Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File:                     rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier:          Clw5GAkChuvDu+IQc+CPoIVP8Xz2Dcqwx6Yy51RFsaA=
Subject key identifier:   4A:B0:71:0B:31:30:79:A9:1D:3F:84:1E:C1:D9:E3:5D:F8:13:68:78
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer:       /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial:       01962F066CCCC4367C45F2EA95C2D42E7DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
                          2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: gk9m1fHEGGUCa8266NaK3quRNeslZW7Pb4CQFObk3To=)
                          3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6c:cc:c4:36:7c:45:f2:ea:95:c2:d4:2e:7d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=4ab0710b313079a91d3f841ec1d9e35df8136878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:e1:33:3e:7a:27:a4:fa:a1:6a:cc:24:1e:
                    e8:7c:15:cd:5d:77:d1:5b:5a:dc:5d:81:cc:b6:b9:
                    1c:a3:a8:f1:ed:c4:85:c9:15:f8:1a:1e:31:32:38:
                    14:e9:d4:07:bd:fe:ad:8a:c8:48:60:96:eb:b5:a1:
                    d0:35:d3:00:76:4a:39:11:14:eb:7c:d0:05:8e:a8:
                    ee:b6:e6:65:7a:f3:20:e0:0a:39:c1:e6:a2:1b:73:
                    4c:96:cc:a7:59:36:9c:f6:87:12:af:4e:c0:2c:58:
                    bb:7d:49:37:aa:b0:76:51:db:81:b1:42:16:33:22:
                    44:53:f7:1d:43:3f:d5:a4:2e:28:7a:33:bc:2e:61:
                    7f:4c:4d:d0:04:e3:16:80:91:57:aa:4d:74:42:77:
                    96:91:97:8d:10:fd:71:59:ed:4c:8d:f6:07:91:ea:
                    0f:bb:a5:e3:9a:06:66:aa:fb:d7:dd:ae:99:a6:6a:
                    55:23:79:63:61:c4:2f:30:83:dc:b0:45:f2:9a:49:
                    30:14:c3:f7:68:71:dd:37:45:0b:4e:48:62:a6:2c:
                    3d:f5:fb:3b:56:52:b6:8d:52:51:e0:13:5d:d6:0f:
                    08:ad:7e:9e:9c:5f:49:02:07:24:f0:5c:93:1c:5d:
                    5d:06:43:55:5c:43:f8:0f:ca:5d:b8:15:97:46:f5:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:71:0B:31:30:79:A9:1D:3F:84:1E:C1:D9:E3:5D:F8:13:68:78
            X509v3 Authority Key Identifier:
                keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:ea:b3:21:61:79:0f:37:1a:68:8c:7c:e0:24:b8:b5:0b:
         83:5b:ab:e7:98:9b:bf:02:35:92:6e:c5:19:7a:a5:d9:a5:bc:
         c6:1b:d8:ca:22:cb:f8:ca:4f:ff:82:92:86:09:d6:52:c3:e2:
         54:97:a5:c1:5d:93:1b:fb:1b:bd:32:9b:73:a2:4a:28:d5:f0:
         43:02:04:12:1d:e3:70:2c:cf:cf:99:c9:51:b9:8d:0b:e2:a3:
         3f:29:71:40:34:de:fa:b2:82:6b:97:90:9a:65:03:17:2f:34:
         7d:b0:67:91:3c:f9:a6:6b:79:fa:29:5b:a5:48:56:f7:93:61:
         33:bd:40:9e:8d:65:fc:2e:69:1d:f7:21:9d:d7:c2:18:0a:52:
         d7:27:f0:66:ea:82:55:ac:64:ca:30:d6:d9:83:63:21:f3:fc:
         89:06:57:93:ec:df:5e:f8:ba:6d:99:7e:a8:55:1c:36:a4:a8:
         5c:46:91:01:26:a5:0e:35:52:97:ae:61:fa:eb:f1:46:d8:8c:
         a8:96:2a:8f:5a:74:f5:0b:a8:cf:25:5f:a9:9e:07:8a:de:bd:
         8a:ea:c7:68:da:86:08:70:31:e5:43:92:1e:2c:64:d2:28:aa:
         9d:11:e1:56:42:b3:56:b7:49:65:d2:a9:66:c0:45:d9:74:de:
         11:32:2e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmzMxDZ8RfLqlcLULn2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDk4NDUwMTA4NGE0NzIyMGM1Y2NjZjU0NzhiODk3YzI4
MjJjN2YwHhcNMjUwNDEzMTIwMTEyWhcNMjUwNDE0MTIwMTEyWjAzMTEwLwYDVQQD
Eyg0YWIwNzEwYjMxMzA3OWE5MWQzZjg0MWVjMWQ5ZTM1ZGY4MTM2ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+PhMz56J6T6oWrMJB7ofBXNXXfR
W1rcXYHMtrkco6jx7cSFyRX4Gh4xMjgU6dQHvf6tishIYJbrtaHQNdMAdko5ERTr
fNAFjqjutuZlevMg4Ao5weaiG3NMlsynWTac9ocSr07ALFi7fUk3qrB2UduBsUIW
MyJEU/cdQz/VpC4oejO8LmF/TE3QBOMWgJFXqk10QneWkZeNEP1xWe1MjfYHkeoP
u6XjmgZmqvvX3a6ZpmpVI3ljYcQvMIPcsEXymkkwFMP3aHHdN0ULTkhipiw99fs7
VlK2jVJR4BNd1g8IrX6enF9JAgck8FyTHF1dBkNVXEP4D8pduBWXRvWYcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqwcQsxMHmpHT+EHsHZ4134E2h4MB8GA1UdIwQY
MBaAFKwJhFAQhKRyIMXMz1R4uJfCgix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgt
NGJjNzAzNGYyOGQ4LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgtNGJjNzAzNGYyOGQ4
LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrnqsyFh
eQ83GmiMfOAkuLULg1ur55ibvwI1km7FGXql2aW8xhvYyiLL+MpP/4KShgnWUsPi
VJelwV2TG/sbvTKbc6JKKNXwQwIEEh3jcCzPz5nJUbmNC+KjPylxQDTe+rKCa5eQ
mmUDFy80fbBnkTz5pmt5+ilbpUhW95NhM71Ano1l/C5pHfchndfCGApS1yfwZuqC
VaxkyjDW2YNjIfP8iQZXk+zfXvi6bZl+qFUcNqSoXEaRASalDjVSl65h+uvxRtiM
qJYqj1p09QuozyVfqZ4Hit69iurHaNqGCHAx5UOSHixk0iiqnRHhVkKzVrdJZdKp
ZsBF2XTeETIumA==
-----END CERTIFICATE-----