Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File:                     s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier:          hozO5EmZRq5quyA8Koc3FiP2oHtsW7u1mpnREHO7r1o=
Subject key identifier:   51:B0:D2:8C:26:91:5B:54:54:A9:01:96:C4:7B:46:66:F4:F3:79:4B
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer:       /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial:       01962E61A8D69575C2E210A1137937EA6FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number:          11DA
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=)
                          2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=)
                          3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=)
                          4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=)
                          5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=)
                          6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=)
                          7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: q3ED/bbgxFAZZeN4CZe7KrhS4Ww2oN7yndFc3z311iU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a8:d6:95:75:c2:e2:10:a1:13:79:37:ea:6f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=51b0d28c26915b5454a90196c47b4666f4f3794b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:44:50:b3:f9:de:a3:89:48:26:4c:3f:3e:
                    75:e1:2c:d5:65:9d:f5:57:4a:94:8a:9f:6f:8c:bb:
                    a9:3f:07:18:d0:a4:9b:d6:17:a3:93:ec:a9:b8:3b:
                    8b:31:3d:73:05:43:01:9b:43:f7:aa:a4:ad:1b:89:
                    ce:d4:4d:e7:c4:b6:53:80:f5:50:60:0f:7f:af:c0:
                    75:7c:a8:5c:cd:cb:0e:66:02:11:57:c4:93:83:9d:
                    21:15:2f:4d:f8:fd:65:31:24:23:73:ed:08:bf:25:
                    45:02:01:d4:da:bc:f0:c1:5a:b6:46:fc:5f:56:80:
                    e3:a5:63:30:cf:e4:c7:44:50:9f:5f:07:4c:ed:5b:
                    10:e5:0a:36:43:ed:e6:2c:2b:24:0b:76:24:69:9e:
                    79:81:80:e8:8d:c8:34:56:d4:25:57:b1:60:16:57:
                    60:8d:f6:8c:01:94:dd:d8:ab:fd:b8:cf:2e:a1:5b:
                    ec:94:12:4c:08:a5:98:6f:3e:80:45:e4:43:5c:8c:
                    d9:4e:98:ca:db:9e:22:42:c7:39:6b:c9:8d:ea:4d:
                    f0:8e:bb:2c:eb:72:c0:5d:18:e5:da:3c:2c:5a:ff:
                    3c:70:5c:47:36:9c:dd:9d:4f:f8:b7:73:65:18:bf:
                    76:e0:6b:21:5d:09:75:cc:58:e6:90:62:35:3e:8d:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:D2:8C:26:91:5B:54:54:A9:01:96:C4:7B:46:66:F4:F3:79:4B
            X509v3 Authority Key Identifier:
                keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:91:36:55:0a:a7:8a:2d:f8:50:84:b2:43:05:d9:a4:f6:8a:
         73:98:92:d7:38:5e:30:5d:7c:68:37:dd:ed:d9:11:2f:66:fc:
         8b:9e:f3:88:b4:a7:2d:91:f2:03:f9:d7:3e:dc:5d:ac:1b:c2:
         79:65:5e:7e:ff:e0:22:f8:fd:e4:a3:50:64:8e:0f:6d:80:ee:
         ef:cd:3f:77:43:19:29:26:6b:11:60:86:c4:e7:61:e5:cb:e5:
         71:2f:86:75:47:66:44:eb:3e:14:de:02:e5:c5:2c:fa:20:7a:
         6b:b5:b1:96:b4:f9:24:5c:ce:2f:41:9e:ad:9e:9a:15:5b:7f:
         cd:e2:05:0d:8f:ab:8d:68:d5:18:37:e1:83:86:0d:78:f8:a5:
         fd:5f:27:4a:97:c0:e1:45:fa:4a:b4:0b:0e:39:b7:f9:8e:0a:
         8c:08:57:8c:d6:98:f8:f5:dc:38:d9:31:f5:05:7c:e9:e4:16:
         da:21:9f:a7:84:ba:62:10:4a:a8:cd:76:aa:47:52:33:e5:c3:
         1c:ad:2a:3b:eb:aa:88:a8:e2:7f:93:fd:fe:59:1a:f0:21:4f:
         3c:14:de:32:d2:5a:d2:db:a5:c3:3c:20:dc:9a:5a:a1:f3:ff:
         08:79:f9:86:ff:f1:02:72:21:94:d1:b5:2c:26:c8:ef:b3:6f:
         33:60:f1:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYajWlXXC4hChE3k36m/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy
YjAzYzAwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
Eyg1MWIwZDI4YzI2OTE1YjU0NTRhOTAxOTZjNDdiNDY2NmY0ZjM3OTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRdEULP53qOJSCZMPz514SzVZZ31
V0qUip9vjLupPwcY0KSb1hejk+ypuDuLMT1zBUMBm0P3qqStG4nO1E3nxLZTgPVQ
YA9/r8B1fKhczcsOZgIRV8STg50hFS9N+P1lMSQjc+0IvyVFAgHU2rzwwVq2Rvxf
VoDjpWMwz+THRFCfXwdM7VsQ5Qo2Q+3mLCskC3YkaZ55gYDojcg0VtQlV7FgFldg
jfaMAZTd2Kv9uM8uoVvslBJMCKWYbz6AReRDXIzZTpjK254iQsc5a8mN6k3wjrss
63LAXRjl2jwsWv88cFxHNpzdnU/4t3NlGL924GshXQl1zFjmkGI1Po3E2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGw0owmkVtUVKkBlsR7Rmb083lLMB8GA1UdIwQY
MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt
YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh
LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZE2VQqn
ii34UISyQwXZpPaKc5iS1zheMF18aDfd7dkRL2b8i57ziLSnLZHyA/nXPtxdrBvC
eWVefv/gIvj95KNQZI4PbYDu780/d0MZKSZrEWCGxOdh5cvlcS+GdUdmROs+FN4C
5cUs+iB6a7WxlrT5JFzOL0GerZ6aFVt/zeIFDY+rjWjVGDfhg4YNePil/V8nSpfA
4UX6SrQLDjm3+Y4KjAhXjNaY+PXcONkx9QV86eQW2iGfp4S6YhBKqM12qkdSM+XD
HK0qO+uqiKjif5P9/lka8CFPPBTeMtJa0tulwzwg3JpaofP/CHn5hv/xAnIhlNG1
LCbI77NvM2Dx6g==
-----END CERTIFICATE-----