Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File:                     uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier:          R3LlrshME3YzO8TVkElkysuBEfonWZ7yg1Rnx+s/imE=
Subject key identifier:   C4:B8:60:09:2A:95:EC:A8:F4:21:8C:AD:DC:76:5F:12:EA:72:BF:AF
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer:       /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial:       01962F3DB635B508AA49B797AD402499A7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number:          02D9
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 9uAJrIJKgOtOq3ATLuk4JEqJnwE.roa (hash: ps7+JDVzTyszBozCz4/MWq6V+oPhM0t6V9fw2FhYV+o=)
                          2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
                          3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: yaafvtVd1G1SLRwh3biSGbf4N4VI37IfikEc39Pv0RM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b6:35:b5:08:aa:49:b7:97:ad:40:24:99:a7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=c4b860092a95eca8f4218caddc765f12ea72bfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:80:b1:73:1e:7d:00:ef:b2:51:35:d0:4f:
                    dd:01:9f:80:e6:93:8d:35:03:10:1e:47:df:6b:20:
                    2f:06:83:1b:81:82:37:6d:a7:91:18:93:4d:ef:f2:
                    59:0e:14:2a:39:81:4c:8e:3a:1c:84:56:49:e8:d9:
                    0b:47:f2:b5:27:b0:5a:18:94:f9:c7:d6:ec:df:74:
                    61:7d:5f:5d:dc:60:55:64:12:cb:ad:8c:da:3e:df:
                    36:7c:2b:54:77:00:7c:17:6b:e6:56:32:d0:9b:9a:
                    33:80:2a:28:c8:6d:63:e8:7f:f5:77:d5:b6:08:54:
                    b2:dc:1e:90:4b:cc:cb:f4:3a:0e:37:c6:34:af:c9:
                    24:74:8c:7a:e3:8f:49:58:78:d4:35:35:cc:c6:23:
                    40:14:3a:3a:5d:40:98:76:ee:f1:0d:bb:66:4e:ca:
                    cc:51:6c:05:cb:76:fd:6c:14:2e:e3:47:be:c6:7e:
                    b0:54:33:6e:c4:be:f2:e8:bb:c0:8e:b1:ef:d2:c2:
                    8f:55:67:92:6e:d5:da:16:91:d3:b0:c4:ef:6c:d3:
                    30:aa:57:1c:85:6b:21:6c:b0:f9:fa:ea:eb:ad:92:
                    08:d0:4b:4f:52:8a:2c:33:f4:e8:bd:48:5a:7a:35:
                    76:4c:95:6a:2c:af:4d:4f:04:bb:c1:ea:f4:13:15:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B8:60:09:2A:95:EC:A8:F4:21:8C:AD:DC:76:5F:12:EA:72:BF:AF
            X509v3 Authority Key Identifier:
                keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:1f:39:cf:ca:89:46:a9:eb:0a:a9:d2:49:6f:47:04:db:
         7f:20:a6:6b:84:52:54:17:6f:0d:dc:f8:8a:9c:c5:29:0d:88:
         1c:16:9b:59:c7:5e:36:13:b7:e8:19:c7:3a:da:c9:ab:71:8f:
         d5:f8:98:46:bb:6f:3e:6f:d2:d1:36:65:39:06:93:86:c9:26:
         9c:16:83:f8:c8:96:ce:3f:37:48:b9:51:fa:03:66:ba:f9:83:
         73:37:72:3a:f3:c5:a2:51:9a:be:c6:99:43:fd:8b:28:fa:b6:
         23:83:aa:83:a5:92:e2:df:6b:a9:38:c4:88:44:d6:82:1a:77:
         61:e9:26:9d:00:6a:3c:0d:d9:a3:c5:d2:0f:8f:a3:b4:64:ef:
         dd:f7:07:db:26:d0:8f:b4:2b:cb:20:fe:e8:b9:56:c4:1e:32:
         0c:54:0e:a5:30:45:6a:49:c8:b4:43:be:16:b4:79:f6:5c:a0:
         5a:29:44:f9:87:3a:de:89:dd:03:d8:ef:d4:d3:f9:fc:39:49:
         f0:ec:44:c6:7e:e0:24:29:2a:9b:64:7c:5a:95:98:79:df:2d:
         b5:44:37:20:d1:42:65:66:60:68:a2:3b:d3:0d:27:cb:d7:25:
         c3:87:a0:8b:6e:a8:b7:c1:50:2b:f9:02:90:a0:f1:ce:14:d8:
         fb:0f:42:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbY1tQiqSbeXrUAkmaflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EyhjNGI4NjAwOTJhOTVlY2E4ZjQyMThjYWRkYzc2NWYxMmVhNzJiZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp46AsXMefQDvslE10E/dAZ+A5pON
NQMQHkffayAvBoMbgYI3baeRGJNN7/JZDhQqOYFMjjochFZJ6NkLR/K1J7BaGJT5
x9bs33RhfV9d3GBVZBLLrYzaPt82fCtUdwB8F2vmVjLQm5ozgCooyG1j6H/1d9W2
CFSy3B6QS8zL9DoON8Y0r8kkdIx6449JWHjUNTXMxiNAFDo6XUCYdu7xDbtmTsrM
UWwFy3b9bBQu40e+xn6wVDNuxL7y6LvAjrHv0sKPVWeSbtXaFpHTsMTvbNMwqlcc
hWshbLD5+urrrZII0EtPUoosM/TovUhaejV2TJVqLK9NTwS7wer0ExVi4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS4YAkqleyo9CGMrdx2XxLqcr+vMB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDAfOc/K
iUap6wqp0klvRwTbfyCma4RSVBdvDdz4ipzFKQ2IHBabWcdeNhO36BnHOtrJq3GP
1fiYRrtvPm/S0TZlOQaThskmnBaD+MiWzj83SLlR+gNmuvmDczdyOvPFolGavsaZ
Q/2LKPq2I4Oqg6WS4t9rqTjEiETWghp3YekmnQBqPA3Zo8XSD4+jtGTv3fcH2ybQ
j7QryyD+6LlWxB4yDFQOpTBFaknItEO+FrR59lygWilE+Yc63ondA9jv1NP5/DlJ
8OxExn7gJCkqm2R8WpWYed8ttUQ3INFCZWZgaKI70w0ny9clw4egi26ot8FQK/kC
kKDxzhTY+w9CZw==
-----END CERTIFICATE-----