Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File:                     86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier:          LtSx6Xdd43N5V+vd5t0C3ZCwhxM8OhZwZIsLV90JswE=
Subject key identifier:   B5:50:FF:92:3C:05:E2:4B:6B:54:E0:C6:7A:15:1D:77:BC:C1:3B:AC
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer:       /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial:       01962F068D89FBF2B4B16CCB9E813906FCB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=)
                          2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: NMP0e9rtr38v2rXqZPahKiRd6fS2X8eiwHSy41CcxTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:89:fb:f2:b4:b1:6c:cb:9e:81:39:06:fc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=b550ff923c05e24b6b54e0c67a151d77bcc13bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:ee:87:95:a9:9b:48:b6:20:ed:b7:bf:ac:
                    f8:47:70:9c:3f:01:da:15:45:c9:fc:e9:3f:72:78:
                    e4:58:2c:43:32:b2:0d:7b:f7:ce:9b:9b:c0:6b:28:
                    46:e1:49:36:17:f8:d5:69:89:19:05:e3:cb:c5:55:
                    0d:71:25:e9:28:58:49:3a:a0:79:f4:ed:49:dd:d8:
                    f5:fb:93:e2:77:c6:1b:04:ae:cb:d5:92:9e:22:29:
                    39:03:b1:e8:8a:31:f4:04:0d:fe:e4:a2:e2:59:a0:
                    ec:82:31:f3:22:aa:7a:60:cd:c4:83:80:9b:e7:d5:
                    00:64:b4:9d:d4:7b:42:c8:70:a2:be:9a:4c:ba:3d:
                    16:63:16:ba:c6:6f:b7:11:16:16:ba:d0:b6:a5:4b:
                    11:3c:7b:55:8d:6e:19:60:3a:96:a8:fc:67:9f:60:
                    ef:a7:53:5c:2b:90:c0:e3:ca:3b:59:43:b3:74:60:
                    5a:2e:6f:c7:f9:1b:33:e4:d4:6a:a3:55:2e:ce:3c:
                    6b:7a:c1:8f:81:b9:f6:87:6a:4f:13:54:a8:1d:74:
                    2b:8d:7a:7f:17:fa:c8:3c:54:c7:24:de:cb:ba:17:
                    f2:c6:cc:5f:3a:e4:cf:10:32:fb:82:c3:fe:5b:f5:
                    7a:cc:32:c2:2a:8a:97:91:af:9b:31:8f:cb:90:18:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:50:FF:92:3C:05:E2:4B:6B:54:E0:C6:7A:15:1D:77:BC:C1:3B:AC
            X509v3 Authority Key Identifier:
                keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:60:f7:6e:f3:eb:98:f0:c0:d4:d7:81:b0:ea:1b:80:fd:
         08:92:7a:4b:7a:5f:6c:5c:4b:f8:c5:a9:24:8f:b8:40:03:e3:
         11:97:ca:b9:db:44:41:86:60:ca:09:4b:3a:2e:04:cb:a4:1d:
         a7:3e:57:88:96:83:e6:a5:c5:25:39:70:e8:aa:c6:54:2d:94:
         a8:c4:48:ff:56:a3:2d:00:79:42:22:3c:78:3d:f3:45:1a:ac:
         eb:98:78:af:a0:38:46:e6:71:b4:66:60:16:e0:42:58:96:7c:
         dd:d9:1f:0a:5b:d3:51:31:f1:6e:cb:c9:4e:94:7c:cb:24:e9:
         65:31:50:71:60:00:95:25:e3:ce:13:61:94:0d:68:e1:98:2e:
         a8:8f:ca:47:8c:8b:a4:91:f9:5b:f0:c5:c7:3f:4d:8f:db:31:
         32:ea:05:8c:56:25:9a:f2:e1:af:46:61:29:a1:20:72:8e:44:
         90:9d:95:22:3c:9a:aa:88:1a:d3:81:f8:c1:bd:c4:3d:ff:a1:
         49:a6:ab:2c:bf:bd:6f:c5:1f:90:fb:5a:06:b8:38:b3:11:c5:
         ab:7e:74:ba:e9:e2:6d:eb:ad:7a:67:f0:84:37:82:05:75:b6:
         f7:ee:47:de:74:73:17:34:60:0a:6a:75:b5:5e:6d:68:f4:42:
         3a:99:ae:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBo2J+/K0sWzLnoE5Bvy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjUwNDEzMTIwMTIwWhcNMjUwNDE0MTIwMTIwWjAzMTEwLwYDVQQD
EyhiNTUwZmY5MjNjMDVlMjRiNmI1NGUwYzY3YTE1MWQ3N2JjYzEzYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIfuh5Wpm0i2IO23v6z4R3CcPwHa
FUXJ/Ok/cnjkWCxDMrINe/fOm5vAayhG4Uk2F/jVaYkZBePLxVUNcSXpKFhJOqB5
9O1J3dj1+5Pid8YbBK7L1ZKeIik5A7HoijH0BA3+5KLiWaDsgjHzIqp6YM3Eg4Cb
59UAZLSd1HtCyHCivppMuj0WYxa6xm+3ERYWutC2pUsRPHtVjW4ZYDqWqPxnn2Dv
p1NcK5DA48o7WUOzdGBaLm/H+Rsz5NRqo1UuzjxresGPgbn2h2pPE1SoHXQrjXp/
F/rIPFTHJN7LuhfyxsxfOuTPEDL7gsP+W/V6zDLCKoqXka+bMY/LkBhWUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVQ/5I8BeJLa1TgxnoVHXe8wTusMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpdg927z
65jwwNTXgbDqG4D9CJJ6S3pfbFxL+MWpJI+4QAPjEZfKudtEQYZgyglLOi4Ey6Qd
pz5XiJaD5qXFJTlw6KrGVC2UqMRI/1ajLQB5QiI8eD3zRRqs65h4r6A4RuZxtGZg
FuBCWJZ83dkfClvTUTHxbsvJTpR8yyTpZTFQcWAAlSXjzhNhlA1o4ZguqI/KR4yL
pJH5W/DFxz9Nj9sxMuoFjFYlmvLhr0ZhKaEgco5EkJ2VIjyaqoga04H4wb3EPf+h
SaarLL+9b8UfkPtaBrg4sxHFq350uunibeutemfwhDeCBXW29+5H3nRzFzRgCmp1
tV5taPRCOpmuVQ==
-----END CERTIFICATE-----