Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          7nIJZnDeC5AziBFk7p28A8GKuakrQ1ZsiZSRAO5COFk=
Subject key identifier:   8A:A4:65:7F:D9:77:00:B8:15:70:21:A1:41:D6:CB:D1:46:6B:73:60
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       01962FAB3BB88C20B267BD0B4C5EE199A75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa (hash: x/McLjYuN68G+ok93frZNMwAwTarNWM5GuHdXugF2/o=)
                          2: M9easQkcHSQPdpi5ZGfGU4pWoUc.roa (hash: 2qkDycWdk7MJuJuaUzoNpBWkEOF+xOcflpW8m5S6jUM=)
                          3: i85p5aRbMq_hdM6cSIQdk4ygpwo.roa (hash: x1h1J7ft54CHUC6kjTSlGgx0DSnPNMMrSgheR8JAqcM=)
                          4: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: IYGLStfKfI7+Rio/6X8MP2JmHlCNkPV1GoF+iiKC120=)
                          5: n9-usLo6aF2wwW6_ywj-9Wvh4ac.roa (hash: 1CoA6tKUFjr40QImyeSQY7rXCRf9OZT/UPmAih0cirQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:b8:8c:20:b2:67:bd:0b:4c:5e:e1:99:a7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=8aa4657fd97700b8157021a141d6cbd1466b7360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:57:64:da:c2:3e:5d:8d:ea:f3:43:b1:14:
                    70:93:a7:eb:26:27:52:76:ea:f3:96:9d:d6:55:fa:
                    ea:00:28:fb:a0:50:11:b4:1a:a9:51:0c:cf:2b:2f:
                    53:ec:43:61:0e:36:ff:5e:9b:14:18:69:c1:d3:2a:
                    38:2d:b6:0d:a6:c3:bb:f4:7d:19:9a:87:f9:1c:9c:
                    33:90:b9:47:ca:3c:ef:8e:cf:16:99:11:fa:23:81:
                    ac:d2:a2:87:90:6a:10:68:4a:61:67:38:7d:ef:66:
                    d2:87:c0:fa:75:ec:8f:df:ef:99:0c:e6:46:bb:2a:
                    76:70:86:f7:5a:a4:15:4c:36:5a:a5:5e:b7:cb:bb:
                    73:99:07:41:63:14:1d:dd:c3:17:68:4b:2d:2f:5d:
                    76:a6:ee:4a:14:df:74:28:f6:28:e9:66:ae:32:7a:
                    14:ee:6a:57:2a:30:3d:60:8c:51:4f:b9:e9:da:3e:
                    b9:5d:1a:a1:ca:74:2b:a7:b4:b4:6f:38:5e:10:7b:
                    d5:7e:6d:5a:68:23:9a:47:d0:0e:66:fe:9d:8f:4e:
                    1c:40:28:f2:e9:57:94:f1:99:ab:37:55:32:09:2c:
                    48:7c:07:f8:fe:37:23:9f:b3:f7:3d:95:ac:cc:58:
                    0b:3f:45:5b:8f:41:2b:f6:9d:00:f4:1d:7b:11:c6:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A4:65:7F:D9:77:00:B8:15:70:21:A1:41:D6:CB:D1:46:6B:73:60
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:2b:7a:8b:a7:e9:35:c7:65:e5:eb:84:ed:12:8e:8d:e8:
         38:89:0a:1e:34:6c:a2:67:2d:d8:18:35:6b:82:29:74:c8:4a:
         9c:21:75:61:30:cc:34:9a:55:a9:8f:14:39:d8:ec:7f:14:65:
         6b:50:c1:08:10:17:41:cc:f4:a5:ca:ee:0a:ce:ee:53:a8:1c:
         51:96:00:8a:b4:e1:27:1b:c2:03:7a:63:1c:25:63:2e:07:be:
         53:36:2e:88:1d:3a:c2:69:2a:39:37:a1:f6:cc:76:08:73:51:
         aa:18:a2:30:a8:d1:b4:11:51:c0:9c:35:ce:06:39:f0:ac:b9:
         fb:c8:f2:58:bc:37:a2:7d:04:b3:e7:49:4f:5f:c4:7f:d4:cc:
         a9:b9:b3:fa:4c:bd:15:18:5d:e9:73:63:f9:c1:5a:e0:91:9d:
         7c:43:a8:22:ff:d6:dc:22:26:12:01:c2:61:b4:2d:53:f1:2b:
         5d:7b:24:49:35:cb:d6:4a:d1:9d:9d:91:ed:e0:b1:6e:77:e3:
         e0:9a:52:20:0d:52:63:ce:f2:d4:c5:4a:be:a8:f2:53:1e:3e:
         91:f7:24:cf:e2:75:9f:2b:54:52:9b:48:a0:25:1c:51:78:cd:
         13:74:e4:75:db:47:fa:57:0e:da:e3:f7:0f:ab:a6:c0:bc:62:
         52:a7:c8:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzu4jCCyZ70LTF7hmadeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
Eyg4YWE0NjU3ZmQ5NzcwMGI4MTU3MDIxYTE0MWQ2Y2JkMTQ2NmI3MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinJXZNrCPl2N6vNDsRRwk6frJidS
durzlp3WVfrqACj7oFARtBqpUQzPKy9T7ENhDjb/XpsUGGnB0yo4LbYNpsO79H0Z
mof5HJwzkLlHyjzvjs8WmRH6I4Gs0qKHkGoQaEphZzh972bSh8D6deyP3++ZDOZG
uyp2cIb3WqQVTDZapV63y7tzmQdBYxQd3cMXaEstL112pu5KFN90KPYo6WauMnoU
7mpXKjA9YIxRT7np2j65XRqhynQrp7S0bzheEHvVfm1aaCOaR9AOZv6dj04cQCjy
6VeU8ZmrN1UyCSxIfAf4/jcjn7P3PZWszFgLP0Vbj0Er9p0A9B17EcZfwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqkZX/ZdwC4FXAhoUHWy9FGa3NgMB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowIreoun
6TXHZeXrhO0Sjo3oOIkKHjRsomct2Bg1a4IpdMhKnCF1YTDMNJpVqY8UOdjsfxRl
a1DBCBAXQcz0pcruCs7uU6gcUZYAirThJxvCA3pjHCVjLge+UzYuiB06wmkqOTeh
9sx2CHNRqhiiMKjRtBFRwJw1zgY58Ky5+8jyWLw3on0Es+dJT1/Ef9TMqbmz+ky9
FRhd6XNj+cFa4JGdfEOoIv/W3CImEgHCYbQtU/ErXXskSTXL1krRnZ2R7eCxbnfj
4JpSIA1SY87y1MVKvqjyUx4+kfckz+J1nytUUptIoCUcUXjNE3TkddtH+lcO2uP3
D6umwLxiUqfIzg==
-----END CERTIFICATE-----