Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          6oabOUy+7l7HMN3BZGuhaJYuXdm/n/dPTfu/uMcwgHE=
Subject key identifier:   B6:22:DC:04:5D:84:A9:E3:12:0B:6C:08:9D:A9:7F:EB:F0:E5:1C:04
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       01962ECFC8DBFEE5F5040EA7FC05022C6636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=)
                          2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: POr8ikXEhgpN3zDTpcPc8WD1EPtNEpvBYuJMbrw3Rds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c8:db:fe:e5:f5:04:0e:a7:fc:05:02:2c:66:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=b622dc045d84a9e3120b6c089da97febf0e51c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:11:5b:85:af:28:3f:85:53:56:c3:4a:6a:
                    70:32:37:ee:9c:b1:1f:aa:04:a9:88:4c:b1:df:c4:
                    3d:88:72:be:6d:22:f2:22:65:52:5b:fd:e4:f1:3a:
                    ee:ca:bf:29:5b:1e:60:48:b6:87:1c:d0:d6:fa:be:
                    28:d2:32:65:51:a5:49:8e:f9:2e:c9:79:00:c6:bb:
                    15:cb:54:29:f4:a4:3a:e1:ca:99:85:44:52:19:91:
                    40:c2:7a:3f:ee:7c:43:d4:c8:15:4b:c3:f2:8b:98:
                    a2:e3:99:8d:3e:b6:e3:ea:3e:6c:b8:a4:52:00:14:
                    a4:b9:ce:a0:bc:57:a8:4f:95:71:15:dd:cf:bf:1d:
                    c5:61:3e:ab:2e:cb:fb:04:79:45:b4:f3:3a:37:d2:
                    66:32:1b:3a:2f:e5:cb:cc:9a:a1:f2:0e:38:d2:81:
                    a1:4a:49:9c:4f:90:00:67:37:26:5c:34:6c:b0:72:
                    0c:e3:41:ed:d0:c1:d2:ca:5f:5f:b4:87:2d:5e:81:
                    d9:31:16:7a:cc:bf:95:26:f8:2e:eb:c8:62:a9:7c:
                    0d:2b:1d:b1:63:1e:90:c3:8f:ac:9f:55:43:e4:8b:
                    62:83:c6:75:33:6e:7a:a9:f7:fb:81:db:ac:f1:ab:
                    6a:b6:ce:22:0a:d1:5d:f5:69:99:d7:a3:aa:85:a9:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:DC:04:5D:84:A9:E3:12:0B:6C:08:9D:A9:7F:EB:F0:E5:1C:04
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:27:d1:fe:14:3c:8d:dd:b1:fa:b2:93:7d:39:5f:83:f5:
         81:d9:34:1e:d8:d5:35:d1:91:d3:03:61:d1:41:1c:e3:8d:38:
         53:36:91:43:19:64:2a:3d:28:31:34:56:3c:c7:56:87:9f:4f:
         4e:95:87:e1:4a:57:0f:c8:23:e4:84:2b:97:59:e5:f3:ec:7c:
         3e:b3:dd:d0:77:86:d9:13:52:f7:d6:f1:6a:36:02:47:69:27:
         1b:03:52:32:c4:dd:52:c8:f0:d2:f1:03:b1:bc:10:8f:7d:f2:
         0f:5c:a6:36:be:f7:74:7b:88:e5:f6:d0:8b:f5:d0:4e:fe:e5:
         54:ac:6f:d5:11:2a:4a:66:ab:f8:61:26:2e:20:2f:52:24:3f:
         68:57:0e:20:9b:23:ca:6c:56:dc:c6:94:35:ae:7d:bb:39:cc:
         f1:9c:85:86:df:40:35:a4:e0:0b:a5:8c:eb:1a:f5:eb:6c:62:
         a2:1a:17:d9:a5:03:05:8f:76:39:d0:53:93:92:23:7e:a4:1a:
         86:f1:43:7b:14:2e:66:77:42:29:ff:be:d9:93:28:80:f6:13:
         c8:af:7f:a8:23:ef:e9:6d:aa:14:af:c1:1e:f1:cf:83:8e:a1:
         39:73:04:b8:80:f4:07:b5:7c:4d:bb:e1:f2:ff:8b:3b:7a:75:
         00:e6:3a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8jb/uX1BA6n/AUCLGY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2
MTg3Y2MwHhcNMjUwNDEzMTEwMTMxWhcNMjUwNDE0MTEwMTMxWjAzMTEwLwYDVQQD
EyhiNjIyZGMwNDVkODRhOWUzMTIwYjZjMDg5ZGE5N2ZlYmYwZTUxYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFkRW4WvKD+FU1bDSmpwMjfunLEf
qgSpiEyx38Q9iHK+bSLyImVSW/3k8Truyr8pWx5gSLaHHNDW+r4o0jJlUaVJjvku
yXkAxrsVy1Qp9KQ64cqZhURSGZFAwno/7nxD1MgVS8Pyi5ii45mNPrbj6j5suKRS
ABSkuc6gvFeoT5VxFd3Pvx3FYT6rLsv7BHlFtPM6N9JmMhs6L+XLzJqh8g440oGh
SkmcT5AAZzcmXDRssHIM40Ht0MHSyl9ftIctXoHZMRZ6zL+VJvgu68hiqXwNKx2x
Yx6Qw4+sn1VD5Itig8Z1M256qff7gdus8atqts4iCtFd9WmZ16Oqhal2fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYi3ARdhKnjEgtsCJ2pf+vw5RwEMB8GA1UdIwQY
MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt
MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2
LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpYn0f4U
PI3dsfqyk305X4P1gdk0HtjVNdGR0wNh0UEc4404UzaRQxlkKj0oMTRWPMdWh59P
TpWH4UpXD8gj5IQrl1nl8+x8PrPd0HeG2RNS99bxajYCR2knGwNSMsTdUsjw0vED
sbwQj33yD1ymNr73dHuI5fbQi/XQTv7lVKxv1REqSmar+GEmLiAvUiQ/aFcOIJsj
ymxW3MaUNa59uznM8ZyFht9ANaTgC6WM6xr162xiohoX2aUDBY92OdBTk5IjfqQa
hvFDexQuZndCKf++2ZMogPYTyK9/qCPv6W2qFK/BHvHPg46hOXMEuID0B7V8Tbvh
8v+LO3p1AOY6MQ==
-----END CERTIFICATE-----