Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
File:                     9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json)
Hash identifier:          sSVq1a9HH4EcnQtBw9u7WEykFOHu+6uBuECdq9TdZzo=
Subject key identifier:   B2:7F:2C:20:65:7D:06:49:6F:4F:41:AC:23:29:32:0F:EA:A9:D9:F0
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Certificate issuer:       /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial:       01962E2ACAF8416FBCD73BD409D69127E04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
Manifest number:          11E4
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=)
                          2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=)
                          3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=)
                          4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=)
                          5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: lQfSU7gDVtqqm+ujNsCxklsm3lVG1yiNlxuLj2hWtXk=)
                          6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=)
                          7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=)
                          8: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=)
                          9: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=)
                          10: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=)
                          11: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=)
                          12: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=)
                          13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=)
                          14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=)
                          15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=)
                          16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:f8:41:6f:bc:d7:3b:d4:09:d6:91:27:e0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=b27f2c20657d06496f4f41ac2329320feaa9d9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:8a:a5:91:5f:14:ca:4f:0b:33:12:90:12:
                    fe:dc:b3:e6:3e:2a:d7:d6:d6:d0:c5:66:83:14:56:
                    14:26:9d:a7:ab:d4:df:1e:61:a1:f9:c3:46:ea:45:
                    ad:03:07:9a:68:50:91:39:8b:46:33:bb:1f:bc:9d:
                    be:c0:aa:d8:b9:2a:e9:86:44:10:dd:4e:34:a9:af:
                    f7:cd:cb:2d:f3:c9:6a:35:d4:23:48:da:4a:26:91:
                    26:56:89:0a:18:12:06:89:45:d4:3a:35:0f:ff:cc:
                    de:44:a7:d3:23:9c:0a:a7:79:8b:97:ea:dc:99:3a:
                    52:85:e9:c3:e0:0a:d6:92:a6:a0:f7:c2:46:bc:4c:
                    c7:90:cf:22:7c:7e:a4:74:d0:de:64:dd:a8:62:9b:
                    6c:7a:f6:3d:fc:0a:a3:43:8b:61:5f:1a:17:0b:58:
                    19:41:cc:53:7b:6d:cd:c9:00:d3:3d:04:c5:6d:88:
                    8e:e9:1f:43:06:4a:c8:f1:d6:47:da:43:74:b6:bf:
                    19:d6:7b:11:b7:c4:07:25:e2:e2:32:da:6d:f7:22:
                    3d:0e:1a:17:80:ce:05:87:17:7d:13:c0:4e:8b:70:
                    ca:a1:6b:b6:db:18:8b:d3:03:f7:a4:ec:dc:6b:48:
                    20:4a:34:28:14:44:fe:28:6b:0f:28:0e:c4:46:9d:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:2C:20:65:7D:06:49:6F:4F:41:AC:23:29:32:0F:EA:A9:D9:F0
            X509v3 Authority Key Identifier:
                keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:eb:ea:be:d9:04:2e:37:9f:50:6f:ec:9e:7f:ec:60:3a:
         92:fd:4c:b1:8d:05:e8:e4:00:1e:df:55:48:fc:af:89:77:cd:
         c0:9b:75:7d:41:42:b1:30:51:8b:3c:39:da:a7:bd:b9:b3:d5:
         4e:7c:55:9a:3b:b2:56:0c:85:33:dc:e9:fa:f6:69:09:e0:b2:
         c5:7d:89:da:53:a1:21:1a:12:d0:5b:2b:ab:78:b5:7d:f0:e4:
         c7:6a:83:e7:69:61:df:4a:25:b0:93:27:cd:79:c7:b1:42:82:
         64:00:f5:57:68:cf:6d:a2:e0:13:fa:28:25:36:a9:3d:8f:56:
         d9:e8:2c:f9:34:44:be:bb:44:f6:22:ac:1e:74:64:88:b1:85:
         7c:6d:79:78:6b:71:cf:c5:09:74:e5:f3:0c:f8:37:96:c3:ab:
         e2:dc:d0:50:25:ff:92:a6:b7:f4:10:4b:c8:0d:7b:33:b7:31:
         ba:bd:7f:99:58:68:48:b9:ad:eb:78:fc:21:0f:5c:1e:80:bf:
         df:39:bd:3c:c5:ae:98:b1:75:d8:cc:fe:df:27:17:af:d9:2e:
         7f:2d:ec:4e:c0:3f:c8:ab:39:a1:a9:75:4f:3e:61:f7:2a:8c:
         ab:26:ea:c1:44:ba:fa:d2:a3:62:3c:27:62:1d:f7:a7:d3:e0:
         af:03:b3:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsr4QW+81zvUCdaRJ+BKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjUwNDEzMDgwMTE4WhcNMjUwNDE0MDgwMTE4WjAzMTEwLwYDVQQD
EyhiMjdmMmMyMDY1N2QwNjQ5NmY0ZjQxYWMyMzI5MzIwZmVhYTlkOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNSKpZFfFMpPCzMSkBL+3LPmPirX
1tbQxWaDFFYUJp2nq9TfHmGh+cNG6kWtAweaaFCROYtGM7sfvJ2+wKrYuSrphkQQ
3U40qa/3zcst88lqNdQjSNpKJpEmVokKGBIGiUXUOjUP/8zeRKfTI5wKp3mLl+rc
mTpShenD4ArWkqag98JGvEzHkM8ifH6kdNDeZN2oYptsevY9/AqjQ4thXxoXC1gZ
QcxTe23NyQDTPQTFbYiO6R9DBkrI8dZH2kN0tr8Z1nsRt8QHJeLiMtpt9yI9DhoX
gM4Fhxd9E8BOi3DKoWu22xiL0wP3pOzca0ggSjQoFET+KGsPKA7ERp1aQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ/LCBlfQZJb09BrCMpMg/qqdnwMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ7r6r7Z
BC43n1Bv7J5/7GA6kv1MsY0F6OQAHt9VSPyviXfNwJt1fUFCsTBRizw52qe9ubPV
TnxVmjuyVgyFM9zp+vZpCeCyxX2J2lOhIRoS0Fsrq3i1ffDkx2qD52lh30olsJMn
zXnHsUKCZAD1V2jPbaLgE/ooJTapPY9W2egs+TREvrtE9iKsHnRkiLGFfG15eGtx
z8UJdOXzDPg3lsOr4tzQUCX/kqa39BBLyA17M7cxur1/mVhoSLmt63j8IQ9cHoC/
3zm9PMWumLF12Mz+3ycXr9kufy3sTsA/yKs5oal1Tz5h9yqMqybqwUS6+tKjYjwn
Yh33p9PgrwOzKg==
-----END CERTIFICATE-----