Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File:                     u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier:          F/NAG2v7IO7XB518jzVeiW6GxsULZQQYwkrPO9Xezj8=
Subject key identifier:   55:F9:04:C5:9C:3A:7C:5F:33:E5:05:1B:40:30:37:3E:47:89:6E:F7
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer:       /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial:       01962DF3A765F9BF567FA2EB79C0BE62D5ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
                          2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
                          3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
                          4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
                          5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 2caYh4q7fhDJliIJXBFrGqTFYwcQ0PpLgI0MWvu0KuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:65:f9:bf:56:7f:a2:eb:79:c0:be:62:d5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=55f904c59c3a7c5f33e5051b4030373e47896ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0f:c4:c2:17:11:59:dd:08:ad:58:36:f4:17:
                    bc:65:76:8b:6e:64:cd:25:8e:60:94:95:73:37:24:
                    ce:04:ec:de:62:c3:d0:db:9d:c1:4b:8c:93:08:28:
                    89:c3:80:fc:80:3e:4e:b9:60:1d:a4:a3:28:08:6d:
                    bf:da:3a:a3:f7:3e:2a:92:de:90:c2:d8:a9:95:6c:
                    d7:af:bd:a4:98:51:f0:5f:a9:5e:64:f7:d8:89:06:
                    6b:fa:51:fe:26:8b:b5:24:77:11:e6:1c:9e:3a:c4:
                    c5:a2:0c:2c:b0:82:88:0e:f1:74:ac:da:10:4c:d3:
                    8d:27:50:87:56:67:aa:a5:1b:a9:07:67:11:40:dd:
                    1c:63:c0:7f:68:1e:a1:a2:08:fb:7d:1c:59:db:ae:
                    7f:4c:aa:3a:02:a3:e3:25:d7:0f:73:15:08:1a:b3:
                    ef:38:5b:77:28:d3:e2:a0:11:ce:45:a6:34:d7:ff:
                    1f:2d:60:db:bb:c3:4c:34:5e:a2:36:3c:b5:4d:f7:
                    c4:78:ce:37:d0:a8:9d:86:45:c9:a2:45:ca:02:91:
                    29:21:23:d8:c7:42:07:da:24:be:37:5a:29:19:db:
                    f9:d7:f6:83:56:6a:5b:4c:0e:da:3e:33:c8:7a:9f:
                    95:62:f0:73:96:b9:eb:90:ae:ab:2a:96:f2:02:93:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:04:C5:9C:3A:7C:5F:33:E5:05:1B:40:30:37:3E:47:89:6E:F7
            X509v3 Authority Key Identifier:
                keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:fa:c6:9f:16:15:1e:da:f2:a3:ba:ee:a5:55:e8:19:95:
         6e:ec:5a:22:57:a1:a1:9f:4c:0e:9a:dc:c5:12:62:42:cd:42:
         e8:21:60:ed:0e:5c:9c:66:1e:79:89:ab:db:78:3d:f5:be:39:
         09:cc:6c:81:d5:c9:c7:7c:61:7b:f6:b6:f7:e5:51:3a:2b:28:
         a0:59:c6:7d:f2:ae:8b:b2:13:9b:f6:e2:5a:51:00:2d:64:95:
         a7:4b:dc:db:88:c4:60:39:27:0b:a7:83:e0:1e:8f:93:36:9a:
         84:78:35:23:b3:27:de:44:8c:34:81:a7:ab:ec:e0:2f:25:1b:
         db:d6:03:ce:cc:71:df:66:24:c4:66:33:b5:8a:ff:51:b0:61:
         c0:ce:af:95:bc:90:96:f3:e0:76:b9:7f:68:3f:d2:14:9f:49:
         b4:5f:57:a0:02:ef:cd:41:a7:ce:ba:d5:13:ea:74:d4:0b:9e:
         e4:5c:99:6d:91:41:8f:22:71:a8:c8:21:d4:e7:7d:67:ae:d8:
         92:11:0f:59:f0:9a:fe:5b:bb:55:fb:c9:01:7e:99:50:ef:6d:
         17:b7:ef:92:b2:b2:bd:61:52:6b:af:a2:51:d6:14:47:f2:08:
         95:9b:a7:20:0e:87:25:52:0a:8d:0f:9e:94:0c:f9:60:9e:07:
         cb:bf:79:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86dl+b9Wf6LrecC+YtXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj
Y2Y5ZjkwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
Eyg1NWY5MDRjNTljM2E3YzVmMzNlNTA1MWI0MDMwMzczZTQ3ODk2ZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ/EwhcRWd0IrVg29Be8ZXaLbmTN
JY5glJVzNyTOBOzeYsPQ253BS4yTCCiJw4D8gD5OuWAdpKMoCG2/2jqj9z4qkt6Q
wtiplWzXr72kmFHwX6leZPfYiQZr+lH+Jou1JHcR5hyeOsTFogwssIKIDvF0rNoQ
TNONJ1CHVmeqpRupB2cRQN0cY8B/aB6hogj7fRxZ265/TKo6AqPjJdcPcxUIGrPv
OFt3KNPioBHORaY01/8fLWDbu8NMNF6iNjy1TffEeM430KidhkXJokXKApEpISPY
x0IH2iS+N1opGdv51/aDVmpbTA7aPjPIep+VYvBzlrnrkK6rKpbyApP3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX5BMWcOnxfM+UFG0AwNz5HiW73MB8GA1UdIwQY
MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt
NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1
LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/76xp8W
FR7a8qO67qVV6BmVbuxaIlehoZ9MDprcxRJiQs1C6CFg7Q5cnGYeeYmr23g99b45
CcxsgdXJx3xhe/a29+VROisooFnGffKui7ITm/biWlEALWSVp0vc24jEYDknC6eD
4B6PkzaahHg1I7Mn3kSMNIGnq+zgLyUb29YDzsxx32YkxGYztYr/UbBhwM6vlbyQ
lvPgdrl/aD/SFJ9JtF9XoALvzUGnzrrVE+p01Aue5FyZbZFBjyJxqMgh1Od9Z67Y
khEPWfCa/lu7VfvJAX6ZUO9tF7fvkrKyvWFSa6+iUdYUR/IIlZunIA6HJVIKjQ+e
lAz5YJ4Hy795/w==
-----END CERTIFICATE-----