Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File:                     we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier:          8dvTqXb0waKQHmpXCFHurzt9G7EkAQr0gPTv+1+3l08=
Subject key identifier:   8B:C6:FA:20:1C:55:9C:99:4A:7B:28:A3:3A:C7:44:5A:99:AF:A3:53
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer:       /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial:       01962E61D2EDF0FF20342CF2009D46C0CDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number:          CA
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: iCajC07N1wXhLZhUBQa5qaDtpkc.roa (hash: TBjsHC2hLzzwIzsyf+O4ISG2vQbLL5AsHhFZzfGik5g=)
                          2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: AyzIB9zSJI2DPDjB890wC8tQdNUkLA4SQYvZdIH9oXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d2:ed:f0:ff:20:34:2c:f2:00:9d:46:c0:cd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=8bc6fa201c559c994a7b28a33ac7445a99afa353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:e9:0a:ce:48:f8:6b:ac:e3:c8:93:da:ec:
                    3d:19:3b:8b:89:39:17:77:5b:c6:eb:58:e4:f0:89:
                    25:ec:65:dd:7b:f6:8f:cc:6f:3b:41:58:72:e8:c0:
                    bf:6a:50:1c:a3:76:e1:2e:e3:18:e5:e9:63:8b:69:
                    4f:2b:ff:7a:b7:c6:7d:64:84:da:97:46:40:5c:0f:
                    10:54:83:7d:72:de:22:6c:f6:63:6d:86:79:f3:a5:
                    3e:c3:ae:3a:a4:10:26:25:6c:a9:2a:b8:92:d3:3f:
                    e4:e2:00:c2:b1:8e:5f:7e:e9:a9:74:1f:e0:96:cf:
                    78:74:5d:de:ee:37:89:22:66:12:cf:64:e3:32:5b:
                    99:43:f4:f9:1f:14:cd:88:06:c9:9a:12:63:c6:d5:
                    b7:d7:1d:f2:ba:54:ee:ba:7e:34:45:24:f1:49:cc:
                    c0:20:b4:55:60:76:1e:89:6b:c1:29:6f:0c:61:85:
                    dc:7e:51:6b:ad:68:10:97:48:99:44:fd:f1:93:72:
                    92:d5:ba:ed:56:e8:51:da:0b:c8:7e:7f:19:69:fa:
                    e4:2a:8c:89:c5:37:2c:0c:eb:94:80:1a:c3:3d:72:
                    8f:38:e1:35:2c:46:f1:fa:af:68:03:84:88:c4:95:
                    15:4a:5b:80:0d:e3:81:77:1f:96:d6:57:87:b6:73:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:FA:20:1C:55:9C:99:4A:7B:28:A3:3A:C7:44:5A:99:AF:A3:53
            X509v3 Authority Key Identifier:
                keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:0e:6d:83:f7:6d:f5:d8:e7:cd:71:0c:02:47:d6:f4:68:
         b9:70:74:27:d3:52:51:8e:e5:d2:17:47:e8:f8:56:9f:6d:cf:
         83:67:1b:a8:b4:f9:6a:40:38:f6:72:13:b4:46:4c:2f:e1:6e:
         82:76:9b:eb:7f:68:65:be:55:44:7c:b4:fe:90:a6:4a:d8:35:
         85:04:7b:86:bc:91:50:66:65:71:18:12:a9:53:43:00:34:0d:
         cb:6c:95:a6:34:f2:7b:6b:db:18:a5:13:7f:00:16:33:e9:48:
         ed:95:84:ae:c7:20:90:65:dc:3b:3d:6d:b4:9a:ff:11:b2:47:
         d8:d6:5a:84:af:02:8d:0b:ac:ec:ad:d6:4f:38:4a:e0:b6:fb:
         98:9d:79:9d:b4:11:e5:a1:34:bb:26:8c:91:f3:27:d6:b6:ab:
         7f:f9:2a:e7:36:6b:b9:d0:79:26:cf:e1:0d:63:a2:57:80:85:
         50:63:bb:f1:9c:7f:b5:dc:95:be:82:fa:8f:b0:63:d9:ac:5d:
         7e:f7:48:99:52:10:f9:79:43:24:c9:dd:9e:e3:92:41:da:4b:
         7b:36:42:bc:09:16:06:ae:e7:f3:69:e2:2b:ba:39:bb:ba:77:
         d1:db:d9:d4:e8:b2:ea:21:f4:70:dc:3e:22:e2:a6:44:8b:8a:
         5b:3d:85:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdLt8P8gNCzyAJ1GwM39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWViMGJiYmNiNmQ0N2E4NDM0Y2Y0MTExNTFmMmUyNDg3
ODA4MTUwHhcNMjUwNDEzMDkwMTI0WhcNMjUwNDE0MDkwMTI0WjAzMTEwLwYDVQQD
Eyg4YmM2ZmEyMDFjNTU5Yzk5NGE3YjI4YTMzYWM3NDQ1YTk5YWZhMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+npCs5I+Gus48iT2uw9GTuLiTkX
d1vG61jk8Ikl7GXde/aPzG87QVhy6MC/alAco3bhLuMY5elji2lPK/96t8Z9ZITa
l0ZAXA8QVIN9ct4ibPZjbYZ586U+w646pBAmJWypKriS0z/k4gDCsY5ffumpdB/g
ls94dF3e7jeJImYSz2TjMluZQ/T5HxTNiAbJmhJjxtW31x3yulTuun40RSTxSczA
ILRVYHYeiWvBKW8MYYXcflFrrWgQl0iZRP3xk3KS1brtVuhR2gvIfn8ZafrkKoyJ
xTcsDOuUgBrDPXKPOOE1LEbx+q9oA4SIxJUVSluADeOBdx+W1leHtnPDVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvG+iAcVZyZSnsoozrHRFqZr6NTMB8GA1UdIwQY
MBaAFMHusLu8ttR6hDTPQRFR8uJIeAgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yN2U4NzAtM2U4ZC00MmIwLWIzMGMt
YmJjZGNkYTYxNjEyLzEvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yN2U4NzAtM2U4ZC00MmIwLWIzMGMtYmJjZGNkYTYxNjEy
LzEvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0MObYP3
bfXY581xDAJH1vRouXB0J9NSUY7l0hdH6PhWn23Pg2cbqLT5akA49nITtEZML+Fu
gnab639oZb5VRHy0/pCmStg1hQR7hryRUGZlcRgSqVNDADQNy2yVpjTye2vbGKUT
fwAWM+lI7ZWErscgkGXcOz1ttJr/EbJH2NZahK8CjQus7K3WTzhK4Lb7mJ15nbQR
5aE0uyaMkfMn1rarf/kq5zZrudB5Js/hDWOiV4CFUGO78Zx/tdyVvoL6j7Bj2axd
fvdImVIQ+XlDJMndnuOSQdpLezZCvAkWBq7n82niK7o5u7p30dvZ1Oiy6iH0cNw+
IuKmRIuKWz2FrQ==
-----END CERTIFICATE-----