Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
File:                     m7wD9sWihPoA27WqYJxRW3xYmWk.mft (raw, json)
Hash identifier:          Tq58hzcjONL6pTrINGsot7Eadvv2ghoN2Atzo6fajaI=
Subject key identifier:   AF:06:BF:30:12:B8:27:47:45:FD:7F:CC:DE:EB:92:F5:C7:54:3C:9B
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Certificate issuer:       /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial:       01962E991ADF47E026D27EF8DBE44E9B5408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
Manifest number:          0CFC
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 3sPU2X2zzDRvsMfK94CkKzBQsU4.roa (hash: R00sfB2denxS/OHNxg4q8pRCPm0SOYbizoeUhKRjq4k=)
                          2: m7wD9sWihPoA27WqYJxRW3xYmWk.crl (hash: O4JoJOBjcDRv4rPeKflyoAcLX7c2iaH60ujM3A3t2WM=)
                          3: opItG7iycfoqyIbeJkA-iBhJGY4.roa (hash: 3K1U6liu+Oy3aeOJx85XxOBGN8iAYZ7rHauSs3gu8HQ=)
                          4: p85mwjNpw2DPiEwmt3DneLuJKMU.roa (hash: 9txQiYeTXR7ltBlHFbZo2A2VUj0ra3QUmGnLHYSLM/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:df:47:e0:26:d2:7e:f8:db:e4:4e:9b:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=af06bf3012b8274745fd7fccdeeb92f5c7543c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:b5:69:ed:ea:4f:e8:4d:5c:9e:83:1f:21:
                    4c:b0:10:8a:ff:2d:b0:34:dd:ac:fb:62:5b:88:bc:
                    d7:bb:3d:40:7a:76:bc:98:ef:96:fc:54:9f:87:7d:
                    2e:31:01:b1:4c:64:96:ab:cd:f0:99:5b:d1:ca:4b:
                    a4:1c:5a:e7:b1:ff:f2:f9:45:33:05:d6:f2:c0:e6:
                    12:29:29:7d:b5:dd:f6:3b:0b:04:88:55:d3:dd:21:
                    44:da:46:31:2a:31:65:cd:c0:7f:a8:25:0d:33:8d:
                    7f:4f:43:9b:fb:a3:16:77:fa:0f:27:a2:d2:10:2d:
                    07:1f:7a:e1:49:81:58:4b:2d:63:6b:6d:af:9e:6c:
                    8a:0d:4d:8d:57:22:b8:42:28:bd:a3:04:f3:9d:40:
                    88:b7:7f:cf:f4:03:d7:a9:e6:9d:1e:43:a7:cc:01:
                    da:f9:36:a7:07:8e:97:59:48:ef:8c:97:ca:0a:b8:
                    fc:be:a2:51:a5:a4:ee:eb:89:cd:3d:e3:05:8f:89:
                    15:7c:5e:75:0f:bf:95:e3:e3:06:2f:c8:f9:9c:e0:
                    d7:5e:91:bc:12:81:74:d7:9c:73:50:c8:b3:b8:e7:
                    bc:63:e7:3e:f3:03:6e:9d:8e:a1:47:2d:dd:5c:6c:
                    de:79:b5:3e:08:87:f2:05:7b:9c:40:26:cd:8a:8d:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:BF:30:12:B8:27:47:45:FD:7F:CC:DE:EB:92:F5:C7:54:3C:9B
            X509v3 Authority Key Identifier:
                keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:21:05:f4:39:9b:bb:a8:e8:dc:f6:a7:0c:bb:b5:4d:da:30:
         ec:42:af:c7:fb:23:5b:21:80:0b:09:38:27:44:46:27:2b:be:
         47:a1:3f:78:1e:f0:64:9b:9e:7c:d1:65:96:6c:26:bb:4a:86:
         96:b7:46:77:bf:2d:45:4b:af:66:20:2d:51:c3:e0:cb:37:f5:
         6d:10:f3:82:f9:d0:bf:98:84:7c:50:79:a6:6d:0f:df:04:f8:
         dd:76:79:25:ac:19:96:10:7d:2f:3f:f1:4f:4d:05:7c:b9:e7:
         df:47:df:dc:d2:23:24:88:d2:c2:95:17:1a:23:7b:ab:ad:92:
         26:da:b3:de:02:43:ff:7b:ac:28:ed:f1:9b:8d:f0:6a:50:47:
         e0:74:9f:5b:c9:e4:65:c9:7c:60:1a:0d:c7:da:00:94:ba:19:
         62:89:1b:81:d9:a3:ab:d1:0e:13:0b:13:b8:a5:8a:cf:9d:52:
         24:ae:89:38:a0:0c:dc:e9:fa:9f:48:2c:6f:60:be:1b:45:c3:
         08:a0:a5:78:2e:29:b4:50:4b:90:29:da:af:01:e6:81:cd:18:
         27:d8:d9:09:6f:bb:f6:28:a7:cc:16:1e:39:07:ee:87:34:30:
         b1:bb:28:70:8f:69:50:2a:c5:93:9e:5f:c8:95:7f:b5:62:15:
         1f:e2:b4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRrfR+Am0n742+ROm1QIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmMwM2Y2YzVhMjg0ZmEwMGRiYjVhYTYwOWM1MTViN2M1
ODk5NjkwHhcNMjUwNDEzMTAwMTQ3WhcNMjUwNDE0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhhZjA2YmYzMDEyYjgyNzQ3NDVmZDdmY2NkZWViOTJmNWM3NTQzYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oe1ae3qT+hNXJ6DHyFMsBCK/y2w
NN2s+2JbiLzXuz1Aena8mO+W/FSfh30uMQGxTGSWq83wmVvRykukHFrnsf/y+UUz
BdbywOYSKSl9td32OwsEiFXT3SFE2kYxKjFlzcB/qCUNM41/T0Ob+6MWd/oPJ6LS
EC0HH3rhSYFYSy1ja22vnmyKDU2NVyK4Qii9owTznUCIt3/P9APXqeadHkOnzAHa
+TanB46XWUjvjJfKCrj8vqJRpaTu64nNPeMFj4kVfF51D7+V4+MGL8j5nODXXpG8
EoF015xzUMizuOe8Y+c+8wNunY6hRy3dXGzeebU+CIfyBXucQCbNio39PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8GvzASuCdHRf1/zN7rkvXHVDybMB8GA1UdIwQY
MBaAFJu8A/bFooT6ANu1qmCcUVt8WJlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd3RDlzV2loUG9BMjdXcVlKeFJXM3hZbVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84OTQ0ZjQtZjM0Mi00MjU0LWI1YTct
OWQ3ZTVhZjRkZmM1LzEvbTd3RDlzV2loUG9BMjdXcVlKeFJXM3hZbVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS84OTQ0ZjQtZjM0Mi00MjU0LWI1YTctOWQ3ZTVhZjRkZmM1
LzEvbTd3RDlzV2loUG9BMjdXcVlKeFJXM3hZbVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSEF9Dmb
u6jo3PanDLu1Tdow7EKvx/sjWyGACwk4J0RGJyu+R6E/eB7wZJuefNFllmwmu0qG
lrdGd78tRUuvZiAtUcPgyzf1bRDzgvnQv5iEfFB5pm0P3wT43XZ5JawZlhB9Lz/x
T00FfLnn30ff3NIjJIjSwpUXGiN7q62SJtqz3gJD/3usKO3xm43walBH4HSfW8nk
Zcl8YBoNx9oAlLoZYokbgdmjq9EOEwsTuKWKz51SJK6JOKAM3On6n0gsb2C+G0XD
CKCleC4ptFBLkCnarwHmgc0YJ9jZCW+79iinzBYeOQfuhzQwsbsocI9pUCrFk55f
yJV/tWIVH+K0Vw==
-----END CERTIFICATE-----