Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File:                     we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier:          Jcna0coQPIYduygb/CpSh+ek9cCFTaX3hdTYFbe/iEw=
Subject key identifier:   A8:BB:74:F6:8A:56:ED:BF:79:69:BC:D8:B6:E9:36:B3:C9:2D:4D:BD
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer:       /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial:       01962F3D37A69FCCEDCB91D705EA256CD85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
                          2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: PSMTLMcw/+vgoU5qxbeOAPUJxLqMOZ4cfVDnD+dnAG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:a6:9f:cc:ed:cb:91:d7:05:ea:25:6c:d8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=a8bb74f68a56edbf7969bcd8b6e936b3c92d4dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:20:c6:65:7e:c3:6e:03:5b:3f:69:c8:ed:b0:
                    b4:cc:64:7f:a7:48:e3:ac:51:33:3c:b1:6d:b5:9a:
                    32:0b:fb:9b:26:72:9e:1c:b8:9c:21:3a:09:2d:e8:
                    60:94:50:03:3f:d7:31:7d:e7:5c:87:28:41:4b:8e:
                    f9:c1:5c:54:84:47:11:e7:3b:70:09:4f:75:68:bc:
                    54:fc:9c:5c:7e:2c:d0:f6:fb:a5:ee:8f:cc:d1:a6:
                    55:f2:e6:d3:2d:86:f4:c1:8a:98:91:68:5f:0e:3d:
                    08:1b:c4:31:28:30:f6:22:17:2c:41:ce:99:2e:55:
                    66:fe:80:5d:40:f0:89:ff:2d:a3:13:8c:f1:3d:67:
                    c3:f0:0c:a4:4c:98:d2:71:06:46:71:4c:bb:a5:ba:
                    09:8d:06:12:f5:3d:53:ac:6c:f8:0f:e9:fb:f3:cd:
                    07:d2:79:9c:a4:f8:05:c7:22:98:31:9b:65:d1:8b:
                    05:bc:33:c5:88:d7:e4:18:64:ea:ad:93:f8:95:2b:
                    f9:9a:21:fa:e6:b4:ac:c3:86:7b:d8:9c:3c:41:94:
                    e9:bb:65:72:ab:6f:bd:86:43:53:29:a6:04:b2:cf:
                    35:9b:84:a7:e4:3e:3b:d2:bc:cf:31:39:9a:94:52:
                    19:4f:bc:ee:23:68:ab:66:31:d8:ba:b8:55:96:93:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BB:74:F6:8A:56:ED:BF:79:69:BC:D8:B6:E9:36:B3:C9:2D:4D:BD
            X509v3 Authority Key Identifier:
                keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:8e:e4:3b:a9:ef:6a:6b:b2:56:96:2c:1a:1b:fb:1e:2d:
         00:eb:e9:a0:de:00:90:3f:17:ff:bd:e4:85:f1:90:8d:46:29:
         e4:0c:91:b0:fa:8a:a2:a8:9c:e3:0a:f5:2b:a3:fe:0c:c1:c3:
         cc:cd:91:94:c9:be:ce:ef:12:7e:c7:6b:e0:35:ed:00:6c:8e:
         18:cf:37:90:a9:06:21:6b:7d:c7:24:df:49:44:f3:6f:be:c6:
         44:fc:bb:c4:25:33:cc:21:b1:b8:e2:ca:fa:01:94:54:f8:49:
         c1:2a:03:65:11:de:ac:a7:29:d7:d4:e0:26:3c:fe:08:85:05:
         87:8b:cf:b7:e8:83:cd:55:1b:c5:8d:7c:de:96:c5:f1:bf:a1:
         65:de:31:1e:d8:64:6f:a6:a8:c9:7f:99:c4:25:2a:5d:3c:8c:
         f4:3e:68:ad:ce:81:66:08:30:ea:cc:07:0b:a0:29:43:5d:a6:
         fe:75:28:75:d2:fb:ec:88:d7:00:4b:39:d5:60:c5:0d:e8:bb:
         7f:c7:13:95:75:9e:6b:4b:49:0c:a1:d2:b5:f5:98:f8:89:ba:
         c4:2d:9e:ef:8e:91:52:41:8d:a1:4a:7d:c3:36:39:3a:6f:b6:
         df:65:7d:36:1f:19:8f:b1:d1:a6:53:c7:a9:a3:fd:1a:80:68:
         2e:c6:b6:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTemn8zty5HXBeolbNhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3
ZTk4ZmQwHhcNMjUwNDEzMTMwMTAzWhcNMjUwNDE0MTMwMTAzWjAzMTEwLwYDVQQD
EyhhOGJiNzRmNjhhNTZlZGJmNzk2OWJjZDhiNmU5MzZiM2M5MmQ0ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iDGZX7DbgNbP2nI7bC0zGR/p0jj
rFEzPLFttZoyC/ubJnKeHLicIToJLehglFADP9cxfedchyhBS475wVxUhEcR5ztw
CU91aLxU/JxcfizQ9vul7o/M0aZV8ubTLYb0wYqYkWhfDj0IG8QxKDD2IhcsQc6Z
LlVm/oBdQPCJ/y2jE4zxPWfD8AykTJjScQZGcUy7pboJjQYS9T1TrGz4D+n7880H
0nmcpPgFxyKYMZtl0YsFvDPFiNfkGGTqrZP4lSv5miH65rSsw4Z72Jw8QZTpu2Vy
q2+9hkNTKaYEss81m4Sn5D470rzPMTmalFIZT7zuI2irZjHYurhVlpM+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi7dPaKVu2/eWm82LbpNrPJLU29MB8GA1UdIwQY
MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt
Y2VlNWJlODdhNDZiLzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi
LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtGO5Dup
72prslaWLBob+x4tAOvpoN4AkD8X/73khfGQjUYp5AyRsPqKoqic4wr1K6P+DMHD
zM2RlMm+zu8Sfsdr4DXtAGyOGM83kKkGIWt9xyTfSUTzb77GRPy7xCUzzCGxuOLK
+gGUVPhJwSoDZRHerKcp19TgJjz+CIUFh4vPt+iDzVUbxY183pbF8b+hZd4xHthk
b6aoyX+ZxCUqXTyM9D5orc6BZggw6swHC6ApQ12m/nUoddL77IjXAEs51WDFDei7
f8cTlXWea0tJDKHStfWY+Im6xC2e746RUkGNoUp9wzY5Om+232V9Nh8Zj7HRplPH
qaP9GoBoLsa2zg==
-----END CERTIFICATE-----