Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File:                     FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier:          OoeLaizBnAT7GKL0dVuWVLWhdGx45exhlBWN/AOk3NM=
Subject key identifier:   1C:AB:77:07:BF:58:0B:E1:04:BA:44:A3:DF:7B:75:1C:98:4B:D8:58
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer:       /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial:       01962E9934879569FB0B000C4B6760186B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number:          121A
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: B7T3sZebBoQYg5x0RYsPBj23iEo.roa (hash: O9yZ4KZ+ahHkW7NK8lCiaskHOdR7GD8prEJOvXc4vRI=)
                          2: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: Iwl97hZmHaasWPTbg3E77Fs+xeHQk6fCDGXlZLPxwMs=)
                          3: swm48vI840zUfl2DaxMs8hbeLoo.roa (hash: JjFou/0kBbJgWy4DCqB6G2CRT7ZKW8RECYymrqJxYxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:87:95:69:fb:0b:00:0c:4b:67:60:18:6b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=1cab7707bf580be104ba44a3df7b751c984bd858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:76:22:31:f6:e2:0b:17:86:fc:9f:17:d8:1c:
                    ab:ae:8e:70:26:76:cb:a7:62:ab:49:cd:3c:5d:a7:
                    99:55:d4:12:f9:06:16:10:4c:bd:4c:f1:10:f4:f8:
                    e5:c7:fa:20:2a:bf:5c:36:e0:28:86:39:bb:fa:5c:
                    9b:2a:2d:03:87:5b:25:a5:0b:61:40:34:6c:cb:f8:
                    46:17:31:0a:25:d7:b3:66:26:93:df:7b:c1:f8:b8:
                    82:44:c6:cc:54:51:68:7f:40:13:8a:fd:9c:2a:cb:
                    c6:20:16:fe:81:24:5a:db:7d:d4:0a:97:6d:6a:08:
                    40:50:64:65:0c:56:aa:15:6e:c9:8a:9b:db:43:51:
                    2f:33:73:3d:4e:d0:99:79:5f:f2:85:c5:11:00:08:
                    73:ec:fc:14:6d:8f:73:5b:87:24:14:a4:7d:fb:53:
                    dc:d5:92:e5:74:25:e9:1f:ce:05:6b:fa:93:7d:88:
                    02:d6:27:61:1f:a0:7e:12:9f:28:c8:da:f2:fb:05:
                    e1:c8:c7:ae:24:cb:92:42:e1:a9:66:39:8f:fe:eb:
                    6e:27:de:8e:74:13:1f:18:e9:9c:43:c5:b4:52:7c:
                    63:05:5d:35:c7:83:f5:5a:3e:de:88:91:a5:8e:f3:
                    65:f6:36:88:88:3f:29:07:bc:9c:0e:74:de:d2:17:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AB:77:07:BF:58:0B:E1:04:BA:44:A3:DF:7B:75:1C:98:4B:D8:58
            X509v3 Authority Key Identifier:
                keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:f9:8b:9f:df:20:57:d6:87:bf:18:4d:61:fe:2e:8b:43:
         ae:36:f3:68:48:91:68:e9:33:a3:7f:31:ae:6d:24:47:78:50:
         e9:ad:c4:44:fb:64:2e:e9:76:fe:37:cc:35:42:e7:da:a2:1b:
         35:27:fc:1f:17:f3:34:7e:89:e4:07:24:a3:91:b7:7b:33:40:
         17:a6:70:d8:a1:04:b0:11:01:99:b6:06:f1:de:74:35:31:0b:
         c7:5b:24:94:4b:65:1e:ec:4d:68:31:e6:5d:a8:95:fb:47:56:
         a6:4c:99:84:f9:df:a5:99:eb:b5:91:d4:f8:10:5b:f7:1e:2f:
         ca:72:37:9d:82:67:f8:05:3b:60:96:9b:ed:b1:64:24:d4:e8:
         0e:ac:b5:e3:f0:8d:4d:2c:a5:45:a3:e8:7a:9d:b6:5f:ad:c6:
         52:92:ff:ac:6b:74:bc:cf:c2:29:69:4c:0a:29:31:8d:c1:4f:
         aa:90:2b:bf:af:cf:07:47:f8:0c:57:21:df:66:04:bb:e4:e7:
         2d:f1:01:36:85:ed:83:a0:22:ec:56:69:6a:63:5b:63:fa:76:
         12:63:1d:7b:33:6f:5e:9e:d5:5f:55:04:e2:98:8c:f2:bc:79:
         52:d6:15:53:37:b5:d2:07:65:b4:da:3d:f7:b5:8c:63:89:c4:
         a2:34:e9:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTSHlWn7CwAMS2dgGGtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjE0NTcyN2QzNGFlNjYwN2E2MTUzMDEyODNlZWViZDVk
NjI5MWMwHhcNMjUwNDEzMTAwMTU0WhcNMjUwNDE0MTAwMTU0WjAzMTEwLwYDVQQD
EygxY2FiNzcwN2JmNTgwYmUxMDRiYTQ0YTNkZjdiNzUxYzk4NGJkODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nYiMfbiCxeG/J8X2Byrro5wJnbL
p2KrSc08XaeZVdQS+QYWEEy9TPEQ9Pjlx/ogKr9cNuAohjm7+lybKi0Dh1slpQth
QDRsy/hGFzEKJdezZiaT33vB+LiCRMbMVFFof0ATiv2cKsvGIBb+gSRa233UCpdt
aghAUGRlDFaqFW7JipvbQ1EvM3M9TtCZeV/yhcURAAhz7PwUbY9zW4ckFKR9+1Pc
1ZLldCXpH84Fa/qTfYgC1idhH6B+Ep8oyNry+wXhyMeuJMuSQuGpZjmP/utuJ96O
dBMfGOmcQ8W0UnxjBV01x4P1Wj7eiJGljvNl9jaIiD8pB7ycDnTe0hfoYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByrdwe/WAvhBLpEo997dRyYS9hYMB8GA1UdIwQY
MBaAFBbxRXJ9NK5mB6YVMBKD7uvV1ikcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgt
ZWNiN2FlMjcyMmMxLzEvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgtZWNiN2FlMjcyMmMx
LzEvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdT5i5/f
IFfWh78YTWH+LotDrjbzaEiRaOkzo38xrm0kR3hQ6a3ERPtkLul2/jfMNULn2qIb
NSf8HxfzNH6J5Acko5G3ezNAF6Zw2KEEsBEBmbYG8d50NTELx1sklEtlHuxNaDHm
XaiV+0dWpkyZhPnfpZnrtZHU+BBb9x4vynI3nYJn+AU7YJab7bFkJNToDqy14/CN
TSylRaPoep22X63GUpL/rGt0vM/CKWlMCikxjcFPqpArv6/PB0f4DFch32YEu+Tn
LfEBNoXtg6Ai7FZpamNbY/p2EmMdezNvXp7VX1UE4piM8rx5UtYVUze10gdltNo9
97WMY4nEojTpRg==
-----END CERTIFICATE-----