Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File:                     8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier:          KQh826QDQcsfjtEOmFo97/2OBQByPhGvBCdbmIbQbPE=
Subject key identifier:   4D:59:CE:89:1D:04:3E:C5:5C:AA:96:CC:1A:44:2D:D6:94:C6:04:95
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer:       /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial:       01962F3DDAD131F6EFB965CE0D225C9F923A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number:          14D7
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: 0PFIJQbnTlMVcbLm1JIHeUhM6u9rjpha/7hpM82glaw=)
                          2: IOLW6-jD0y2arMH-zMIZVJRZbkE.roa (hash: S6NprCW0AToClI49KC50pRU+q6xv1zGZktKZWElDFQU=)
                          3: dwFe3nH81Si_VNrtz-zJYevGIHU.roa (hash: 0rt5oMdFe3Xc4XSYtVzvaXDk0kM2jNWacI48dEFva2k=)
                          4: jwVbXCDeR3nwYGAlm9xN2kpKmB4.roa (hash: iEdaGVrMnMYhG1JWXVQ6x37AXfcN4Z18G6WNOnmwP7U=)
                          5: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:da:d1:31:f6:ef:b9:65:ce:0d:22:5c:9f:92:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=4d59ce891d043ec55caa96cc1a442dd694c60495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:44:b4:6c:ff:d3:68:a6:ac:aa:95:c1:d9:
                    c2:76:5a:c2:ae:a7:7e:04:33:f8:a0:ad:5e:50:ba:
                    a4:dd:f9:ef:17:7e:01:24:cc:b5:5d:35:f3:e0:2f:
                    4e:a1:31:1d:c3:e0:aa:48:2c:8e:10:30:bd:70:91:
                    db:c5:2f:26:4a:f1:55:4f:ad:59:93:eb:ee:04:dd:
                    9e:9b:1f:ac:ef:1a:38:9b:8c:d3:55:24:e3:9b:e1:
                    07:e2:c9:94:8e:ea:19:56:73:4d:5a:40:9e:81:e9:
                    aa:98:a2:ea:16:6a:66:32:74:1b:fb:84:a3:8b:0c:
                    22:d6:ed:4f:fb:6d:be:91:d5:7e:08:a2:98:2a:1c:
                    52:9a:67:d8:76:02:e5:52:6e:91:c2:f8:bf:5d:31:
                    98:1d:3c:42:cc:24:47:06:0d:a6:93:9c:ac:ad:5a:
                    51:71:6c:ec:a5:12:4a:84:a4:58:35:aa:36:de:b8:
                    e2:d7:08:74:d2:96:84:b9:6b:9d:40:fb:91:51:c6:
                    f2:e4:38:35:fe:83:a0:ce:32:73:83:7e:f5:1a:9e:
                    bf:78:99:9c:db:a7:8d:c6:9d:27:f2:3f:69:32:b4:
                    79:27:b6:73:4d:d2:82:8b:79:a5:6f:9e:dc:59:39:
                    b4:20:24:dd:51:8d:d3:bd:7a:01:3a:0f:ef:d2:98:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:CE:89:1D:04:3E:C5:5C:AA:96:CC:1A:44:2D:D6:94:C6:04:95
            X509v3 Authority Key Identifier:
                keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:52:8f:8f:ae:3e:3f:18:71:29:a6:46:20:44:8b:81:e3:
         02:2b:3f:ad:fc:68:c7:c0:75:6a:f4:1a:bf:01:16:bf:66:c4:
         68:97:cb:97:9a:d6:de:5a:a6:2f:22:36:2f:b2:f5:ef:8a:f8:
         d1:d4:97:4a:08:5d:6b:ba:c3:c8:77:a2:6b:8b:ee:96:7c:7b:
         f3:78:b2:9c:30:e1:c8:0a:f0:3e:f3:9e:72:ad:cc:24:f2:e1:
         7e:81:db:7e:98:5e:fc:09:1c:3c:63:42:62:f5:64:65:c6:1f:
         98:85:9c:95:09:1b:11:c7:b0:79:c8:06:9a:15:c7:31:de:a6:
         a7:50:09:65:e0:f0:7f:ba:18:43:ea:91:23:50:c5:cb:7a:9d:
         8f:3b:e5:08:92:08:36:db:85:e6:3f:9a:c9:cb:3c:a8:66:5d:
         35:ca:3a:6f:09:b1:ab:18:29:7a:fb:db:a8:d5:45:61:fd:8c:
         45:44:24:98:f1:51:3c:5d:ae:e1:90:ff:04:f7:47:ce:7f:d4:
         2a:49:23:d7:b0:7a:84:d2:e8:d0:17:7f:f2:81:06:76:78:b2:
         81:1e:7e:d7:5f:c7:1f:cb:b8:5a:36:5e:c0:29:89:05:ef:b6:
         e9:2b:8a:d6:cc:9f:3d:47:35:76:9c:ac:d7:54:1d:0b:14:88:
         81:41:fd:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdrRMfbvuWXODSJcn5I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjhiYmIxZTE4NmE1OTlkNGNjMDU4Y2FiZjRkZjBlMjUy
ZjMxZmEwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg0ZDU5Y2U4OTFkMDQzZWM1NWNhYTk2Y2MxYTQ0MmRkNjk0YzYwNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinpEtGz/02imrKqVwdnCdlrCrqd+
BDP4oK1eULqk3fnvF34BJMy1XTXz4C9OoTEdw+CqSCyOEDC9cJHbxS8mSvFVT61Z
k+vuBN2emx+s7xo4m4zTVSTjm+EH4smUjuoZVnNNWkCegemqmKLqFmpmMnQb+4Sj
iwwi1u1P+22+kdV+CKKYKhxSmmfYdgLlUm6Rwvi/XTGYHTxCzCRHBg2mk5ysrVpR
cWzspRJKhKRYNao23rji1wh00paEuWudQPuRUcby5Dg1/oOgzjJzg371Gp6/eJmc
26eNxp0n8j9pMrR5J7ZzTdKCi3mlb57cWTm0ICTdUY3TvXoBOg/v0pi60wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1ZzokdBD7FXKqWzBpELdaUxgSVMB8GA1UdIwQY
MBaAFPG4u7HhhqWZ1MwFjKv03w4lLzH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJpN3NlR0dwWm5VekFXTXFfVGZEaVV2TWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMjFlYTYtZWZmNy00NTE0LWFiMmQt
NWI0Yjg1ZmQ1YWU1LzEvOGJpN3NlR0dwWm5VekFXTXFfVGZEaVV2TWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMjFlYTYtZWZmNy00NTE0LWFiMmQtNWI0Yjg1ZmQ1YWU1
LzEvOGJpN3NlR0dwWm5VekFXTXFfVGZEaVV2TWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdlSj4+u
Pj8YcSmmRiBEi4HjAis/rfxox8B1avQavwEWv2bEaJfLl5rW3lqmLyI2L7L174r4
0dSXSghda7rDyHeia4vulnx783iynDDhyArwPvOecq3MJPLhfoHbfphe/AkcPGNC
YvVkZcYfmIWclQkbEcewecgGmhXHMd6mp1AJZeDwf7oYQ+qRI1DFy3qdjzvlCJII
NtuF5j+aycs8qGZdNco6bwmxqxgpevvbqNVFYf2MRUQkmPFRPF2u4ZD/BPdHzn/U
Kkkj17B6hNLo0Bd/8oEGdniygR5+11/HH8u4WjZewCmJBe+26SuK1syfPUc1dpys
11QdCxSIgUH9JA==
-----END CERTIFICATE-----