Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File:                     mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier:          Ti0zkfr5xHCuBmbCKszjuouer3kz1ZRfs3p6p7nM/VA=
Subject key identifier:   0A:5E:ED:AE:6A:D2:8A:39:A6:6B:DC:A5:48:F0:04:85:FC:80:5A:7B
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer:       /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial:       01962E619975958BB00F2D1B19B0E7D99EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number:          02FB
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
                          2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
                          3: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
                          4: diKd_27Ub9nGcA2NN8siPAPRpOA.roa (hash: jjLD3EmSuXqZi25cVaX3GMVeuNNwqkHtb0UAWrCBfZI=)
                          5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: kWBt/ktycM/VDxmrG0LITNEtHlCOa47v14k0kal5e14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:75:95:8b:b0:0f:2d:1b:19:b0:e7:d9:9e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=0a5eedae6ad28a39a66bdca548f00485fc805a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:91:5b:e2:6e:e6:77:15:bc:30:98:fd:17:
                    dd:c7:b6:8a:81:5c:2e:27:7c:e5:68:b2:40:9c:a6:
                    01:de:ba:80:ea:1f:ca:79:0c:9f:fd:90:7d:a1:17:
                    af:74:2d:74:fa:aa:d2:56:72:48:76:71:f0:cf:1f:
                    a6:b0:f4:bd:73:9f:24:fb:17:41:85:57:b9:5e:c9:
                    64:d7:ab:cf:13:b8:e6:14:f0:07:6d:e7:bb:ba:48:
                    7b:95:c2:bb:70:8c:82:a8:15:5b:16:c8:a3:49:ec:
                    a7:17:30:ee:9f:50:4f:74:90:59:b7:a5:0e:82:17:
                    74:20:c5:19:11:9c:fb:63:89:28:ee:40:bf:61:4e:
                    5c:95:b6:e2:6f:53:fe:42:42:8a:0c:29:00:e4:1f:
                    d8:50:80:22:01:4c:c6:89:2b:e1:59:a2:99:44:72:
                    eb:e1:b0:b2:13:f9:35:1c:45:34:9b:ea:a6:a2:de:
                    6d:bc:a1:da:4d:b2:5d:67:31:9e:ee:b2:9e:38:87:
                    62:5f:89:51:d4:fd:4f:5b:2f:5d:9c:30:7e:8f:86:
                    5e:84:b8:df:51:7d:7c:17:1d:d5:8b:40:23:c2:e5:
                    b8:76:8c:de:f8:0a:14:7c:ff:77:33:e7:5b:6d:d9:
                    e1:12:11:a8:59:17:56:7d:a7:7b:7c:32:79:9a:db:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:ED:AE:6A:D2:8A:39:A6:6B:DC:A5:48:F0:04:85:FC:80:5A:7B
            X509v3 Authority Key Identifier:
                keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:ac:86:45:85:a6:25:62:00:5b:ec:5b:6e:38:ac:7a:e1:
         b1:69:bf:96:ea:71:b9:b4:1d:ac:31:73:05:5b:90:3f:9b:16:
         4e:d7:d5:e9:ec:d0:82:cd:1d:82:8c:24:9b:d3:d3:5b:43:fa:
         7a:ee:1f:52:0a:d8:09:f0:cf:46:5c:e4:47:ae:23:f4:41:2a:
         39:e2:89:e3:c5:ee:d7:a3:c0:2d:e1:3d:46:17:8d:79:c6:74:
         f4:6b:a4:50:b1:be:63:22:75:d5:fd:9a:6d:2d:16:10:80:0d:
         f0:82:18:c7:4e:6e:dd:94:30:3e:32:7d:d1:52:f2:13:09:43:
         88:30:5e:ad:d0:00:f1:e7:f8:0a:5f:d8:d4:e6:3a:5c:0c:cf:
         5a:90:04:87:4e:1f:f3:3a:4e:d1:7c:6d:52:c2:e7:2e:e4:9a:
         aa:a1:8b:9b:56:d9:fa:bc:84:6f:f4:9c:f1:31:6d:4f:0d:3c:
         8a:15:03:ea:fd:8b:6c:ff:b5:49:5a:4d:3b:fb:a1:b9:d9:4e:
         cc:f0:d2:53:0e:a1:46:f2:db:b5:81:0e:bc:be:21:87:7f:d1:
         32:d2:79:fa:86:ad:6c:55:cb:dc:c0:6f:00:7e:64:26:08:d0:
         90:32:d5:c6:99:1c:5d:d6:4d:98:b0:b9:05:17:bf:ad:ec:b7:
         22:cf:37:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZl1lYuwDy0bGbDn2Z6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj
ZmRiOGUwHhcNMjUwNDEzMDkwMTEwWhcNMjUwNDE0MDkwMTEwWjAzMTEwLwYDVQQD
EygwYTVlZWRhZTZhZDI4YTM5YTY2YmRjYTU0OGYwMDQ4NWZjODA1YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHSRW+Ju5ncVvDCY/Rfdx7aKgVwu
J3zlaLJAnKYB3rqA6h/KeQyf/ZB9oRevdC10+qrSVnJIdnHwzx+msPS9c58k+xdB
hVe5Xslk16vPE7jmFPAHbee7ukh7lcK7cIyCqBVbFsijSeynFzDun1BPdJBZt6UO
ghd0IMUZEZz7Y4ko7kC/YU5clbbib1P+QkKKDCkA5B/YUIAiAUzGiSvhWaKZRHLr
4bCyE/k1HEU0m+qmot5tvKHaTbJdZzGe7rKeOIdiX4lR1P1PWy9dnDB+j4ZehLjf
UX18Fx3Vi0AjwuW4doze+AoUfP93M+dbbdnhEhGoWRdWfad7fDJ5mtuqHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApe7a5q0oo5pmvcpUjwBIX8gFp7MB8GA1UdIwQY
MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt
YzMxYmRlNTEwMDg1LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1
LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtOshkWF
piViAFvsW244rHrhsWm/lupxubQdrDFzBVuQP5sWTtfV6ezQgs0dgowkm9PTW0P6
eu4fUgrYCfDPRlzkR64j9EEqOeKJ48Xu16PALeE9RheNecZ09GukULG+YyJ11f2a
bS0WEIAN8IIYx05u3ZQwPjJ90VLyEwlDiDBerdAA8ef4Cl/Y1OY6XAzPWpAEh04f
8zpO0XxtUsLnLuSaqqGLm1bZ+ryEb/Sc8TFtTw08ihUD6v2LbP+1SVpNO/uhudlO
zPDSUw6hRvLbtYEOvL4hh3/RMtJ5+oatbFXL3MBvAH5kJgjQkDLVxpkcXdZNmLC5
BRe/rey3Is83fQ==
-----END CERTIFICATE-----