Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File:                     p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier:          7eowPQWld+q4IJMk1aHmh/Ny6JgGOFmgH8/twiMStnY=
Subject key identifier:   E8:9E:CC:37:B4:6B:D8:19:B9:86:D7:4D:65:9E:A6:C1:A7:D5:EF:4C
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer:       /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial:       01962DF3D680CF34ECA4C510CC0415F2AA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
                          2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
                          3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
                          4: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
                          5: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
                          6: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
                          7: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
                          8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: N8P7ueOa0ZL6r7RdG5F7bVJEEeLQNQWHsEarJoITsvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:80:cf:34:ec:a4:c5:10:cc:04:15:f2:aa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=e89ecc37b46bd819b986d74d659ea6c1a7d5ef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:95:0c:42:7d:a9:16:64:c1:fa:9f:97:5e:
                    73:05:18:36:57:53:69:90:b9:38:6d:30:0e:26:7b:
                    ef:12:48:15:85:9f:2b:cc:79:4f:8f:07:65:ff:24:
                    b2:b3:fc:b0:87:73:a2:02:99:1e:80:bd:4a:f9:74:
                    bb:63:e3:39:5a:9d:c2:74:c0:82:d7:a4:d2:92:24:
                    3e:be:05:fa:aa:d6:0f:d8:19:cd:a8:e6:ec:14:df:
                    ff:ad:8b:0e:c8:8d:f8:e6:2e:1e:86:66:71:18:e1:
                    79:b0:c4:48:ca:93:f0:b7:fc:10:c8:64:3e:76:ba:
                    de:d7:69:1b:c8:e8:ec:55:c9:91:ee:ed:50:43:11:
                    5d:47:e8:0d:6e:36:eb:02:25:9f:d0:c2:14:6a:fa:
                    5a:55:26:84:6a:76:ce:8d:21:9a:b7:f2:41:b5:cd:
                    10:9c:2e:fa:4d:11:f2:5e:17:0a:e9:48:0c:e8:5b:
                    43:52:98:62:bb:ed:10:53:8b:0e:62:92:28:11:62:
                    40:a6:11:f7:76:5a:82:04:19:a3:17:f4:d2:cc:7e:
                    94:be:d9:db:c2:b2:75:f3:7d:19:69:78:5c:36:d4:
                    f2:b1:b7:1c:52:cf:d1:35:ce:73:ea:e2:79:7a:6f:
                    1a:e2:6e:f7:e9:0b:dd:d4:c4:2b:81:8e:2e:3b:4c:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:CC:37:B4:6B:D8:19:B9:86:D7:4D:65:9E:A6:C1:A7:D5:EF:4C
            X509v3 Authority Key Identifier:
                keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:24:a8:1b:a7:8e:50:76:a6:58:eb:67:52:3c:11:6d:98:
         b0:ce:d2:99:07:a4:40:98:1d:e4:3b:ef:a6:04:7a:3f:25:db:
         0c:1f:37:06:83:e3:7d:94:4a:4e:93:a2:1f:6b:ec:e9:7b:99:
         4f:cd:a9:fd:a2:dc:92:64:97:4a:41:68:fc:b2:68:f2:44:ae:
         63:d7:b9:a7:38:f6:47:92:43:96:e9:16:6e:d4:a4:80:1b:ed:
         03:33:53:99:62:70:a1:b2:d8:b5:94:d0:ac:f6:f1:ac:8f:4c:
         46:25:a7:dd:4f:9e:4a:79:4d:e7:7f:55:c1:c9:58:e8:b6:f7:
         09:a9:7b:8e:09:00:6a:9e:ab:b4:fb:48:13:a6:25:13:35:b2:
         b3:d5:b9:9e:b4:ab:ff:de:22:00:80:9c:a7:6d:56:be:c6:17:
         5e:05:f2:2b:8a:3b:9a:ba:8c:3b:9a:85:30:53:5e:ef:1f:1b:
         e8:3b:44:64:70:7f:d2:55:4e:c5:35:0a:6d:07:50:e8:44:89:
         97:6a:5c:b8:7e:48:d2:44:69:55:2d:a6:7f:2d:9b:d9:05:19:
         e6:a6:b2:7c:8b:64:6e:27:3a:ed:79:6b:41:76:bb:55:d1:ad:
         33:bc:42:5b:be:d8:79:45:19:9d:18:4d:c0:b8:c2:97:d7:81:
         cf:0a:8f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89aAzzTspMUQzAQV8qocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5
NGVlYzMwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
EyhlODllY2MzN2I0NmJkODE5Yjk4NmQ3NGQ2NTllYTZjMWE3ZDVlZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PqVDEJ9qRZkwfqfl15zBRg2V1Np
kLk4bTAOJnvvEkgVhZ8rzHlPjwdl/ySys/ywh3OiApkegL1K+XS7Y+M5Wp3CdMCC
16TSkiQ+vgX6qtYP2BnNqObsFN//rYsOyI345i4ehmZxGOF5sMRIypPwt/wQyGQ+
drre12kbyOjsVcmR7u1QQxFdR+gNbjbrAiWf0MIUavpaVSaEanbOjSGat/JBtc0Q
nC76TRHyXhcK6UgM6FtDUphiu+0QU4sOYpIoEWJAphH3dlqCBBmjF/TSzH6Uvtnb
wrJ1830ZaXhcNtTysbccUs/RNc5z6uJ5em8a4m736Qvd1MQrgY4uO0wNdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiezDe0a9gZuYbXTWWepsGn1e9MMB8GA1UdIwQY
MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt
MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm
LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG8kqBun
jlB2pljrZ1I8EW2YsM7SmQekQJgd5DvvpgR6PyXbDB83BoPjfZRKTpOiH2vs6XuZ
T82p/aLckmSXSkFo/LJo8kSuY9e5pzj2R5JDlukWbtSkgBvtAzNTmWJwobLYtZTQ
rPbxrI9MRiWn3U+eSnlN539VwclY6Lb3Cal7jgkAap6rtPtIE6YlEzWys9W5nrSr
/94iAICcp21WvsYXXgXyK4o7mrqMO5qFMFNe7x8b6DtEZHB/0lVOxTUKbQdQ6ESJ
l2pcuH5I0kRpVS2mfy2b2QUZ5qayfItkbic67XlrQXa7VdGtM7xCW77YeUUZnRhN
wLjCl9eBzwqP7Q==
-----END CERTIFICATE-----