Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File:                     SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier:          4Aq8gGQ6Kc2iLRnhrlD/YIrSbjqVtEo+NVUL5/3I3fg=
Subject key identifier:   DC:8F:DA:E9:54:89:55:36:77:73:BE:39:5F:77:EF:66:1D:15:59:BE
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer:       /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial:       01962E61A4453831CFBD8A10189862300711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
                          2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
                          3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: AO7eYGLBOM0zmNGxXBJywr78APWm0Fvv5m4e80DrBXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:45:38:31:cf:bd:8a:10:18:98:62:30:07:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=dc8fdae9548955367773be395f77ef661d1559be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:52:60:95:20:be:76:6c:fd:1f:24:25:f0:
                    fa:45:54:ee:f6:d4:be:4c:70:d9:82:e3:3c:f3:d0:
                    fd:b9:af:aa:71:b5:01:ae:ef:e5:8a:d5:f9:33:03:
                    b7:71:94:e1:8d:ed:fc:9a:32:e5:e5:b0:b2:48:6d:
                    fa:ab:8b:e6:e2:13:27:73:6a:0f:a8:a4:5e:11:a0:
                    4b:2d:f6:5e:3e:1d:d0:50:de:3b:e7:c6:58:ae:b4:
                    2b:3b:ab:76:f3:04:6a:16:3e:93:48:91:56:ea:43:
                    b3:c6:b1:92:fd:a2:2c:8b:e9:68:30:b7:e4:c7:6d:
                    92:55:70:a1:1d:cb:c3:44:ac:9b:1e:d4:f2:6f:09:
                    24:43:91:d7:8c:97:ad:b7:43:9c:1e:4d:f9:d8:5c:
                    e6:2c:bc:2b:4e:2e:89:f3:87:dc:78:5c:06:cb:21:
                    92:51:1a:c8:79:6a:04:a1:46:fd:27:e8:0d:0e:5f:
                    16:6e:8c:0d:60:fa:fc:e0:c3:bd:82:da:c9:2d:e4:
                    df:17:d7:73:f8:2d:ce:c8:2d:b3:63:b8:1d:06:b3:
                    9e:bc:22:6b:18:cd:0d:28:ca:95:f7:78:a0:41:20:
                    01:e7:6c:c4:8f:93:01:d7:1a:d8:99:24:3d:aa:f6:
                    40:94:8f:48:4c:a4:4c:d5:b7:2b:9c:24:59:08:f6:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8F:DA:E9:54:89:55:36:77:73:BE:39:5F:77:EF:66:1D:15:59:BE
            X509v3 Authority Key Identifier:
                keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:94:19:5e:ed:b4:07:f6:d6:d7:f9:f4:a3:dc:8d:e6:cc:
         62:0a:60:35:ab:67:c8:00:80:1c:54:da:60:37:26:11:e9:b2:
         c3:ee:3b:25:ab:9e:42:2f:ad:6b:bc:a6:4a:12:5e:81:d4:e7:
         92:a8:f0:2a:21:50:68:fc:b7:de:93:61:ab:ab:3e:68:8a:3c:
         d0:e2:46:f6:98:94:df:06:5e:03:4a:18:96:e0:03:9f:9d:66:
         93:f6:81:91:a4:cc:4b:ed:cb:03:37:41:83:40:39:43:65:35:
         74:ae:dd:fe:2e:4d:68:19:4d:75:09:63:82:0b:90:24:0c:84:
         b6:39:4d:25:f2:74:01:9d:40:c8:d7:3b:d3:20:d8:13:ca:85:
         99:1a:e6:b4:90:a3:92:bd:d3:d8:06:80:d1:09:2d:64:7d:00:
         ab:6e:bb:67:fd:51:e9:e6:5a:04:11:6d:5b:83:ba:98:aa:00:
         5b:f2:ef:2d:df:f3:31:ee:6f:a4:40:fd:0d:ad:cf:1d:49:95:
         ad:fa:49:a6:af:0e:14:f4:9a:35:12:d7:01:9b:9d:3d:5d:96:
         a9:ca:d9:41:3d:85:6a:4c:e3:50:da:75:8c:1e:4c:d8:28:70:
         df:59:d9:a9:21:71:a7:56:14:26:4b:4b:2f:51:8f:45:d1:7f:
         7f:33:aa:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaRFODHPvYoQGJhiMAcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYzJiYzBlM2U1OTMzMmY0YmUyYzU4ZmYyNWExODYxZjVm
ZGU4MTkwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
EyhkYzhmZGFlOTU0ODk1NTM2Nzc3M2JlMzk1Zjc3ZWY2NjFkMTU1OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFdSYJUgvnZs/R8kJfD6RVTu9tS+
THDZguM889D9ua+qcbUBru/litX5MwO3cZThje38mjLl5bCySG36q4vm4hMnc2oP
qKReEaBLLfZePh3QUN4758ZYrrQrO6t28wRqFj6TSJFW6kOzxrGS/aIsi+loMLfk
x22SVXChHcvDRKybHtTybwkkQ5HXjJett0OcHk352FzmLLwrTi6J84fceFwGyyGS
URrIeWoEoUb9J+gNDl8WbowNYPr84MO9gtrJLeTfF9dz+C3OyC2zY7gdBrOevCJr
GM0NKMqV93igQSAB52zEj5MB1xrYmSQ9qvZAlI9ITKRM1bcrnCRZCPYh8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyP2ulUiVU2d3O+OV9372YdFVm+MB8GA1UdIwQY
MBaAFErCvA4+WTMvS+LFj/JaGGH1/egZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYt
ODA3M2RjZTA5NjI4LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYtODA3M2RjZTA5NjI4
LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf6UGV7t
tAf21tf59KPcjebMYgpgNatnyACAHFTaYDcmEemyw+47JaueQi+ta7ymShJegdTn
kqjwKiFQaPy33pNhq6s+aIo80OJG9piU3wZeA0oYluADn51mk/aBkaTMS+3LAzdB
g0A5Q2U1dK7d/i5NaBlNdQljgguQJAyEtjlNJfJ0AZ1AyNc70yDYE8qFmRrmtJCj
kr3T2AaA0QktZH0Aq267Z/1R6eZaBBFtW4O6mKoAW/LvLd/zMe5vpED9Da3PHUmV
rfpJpq8OFPSaNRLXAZudPV2WqcrZQT2FakzjUNp1jB5M2Chw31nZqSFxp1YUJktL
L1GPRdF/fzOqMA==
-----END CERTIFICATE-----