Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File:                     VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier:          dBJDHnxFCaUlF/NAkPkroQrpuywoTN4rEgJzViCdlYY=
Subject key identifier:   4B:06:39:2E:A4:BB:28:77:81:96:A7:6F:6F:EE:27:1D:96:06:6D:4F
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       01962F0714C56FB0893C61EDF4AA1A8C7F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: HSdlh2QFEpGM_46Ow4vGDv79v_E.roa (hash: 1ypzUErprDZDRYPQT+U1/uxj8msJvU+nPJ/mnvBhz8M=)
                          2: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: QpoFK+6+R+7KEHIKJaAu+deui1T8e6RnfvtqOUxmywg=)
                          3: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (hash: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=)
                          4: elIaIJuXbpWatRWeZpRoJLAB6RM.roa (hash: QMxGtNIR9eV06fnxcnLZU8NRPRckOjRHuOBGgCXj72Q=)
                          5: f-0Z2G_j0_N5qqDchYy-Ctd1T14.roa (hash: wT8/mWClKuGMaXqNRw35HSU124nzDnRiBouhw/60uk4=)
                          6: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (hash: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=)
                          7: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (hash: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=)
                          8: y2v6-6CCLmifQ83qZdjogrFre-M.roa (hash: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:c5:6f:b0:89:3c:61:ed:f4:aa:1a:8c:7f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=4b06392ea4bb28778196a76f6fee271d96066d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:7d:a4:d3:82:81:e5:87:50:d9:e8:ca:3c:
                    db:96:72:91:17:02:66:38:e5:fd:fe:bf:80:44:6b:
                    9f:45:bc:05:1c:85:d3:0e:3a:c7:f1:65:6a:8a:57:
                    9c:65:63:b9:f1:cf:94:ba:9c:66:7d:f6:a8:03:d9:
                    17:04:2c:5e:ee:7c:9f:06:d1:81:4d:52:b8:2d:56:
                    74:6c:f8:fc:04:d2:ce:01:44:0b:f0:04:2f:08:30:
                    3e:c2:f3:f5:a3:f2:d7:6b:c6:f8:d1:2f:6e:20:cd:
                    fe:93:d7:3d:6a:67:f9:fa:76:d7:75:65:82:f5:c9:
                    95:ac:4c:81:05:5b:60:83:66:fe:0c:c7:b5:50:b3:
                    7a:c9:35:e3:0e:fb:60:b2:7a:0d:68:f8:1f:bb:b3:
                    42:c6:81:67:a4:25:82:2c:0e:a8:6e:29:4e:79:c5:
                    6f:81:3a:74:8c:0f:11:39:10:8f:40:a9:72:7b:43:
                    73:52:a8:e7:97:4b:ca:87:0e:21:21:f1:25:a7:32:
                    d9:f1:f3:09:0f:fa:9a:a1:a0:38:16:be:19:1c:6b:
                    db:58:b4:fd:08:20:3e:7a:f3:cf:d9:86:8e:37:26:
                    06:b2:49:f4:06:19:8e:79:95:5a:28:bd:cc:20:20:
                    90:09:3a:4e:7c:db:75:62:7e:05:2b:84:c0:06:b4:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:06:39:2E:A4:BB:28:77:81:96:A7:6F:6F:EE:27:1D:96:06:6D:4F
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:78:72:a1:12:90:5b:bb:e9:0a:6a:79:4b:76:ca:bf:c0:1d:
         61:20:a6:4a:73:af:97:2d:b9:ba:0f:ad:65:bc:2d:ab:e3:73:
         85:7f:f8:fa:b1:22:c8:1a:8b:8f:09:95:02:e3:ab:3d:55:88:
         b1:c3:c0:6f:06:1c:54:37:cb:fc:ee:b7:a2:02:e3:e9:cc:be:
         4c:3e:4c:bd:07:c0:63:19:59:81:6a:e9:b1:27:db:e9:46:45:
         04:2b:75:c0:95:e4:82:83:80:2f:9c:76:89:3f:8a:0a:82:a9:
         80:9b:19:80:18:b2:c5:6e:80:c2:cd:3b:da:c9:36:fa:8e:1e:
         b9:86:2c:16:94:01:f6:33:3c:e0:ac:a5:5a:eb:08:35:09:02:
         30:84:cc:aa:2a:79:33:07:62:3a:50:83:81:0b:b8:ca:cb:59:
         85:10:c6:91:7e:c8:62:3d:6f:e3:5a:13:be:aa:c6:35:68:8b:
         18:fc:bd:a7:96:36:04:4c:92:84:db:9e:51:22:39:64:9e:de:
         1c:9a:9f:9d:68:a2:cf:4a:64:6c:75:3b:2e:76:6f:92:b7:dd:
         c0:bd:09:00:05:7e:40:b0:fc:eb:fb:0a:61:dd:29:86:71:bc:
         5f:fe:e0:c8:7e:63:70:11:3a:3a:33:14:fe:f1:2a:80:98:1d:
         ec:19:30:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxTFb7CJPGHt9KoajH95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh
OWMwZjYwHhcNMjUwNDEzMTIwMTU1WhcNMjUwNDE0MTIwMTU1WjAzMTEwLwYDVQQD
Eyg0YjA2MzkyZWE0YmIyODc3ODE5NmE3NmY2ZmVlMjcxZDk2MDY2ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzl9pNOCgeWHUNnoyjzblnKRFwJm
OOX9/r+ARGufRbwFHIXTDjrH8WVqilecZWO58c+UupxmffaoA9kXBCxe7nyfBtGB
TVK4LVZ0bPj8BNLOAUQL8AQvCDA+wvP1o/LXa8b40S9uIM3+k9c9amf5+nbXdWWC
9cmVrEyBBVtgg2b+DMe1ULN6yTXjDvtgsnoNaPgfu7NCxoFnpCWCLA6obilOecVv
gTp0jA8RORCPQKlye0NzUqjnl0vKhw4hIfElpzLZ8fMJD/qaoaA4Fr4ZHGvbWLT9
CCA+evPP2YaONyYGskn0BhmOeZVaKL3MICCQCTpOfNt1Yn4FK4TABrRtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsGOS6kuyh3gZanb2/uJx2WBm1PMB8GA1UdIwQY
MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt
OGVhZThiNzVlOWNhLzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh
LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA33hyoRKQ
W7vpCmp5S3bKv8AdYSCmSnOvly25ug+tZbwtq+NzhX/4+rEiyBqLjwmVAuOrPVWI
scPAbwYcVDfL/O63ogLj6cy+TD5MvQfAYxlZgWrpsSfb6UZFBCt1wJXkgoOAL5x2
iT+KCoKpgJsZgBiyxW6Aws072sk2+o4euYYsFpQB9jM84KylWusINQkCMITMqip5
MwdiOlCDgQu4ystZhRDGkX7IYj1v41oTvqrGNWiLGPy9p5Y2BEyShNueUSI5ZJ7e
HJqfnWiiz0pkbHU7LnZvkrfdwL0JAAV+QLD86/sKYd0phnG8X/7gyH5jcBE6OjMU
/vEqgJgd7Bkwig==
-----END CERTIFICATE-----