Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File:                     X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier:          IjX+HQj6AQMGqAIpvzyL23/+JLewsDvcYcy8dTb8xiQ=
Subject key identifier:   29:82:0A:E6:62:22:8D:FE:EB:0C:51:63:3B:13:AC:6C:55:89:67:6D
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer:       /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial:       01962E2AC40BCD31A2865503487D16D8FFBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number:          01E2
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
                          2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: 3jcBuOU5IYvSbe5TLKXFCjiW/RMaRAePPZOOvn9XvTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:0b:cd:31:a2:86:55:03:48:7d:16:d8:ff:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=29820ae662228dfeeb0c51633b13ac6c5589676d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:87:23:1c:cb:37:19:3b:59:5a:b3:8b:4d:
                    a2:20:b9:94:e2:74:3e:a8:02:f8:83:6a:43:44:6e:
                    31:b3:fb:7c:7f:72:8c:9b:7d:74:39:68:dc:6b:a5:
                    c6:c2:7d:89:88:92:47:05:d1:8d:58:3e:43:52:0e:
                    d8:9a:e7:3e:4a:7a:df:f0:44:c5:b3:27:2b:61:68:
                    b7:70:0c:46:e6:40:4f:f7:20:ca:07:18:da:cc:e9:
                    7d:b5:5a:bf:2b:75:34:c3:5b:d3:ed:6e:64:d9:53:
                    02:8c:93:66:9a:92:6e:ef:8b:8f:a1:a9:6d:43:7b:
                    e2:dd:d6:da:0f:48:47:a5:0a:c1:14:44:a0:3e:91:
                    81:dc:5b:60:ad:1a:12:4d:62:cf:6a:b2:00:9f:5a:
                    ad:dc:85:8c:d9:8f:32:3d:93:02:99:ec:49:af:98:
                    e0:95:dd:26:c6:76:b6:dd:18:a6:9a:30:3f:d4:5e:
                    41:27:f8:7e:13:e4:62:14:b2:8b:8a:34:0b:c0:af:
                    27:b7:26:23:e4:9e:c0:fd:be:2c:d0:15:d2:72:dd:
                    5f:22:71:e4:c0:7a:f5:8a:72:8e:b8:85:f2:68:ca:
                    83:57:83:3b:ca:91:82:ca:6e:3c:d7:25:a5:61:9d:
                    be:1d:fe:77:62:d9:7a:10:28:fa:dd:97:fc:9b:74:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:0A:E6:62:22:8D:FE:EB:0C:51:63:3B:13:AC:6C:55:89:67:6D
            X509v3 Authority Key Identifier:
                keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:90:0e:31:ae:c1:50:a6:e4:ac:28:45:cf:d4:54:0e:9a:
         8c:3c:16:4d:f1:a5:12:13:fd:2e:a7:a8:0d:b2:d4:92:81:a6:
         b3:bf:20:92:45:46:ba:b8:e0:29:ba:a4:f0:31:ae:a9:47:69:
         0b:72:72:24:2a:ca:76:7a:be:84:d3:d1:77:c0:34:d9:c3:7f:
         88:b6:8d:a9:f5:77:f2:87:ba:76:29:b1:3e:c3:9d:82:de:41:
         cc:41:dd:00:47:31:23:d8:85:10:7f:82:84:18:3b:1c:1e:c7:
         68:aa:67:5d:8e:7e:94:c8:7c:bd:38:29:4b:34:af:46:27:91:
         4c:62:83:9c:a3:69:b0:1d:9b:17:c5:23:a8:f3:94:76:99:d0:
         e2:59:7f:af:71:33:d3:91:50:c5:a7:22:4c:25:33:21:43:1a:
         1c:76:97:76:a3:2d:65:3f:83:c5:4f:f1:82:1e:37:b1:3d:d1:
         1f:bc:67:c4:85:3b:43:2e:d6:8e:37:b1:3f:ed:c8:05:48:12:
         00:ce:b1:d7:81:7a:ea:50:4a:c0:59:0a:a1:08:cc:9b:b4:b6:
         ac:57:ae:42:61:99:36:4f:db:32:0c:cd:2f:6b:65:ab:be:07:
         4d:f3:73:85:89:36:53:fe:a1:d4:6d:a8:89:a5:8b:ba:4e:a2:
         77:6d:8f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsQLzTGihlUDSH0W2P+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzIwZGVjNzE0YmI1NDYzYjE2NGUxNWE1ZjhhMTM5OGEy
NTUwNWQwHhcNMjUwNDEzMDgwMTE2WhcNMjUwNDE0MDgwMTE2WjAzMTEwLwYDVQQD
EygyOTgyMGFlNjYyMjI4ZGZlZWIwYzUxNjMzYjEzYWM2YzU1ODk2NzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkySHIxzLNxk7WVqzi02iILmU4nQ+
qAL4g2pDRG4xs/t8f3KMm310OWjca6XGwn2JiJJHBdGNWD5DUg7Ymuc+Snrf8ETF
sycrYWi3cAxG5kBP9yDKBxjazOl9tVq/K3U0w1vT7W5k2VMCjJNmmpJu74uPoalt
Q3vi3dbaD0hHpQrBFESgPpGB3FtgrRoSTWLParIAn1qt3IWM2Y8yPZMCmexJr5jg
ld0mxna23RimmjA/1F5BJ/h+E+RiFLKLijQLwK8ntyYj5J7A/b4s0BXSct1fInHk
wHr1inKOuIXyaMqDV4M7ypGCym481yWlYZ2+Hf53Ytl6ECj63Zf8m3S1TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmCCuZiIo3+6wxRYzsTrGxViWdtMB8GA1UdIwQY
MBaAFF/CDexxS7VGOxZOFaX4oTmKJVBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82Nzk3YTUtNTQxMC00YzBkLWI5Yjct
ZDk5YjlmNDhkMGRjLzEvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82Nzk3YTUtNTQxMC00YzBkLWI5YjctZDk5YjlmNDhkMGRj
LzEvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjESQDjGu
wVCm5KwoRc/UVA6ajDwWTfGlEhP9LqeoDbLUkoGms78gkkVGurjgKbqk8DGuqUdp
C3JyJCrKdnq+hNPRd8A02cN/iLaNqfV38oe6dimxPsOdgt5BzEHdAEcxI9iFEH+C
hBg7HB7HaKpnXY5+lMh8vTgpSzSvRieRTGKDnKNpsB2bF8UjqPOUdpnQ4ll/r3Ez
05FQxaciTCUzIUMaHHaXdqMtZT+DxU/xgh43sT3RH7xnxIU7Qy7WjjexP+3IBUgS
AM6x14F66lBKwFkKoQjMm7S2rFeuQmGZNk/bMgzNL2tlq74HTfNzhYk2U/6h1G2o
iaWLuk6id22P5Q==
-----END CERTIFICATE-----