Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          J3bNmmrsYPIlkmPMW6j8TIfKyN47/F1DtKycc3TGFMY=
Subject key identifier:   98:25:FE:82:0F:BA:6E:ED:50:B9:15:28:AA:C6:71:A5:AA:91:5F:40
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       01962E2B2917AADFCE63C143E3F25ACB3942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 2IV1bBm-jP-2jVh24cTBD-F_aCY.roa (hash: LoxyFwAORqX/gMob6dkhVaBmKh5ZSU1hWQKi2nkbQgw=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: Z7y/Ql/EU0HdhkbBaCkjloMEu75ubkkmVWJ/sc9+JK0=)
                          3: _kjDn_DDtqJjlLfr15JCrlUsBs4.roa (hash: jybSc3mz+ll60aex4A0Ja+eXAtAJqeCFAGm8sC/emcE=)
                          4: hJ65MMDojFDsHhCTcDOo1v7Rf3A.roa (hash: dQwJBW4cKzk1hx9pc72XUta4ephdfERO34h+ezvshhM=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:17:aa:df:ce:63:c1:43:e3:f2:5a:cb:39:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=9825fe820fba6eed50b91528aac671a5aa915f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:d2:9d:ce:00:51:af:3a:43:64:8d:21:f1:
                    8e:e4:e5:93:93:49:49:7e:c4:a4:18:71:88:a6:b6:
                    9c:4f:c8:aa:7a:d8:9c:cf:99:04:f8:fe:6d:f3:45:
                    c7:91:19:6e:e6:a1:68:08:60:db:1a:0b:35:cc:37:
                    b7:42:8d:c3:a8:ba:f6:fb:f2:15:cb:06:82:c6:b1:
                    9e:b1:7d:ed:83:3a:d8:c6:b2:5a:64:1c:86:de:23:
                    53:72:d5:7b:06:d3:c1:fc:89:e6:e9:8f:d9:73:ea:
                    ff:d7:01:5f:11:a1:76:47:3b:36:0c:55:c2:a3:65:
                    20:fe:a9:d2:d2:3c:e9:2e:8c:55:0c:4f:cb:4e:fe:
                    1a:66:d6:79:5f:1c:4f:59:2b:c5:49:56:0e:05:9e:
                    c8:7e:e1:72:c3:77:ae:93:8a:1c:f8:3c:c0:1d:82:
                    e1:df:24:82:f3:90:c5:d4:5b:2a:c8:74:fb:ba:cf:
                    4a:fc:43:a1:00:ef:bc:76:03:df:0f:1a:9f:bf:4c:
                    8d:76:a5:34:a5:6f:b4:3e:4d:c6:08:5f:46:50:45:
                    6b:6f:a2:db:42:f2:cc:b0:d3:eb:3b:2f:06:72:76:
                    15:93:2d:3a:e9:58:62:26:f4:78:9e:df:0a:0a:d1:
                    0b:2c:8d:34:01:4b:fc:b6:11:c0:b5:c8:64:db:54:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:25:FE:82:0F:BA:6E:ED:50:B9:15:28:AA:C6:71:A5:AA:91:5F:40
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:0d:8b:df:4a:f2:c8:77:c4:9a:47:9e:7c:f5:66:3b:dc:
         35:85:b3:bb:4f:3c:4b:ec:bb:15:f2:8a:c5:74:a2:15:05:d0:
         9c:cc:16:10:e7:aa:8f:83:9c:0e:79:53:b5:cd:fc:db:4a:fb:
         91:56:96:ea:29:4d:31:0b:02:1f:9f:82:34:8d:d6:d3:38:18:
         28:a7:cd:31:96:75:09:2e:19:30:45:88:50:0e:a6:11:69:1d:
         91:4c:65:2b:4d:4c:60:f2:50:ac:40:f1:f9:67:a9:fb:51:1b:
         81:19:8c:a9:e7:f9:6d:a3:f3:28:be:f1:87:b1:31:da:89:08:
         c9:d6:9b:70:d8:61:96:02:4b:07:14:b8:ab:f3:3d:a1:18:ce:
         f7:94:90:da:45:07:95:d6:50:42:ad:da:22:18:9a:23:ad:88:
         9c:0a:21:47:65:53:72:46:e4:6a:85:dc:7f:a2:ae:95:d5:73:
         29:46:4d:29:3e:1a:4f:ee:63:76:92:a7:94:16:78:38:7b:8b:
         8e:1f:7a:19:ae:01:ae:e3:1e:e8:e3:92:ce:0d:06:6a:56:dd:
         ca:50:53:e7:ee:91:b9:be:ee:d7:13:70:53:09:07:ea:0d:eb:
         cc:5e:76:10:1d:a9:d2:3e:7b:3f:85:1b:62:db:de:f7:c5:03:
         e5:15:46:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKykXqt/OY8FD4/JayzlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg5ODI1ZmU4MjBmYmE2ZWVkNTBiOTE1MjhhYWM2NzFhNWFhOTE1ZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhLSnc4AUa86Q2SNIfGO5OWTk0lJ
fsSkGHGIpracT8iqeticz5kE+P5t80XHkRlu5qFoCGDbGgs1zDe3Qo3DqLr2+/IV
ywaCxrGesX3tgzrYxrJaZByG3iNTctV7BtPB/Inm6Y/Zc+r/1wFfEaF2Rzs2DFXC
o2Ug/qnS0jzpLoxVDE/LTv4aZtZ5XxxPWSvFSVYOBZ7IfuFyw3euk4oc+DzAHYLh
3ySC85DF1FsqyHT7us9K/EOhAO+8dgPfDxqfv0yNdqU0pW+0Pk3GCF9GUEVrb6Lb
QvLMsNPrOy8GcnYVky066VhiJvR4nt8KCtELLI00AUv8thHAtchk21SyCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgl/oIPum7tULkVKKrGcaWqkV9AMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAANi99K
8sh3xJpHnnz1ZjvcNYWzu088S+y7FfKKxXSiFQXQnMwWEOeqj4OcDnlTtc3820r7
kVaW6ilNMQsCH5+CNI3W0zgYKKfNMZZ1CS4ZMEWIUA6mEWkdkUxlK01MYPJQrEDx
+Wep+1EbgRmMqef5baPzKL7xh7Ex2okIydabcNhhlgJLBxS4q/M9oRjO95SQ2kUH
ldZQQq3aIhiaI62InAohR2VTckbkaoXcf6KuldVzKUZNKT4aT+5jdpKnlBZ4OHuL
jh96Ga4BruMe6OOSzg0GalbdylBT5+6Rub7u1xNwUwkH6g3rzF52EB2p0j57P4Ub
Ytve98UD5RVGWA==
-----END CERTIFICATE-----