Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          QQYNzTdUusnbquoIsO2ZQw8UQ0Pl1Ftl04f2qLOyhRo=
Subject key identifier:   83:A2:40:A3:DE:61:08:A7:0D:A4:85:BB:70:14:0B:88:FC:0F:A6:2F
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       01962E61E98E170585AC7B767867A31A5330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0643
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: aT7Oyjk2+CvrVwQRmNyfuUBdZuAOLUVQoPYCbjW/6Jw=)
                          2: MzxQnXbI2W7tTUv9-GpYRiwer6Y.roa (hash: ShncGR7jcZH4xdPF/fjNQO1+bVZJWb8hKZoGUpL2aXI=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:8e:17:05:85:ac:7b:76:78:67:a3:1a:53:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=83a240a3de6108a70da485bb70140b88fc0fa62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:a8:bc:c4:ea:c6:a7:e5:fa:3e:1e:81:78:
                    16:5d:9a:ed:34:dc:91:48:13:83:77:d7:26:fe:c1:
                    42:ba:5c:02:84:55:fb:9d:bc:0e:eb:18:9e:2a:31:
                    24:5e:a8:c1:fd:bb:2d:68:32:4b:e9:14:1c:de:5d:
                    9d:8f:17:37:ab:ff:d3:9c:39:bd:83:89:d6:0a:6c:
                    73:b1:e2:d9:22:24:58:d2:55:a7:21:dd:c8:bf:ed:
                    fe:c3:95:d2:7b:c1:62:05:56:30:86:c7:89:7c:55:
                    84:24:c4:04:62:23:1e:54:ef:09:7c:29:92:89:bf:
                    be:d8:e2:1a:3a:d9:04:97:0e:ce:fb:f7:23:86:4c:
                    c2:9c:3b:c3:b8:a5:d1:52:2f:8b:db:07:f2:3e:fb:
                    5b:95:b1:0f:cf:9c:56:9e:66:0b:69:41:c5:b0:12:
                    b7:9d:ef:f1:ca:27:06:92:a4:e8:8b:a0:38:ab:7e:
                    54:dd:d6:38:89:ab:a6:28:31:38:aa:74:a5:62:2a:
                    c6:94:10:48:68:8a:60:6c:67:14:3a:b9:bf:05:68:
                    3a:78:86:67:3e:4c:36:65:1f:60:bb:22:76:b3:c3:
                    ae:a7:4a:49:66:8c:66:49:9e:5f:f8:24:7c:fb:59:
                    ee:a7:69:fd:b1:0f:e1:ac:1a:20:d9:3a:98:96:0a:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:40:A3:DE:61:08:A7:0D:A4:85:BB:70:14:0B:88:FC:0F:A6:2F
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:63:f9:f3:89:d1:f6:56:ac:08:c3:e6:89:58:40:07:ba:34:
         4a:09:00:8f:6a:ab:c9:c9:8c:a9:42:f1:d8:0d:03:1f:df:3f:
         ce:9d:c7:c7:31:30:5a:25:b2:1f:31:01:36:bb:02:2d:e3:fc:
         5b:ee:57:da:27:6d:da:8a:53:85:b0:ff:2a:08:d5:1c:cb:f7:
         2d:e2:ec:59:82:ce:ee:90:15:9f:93:29:ac:02:a9:01:8f:9b:
         78:57:0c:b9:91:64:1c:c2:82:5b:f7:85:0d:0e:19:ce:8c:2a:
         59:15:10:af:6f:9a:78:cb:9f:bb:31:12:90:e4:c0:a3:4a:56:
         92:93:2b:ba:38:5f:5d:96:84:c3:3b:3c:3e:40:16:d0:0d:f5:
         53:01:b5:88:f0:82:2e:10:90:0c:00:7f:f9:cb:28:e6:f5:75:
         a4:92:4d:55:fd:47:33:3b:f1:12:8d:fd:6f:cb:f8:63:e0:76:
         f9:37:3e:f3:79:00:5c:54:dc:75:91:bf:b7:a4:0a:d7:ce:d4:
         1d:b2:df:8d:82:39:ab:c0:02:2f:16:76:51:78:dc:03:a0:01:
         7c:a7:66:aa:f1:16:90:f6:2d:5e:af:7d:ea:6d:a7:b5:d4:ec:
         1f:db:13:be:e2:cb:85:94:9a:e5:cc:66:c2:35:9c:f3:48:9f:
         8b:cd:ac:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYemOFwWFrHt2eGejGlMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz
M2I1MzMwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
Eyg4M2EyNDBhM2RlNjEwOGE3MGRhNDg1YmI3MDE0MGI4OGZjMGZhNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxciovMTqxqfl+j4egXgWXZrtNNyR
SBODd9cm/sFCulwChFX7nbwO6xieKjEkXqjB/bstaDJL6RQc3l2djxc3q//TnDm9
g4nWCmxzseLZIiRY0lWnId3Iv+3+w5XSe8FiBVYwhseJfFWEJMQEYiMeVO8JfCmS
ib++2OIaOtkElw7O+/cjhkzCnDvDuKXRUi+L2wfyPvtblbEPz5xWnmYLaUHFsBK3
ne/xyicGkqToi6A4q35U3dY4iaumKDE4qnSlYirGlBBIaIpgbGcUOrm/BWg6eIZn
Pkw2ZR9guyJ2s8Oup0pJZoxmSZ5f+CR8+1nup2n9sQ/hrBog2TqYlgpA0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOiQKPeYQinDaSFu3AUC4j8D6YvMB8GA1UdIwQY
MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt
NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl
LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGP584nR
9lasCMPmiVhAB7o0SgkAj2qrycmMqULx2A0DH98/zp3HxzEwWiWyHzEBNrsCLeP8
W+5X2idt2opThbD/KgjVHMv3LeLsWYLO7pAVn5MprAKpAY+beFcMuZFkHMKCW/eF
DQ4ZzowqWRUQr2+aeMufuzESkOTAo0pWkpMrujhfXZaEwzs8PkAW0A31UwG1iPCC
LhCQDAB/+cso5vV1pJJNVf1HMzvxEo39b8v4Y+B2+Tc+83kAXFTcdZG/t6QK187U
HbLfjYI5q8ACLxZ2UXjcA6ABfKdmqvEWkPYtXq996m2ntdTsH9sTvuLLhZSa5cxm
wjWc80ifi82sKQ==
-----END CERTIFICATE-----