Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          7TV7DJwmMui7/OKd3Eub8hqDYXgBSL1AcnWSchC2AUA=
Subject key identifier:   8C:98:DF:F6:F9:A6:90:D4:40:E0:FC:4E:F4:D0:18:24:AF:DB:97:C4
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       01962F064F844B1B993AF811AC6FFF288CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          0FEE
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
                          2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
                          3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
                          4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
                          5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: Rx28Y9fMm6fS4qrAzDg+4Z0JJ2/ZrYzWMk49sgeQN3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:84:4b:1b:99:3a:f8:11:ac:6f:ff:28:8c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=8c98dff6f9a690d440e0fc4ef4d01824afdb97c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:26:f0:13:e2:c3:c2:a2:4e:aa:22:bd:3b:
                    8f:94:1c:bd:de:89:cf:b0:e3:f1:62:61:71:e3:02:
                    63:68:b6:39:fd:7d:9d:60:cc:b3:17:b5:0c:50:46:
                    9d:b0:4b:10:41:14:6f:d9:89:86:3a:e2:7d:21:f5:
                    f8:86:6f:6a:df:99:e2:79:e0:3f:e7:e3:cd:ee:34:
                    62:2d:9a:44:46:b8:e1:6d:cd:be:c7:12:f8:3b:2a:
                    4a:78:8f:69:30:bd:b4:9f:14:14:d1:13:03:3b:ce:
                    93:6c:3f:27:71:b7:0b:09:77:92:42:b1:37:43:00:
                    d7:1a:ff:4c:e7:65:c9:5b:51:cf:fb:f2:88:95:b7:
                    5f:cc:cf:b3:1b:a6:63:c8:2b:8e:65:ab:e0:88:19:
                    12:3e:06:e3:6c:86:8c:d1:0f:b4:37:71:67:27:1e:
                    1d:55:94:55:d5:e2:6d:b0:ac:1f:b9:0c:09:e0:09:
                    20:65:1d:db:a6:51:6c:91:f8:25:54:16:90:c6:48:
                    ba:af:86:dc:28:88:5b:e3:aa:9a:b8:b0:bb:e1:1b:
                    35:5a:61:ea:6c:55:09:5b:0d:c7:fb:e1:95:a1:79:
                    41:d1:9b:75:10:6b:3e:b2:e0:7a:12:ba:5a:3b:12:
                    b8:85:a2:20:59:ec:80:a6:d1:ee:00:b0:c4:1f:e3:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:DF:F6:F9:A6:90:D4:40:E0:FC:4E:F4:D0:18:24:AF:DB:97:C4
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:ba:2a:e5:29:db:84:bc:2f:c3:cc:c3:49:9a:f8:66:84:
         c6:a2:72:95:76:26:d1:08:23:56:1f:e8:ab:7a:c9:52:c1:84:
         b4:5e:09:8f:61:d5:e2:ec:d7:bd:b8:93:f7:48:3e:80:0b:70:
         84:e0:a2:16:b8:32:ff:dd:02:61:45:37:07:d3:06:5c:bf:5f:
         90:3b:09:95:4d:a7:61:60:ea:21:02:e3:64:94:36:b5:52:eb:
         8c:a5:8c:71:a7:67:2f:95:f3:e4:30:01:45:b8:4c:85:8f:d9:
         09:b6:bb:eb:31:59:b0:b4:43:0c:7c:8d:2e:e1:bf:64:c5:76:
         2e:1f:a7:8d:8f:62:b4:0e:91:75:9a:17:33:af:ac:b8:99:39:
         dc:26:47:76:ab:8b:96:b8:90:b9:b5:e4:3c:85:ef:dc:75:70:
         fd:30:06:d6:12:ad:3c:ca:ca:95:73:6e:54:7d:89:5b:52:3c:
         75:5c:d1:8c:97:03:b8:49:7a:27:a4:d3:99:da:26:41:44:f5:
         5f:29:47:41:ab:ee:ce:f5:cb:0f:b4:c6:80:13:0a:35:5d:a3:
         60:1b:55:cc:0d:71:6b:48:95:e2:64:de:c5:f6:22:71:b8:fc:
         4d:6f:c4:7a:c6:da:57:02:54:ef:39:71:5e:b0:92:e4:a1:dd:
         bf:35:72:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBk+ESxuZOvgRrG//KIy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi
NTlkZDYwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg4Yzk4ZGZmNmY5YTY5MGQ0NDBlMGZjNGVmNGQwMTgyNGFmZGI5N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVgm8BPiw8KiTqoivTuPlBy93onP
sOPxYmFx4wJjaLY5/X2dYMyzF7UMUEadsEsQQRRv2YmGOuJ9IfX4hm9q35nieeA/
5+PN7jRiLZpERrjhbc2+xxL4OypKeI9pML20nxQU0RMDO86TbD8ncbcLCXeSQrE3
QwDXGv9M52XJW1HP+/KIlbdfzM+zG6ZjyCuOZavgiBkSPgbjbIaM0Q+0N3FnJx4d
VZRV1eJtsKwfuQwJ4AkgZR3bplFskfglVBaQxki6r4bcKIhb46qauLC74Rs1WmHq
bFUJWw3H++GVoXlB0Zt1EGs+suB6ErpaOxK4haIgWeyAptHuALDEH+NQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyY3/b5ppDUQOD8TvTQGCSv25fEMB8GA1UdIwQY
MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt
NzUyOTUyNTFiMWU4LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4
LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF+6KuUp
24S8L8PMw0ma+GaExqJylXYm0QgjVh/oq3rJUsGEtF4Jj2HV4uzXvbiT90g+gAtw
hOCiFrgy/90CYUU3B9MGXL9fkDsJlU2nYWDqIQLjZJQ2tVLrjKWMcadnL5Xz5DAB
RbhMhY/ZCba76zFZsLRDDHyNLuG/ZMV2Lh+njY9itA6RdZoXM6+suJk53CZHdquL
lriQubXkPIXv3HVw/TAG1hKtPMrKlXNuVH2JW1I8dVzRjJcDuEl6J6TTmdomQUT1
XylHQavuzvXLD7TGgBMKNV2jYBtVzA1xa0iV4mTexfYicbj8TW/EesbaVwJU7zlx
XrCS5KHdvzVyQQ==
-----END CERTIFICATE-----