NvuDwSbS4tdpEA=)
                          16: ve2cUb4I36o88cUncaHeOHK5tGk.roa (hash: 6gTupRG97QR/JQvN8ay2tdbOI4Q3EMkpnACGQxjxniI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:13:57:1d:0a:6e:23:e3:15:ba:c7:81:a6:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=d46c9733b4bfe14ed6f0509b079360634b276b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:69:d1:6e:6f:99:78:3b:c3:30:4a:e8:86:
                    0c:9d:ed:ec:a7:cb:9d:a6:79:22:35:d2:48:09:ad:
                    5c:19:ea:9e:ab:d7:f8:11:4e:c9:90:95:f6:de:d9:
                    d2:48:03:6a:1e:a4:62:dc:b4:f5:d6:e0:0a:67:ef:
                    1b:99:2f:c3:ab:12:e0:de:36:a9:89:bf:3c:2b:09:
                    47:bd:e8:6b:d7:48:d3:f1:43:07:7e:2d:6d:fa:83:
                    cc:7b:36:ce:1c:43:86:c8:63:05:2b:29:fb:ff:e9:
                    8a:47:f5:54:a4:0e:2f:98:15:7a:37:89:5e:21:27:
                    af:b7:41:bb:27:cc:4f:19:57:f6:01:bf:f8:0a:92:
                    47:09:31:2e:f4:3f:ce:a1:0a:29:a0:d4:1e:05:62:
                    0c:75:4f:1f:6a:3d:66:aa:7a:b3:ff:54:4e:7e:b3:
                    fe:d7:18:1f:63:52:a7:fa:2f:85:3a:36:ef:8d:f8:
                    3a:9f:e3:5b:23:d7:20:b7:93:8d:31:41:d5:2a:91:
                    da:34:b9:1d:26:7f:c8:36:db:8f:35:2d:48:be:e4:
                    30:95:a7:d5:b9:72:1e:71:b0:65:7c:40:15:90:90:
                    8a:ff:e9:52:0c:f0:12:bd:36:57:20:63:5f:0c:fb:
                    8b:47:dd:7f:2f:2c:60:69:df:9b:3d:c2:7d:54:62:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6C:97:33:B4:BF:E1:4E:D6:F0:50:9B:07:93:60:63:4B:27:6B:6B
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:1f:b6:28:39:13:2d:d0:f0:e3:f6:5a:c3:ab:4f:21:2d:
         d5:95:a3:86:fc:39:fd:9a:4b:e1:0e:be:7b:63:d9:9e:27:a4:
         7c:51:66:b2:6a:5c:08:b8:f8:71:ac:13:40:3a:f3:62:59:ff:
         fc:e1:63:6e:6d:f5:4e:c7:1c:c6:03:86:f0:73:cf:88:19:17:
         19:f4:ed:8e:53:21:53:f1:c8:64:6a:4e:07:c5:a0:78:5d:c5:
         60:5b:40:b1:f0:d4:8e:6b:95:c0:71:25:58:4b:c3:2b:35:0d:
         47:ca:7f:96:2b:ee:b9:5c:90:fa:f3:7a:b1:36:cb:9a:81:7e:
         6b:b6:1c:92:03:62:08:3d:f3:d8:cf:49:91:24:cb:91:6f:dd:
         80:cb:22:3a:52:81:f1:25:a2:81:a4:df:2e:e1:a0:08:10:21:
         6d:f3:c7:e8:e9:da:b9:74:6b:a2:ee:a1:5d:9a:05:67:24:13:
         a9:90:b3:8c:df:ba:f6:48:36:36:29:c4:95:04:28:ba:8b:b3:
         ad:f9:ac:44:bc:74:1b:4b:80:e1:16:5d:05:ad:01:66:3b:fe:
         04:62:6a:9b:98:a5:a7:a5:fd:68:70:b9:21:b7:a8:f4:f9:33:
         c7:24:3f:da:d3:17:45:5c:c0:d7:84:36:ce:d8:77:5a:dc:3a:
         3b:43:b3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxNXHQpuI+MVuseBpvf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx
OGM5YmMwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
EyhkNDZjOTczM2I0YmZlMTRlZDZmMDUwOWIwNzkzNjA2MzRiMjc2YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Bp0W5vmXg7wzBK6IYMne3sp8ud
pnkiNdJICa1cGeqeq9f4EU7JkJX23tnSSANqHqRi3LT11uAKZ+8bmS/DqxLg3jap
ib88KwlHvehr10jT8UMHfi1t+oPMezbOHEOGyGMFKyn7/+mKR/VUpA4vmBV6N4le
ISevt0G7J8xPGVf2Ab/4CpJHCTEu9D/OoQopoNQeBWIMdU8faj1mqnqz/1ROfrP+
1xgfY1Kn+i+FOjbvjfg6n+NbI9cgt5ONMUHVKpHaNLkdJn/INtuPNS1IvuQwlafV
uXIecbBlfEAVkJCK/+lSDPASvTZXIGNfDPuLR91/Lyxgad+bPcJ9VGI3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRslzO0v+FO1vBQmweTYGNLJ2trMB8GA1UdIwQY
MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt
YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5
LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATp8ftig5
Ey3Q8OP2WsOrTyEt1ZWjhvw5/ZpL4Q6+e2PZniekfFFmsmpcCLj4cawTQDrzYln/
/OFjbm31TsccxgOG8HPPiBkXGfTtjlMhU/HIZGpOB8WgeF3FYFtAsfDUjmuVwHEl
WEvDKzUNR8p/livuuVyQ+vN6sTbLmoF+a7YckgNiCD3z2M9JkSTLkW/dgMsiOlKB
8SWigaTfLuGgCBAhbfPH6OnauXRrou6hXZoFZyQTqZCzjN+69kg2NinElQQououz
rfmsRLx0G0uA4RZdBa0BZjv+BGJqm5ilp6X9aHC5Ibeo9PkzxyQ/2tMXRVzA14Q2
zth3Wtw6O0Oz9Q==
-----END CERTIFICATE-----