Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File:                     2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier:          3eQIBrkw+ZdSG6XZaseMf6rdCezjaUWzU3zLguQfXLw=
Subject key identifier:   D0:1F:D4:D3:F4:81:3A:FB:39:A1:1F:E1:3E:DB:F4:C1:00:6A:FF:AF
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer:       /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial:       01962E995DB69B4A8D8B1347F9752632E672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number:          0398
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: PmFIYVL7GCQXd2j9I//RsvdPNdp6TsDh94MZKfAdqzM=)
                          2: 2EXD27DpUxyiZCH4jnp8jx42t1A.roa (hash: 7hpsUKGtRqERcNOmrniPJovdneB4WTHHimklpq6Yc/k=)
                          3: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=)
                          4: 8iXU5D7pqB0d57qygRs63MZknmk.roa (hash: XLxO/uwC+4ZlL0rXFqAajGUTAt+XMI9UYoDlUJW9JS8=)
                          5: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=)
                          6: EVR1g7g_6ShkZ-G0slxr47V122I.roa (hash: OE8gSI9PUAIyHUczWwUS2FGixNNsUvDNFuftsFbcP6w=)
                          7: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=)
                          8: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=)
                          9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=)
                          10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=)
                          11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=)
                          12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=)
                          13: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:b6:9b:4a:8d:8b:13:47:f9:75:26:32:e6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=d01fd4d3f4813afb39a11fe13edbf4c1006affaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:f1:41:e7:35:d0:92:f1:4b:1d:51:29:f3:
                    1f:37:91:a4:ae:3f:df:35:e5:74:da:bc:40:5b:89:
                    b4:bb:73:b2:af:80:b2:05:77:cc:cc:ef:48:34:38:
                    53:6c:e6:b2:08:44:ce:bb:89:bf:ff:7e:a0:ba:c8:
                    d4:00:58:c7:cf:45:06:b6:71:1c:a7:b3:4f:f4:40:
                    6a:dc:7b:70:f6:b7:1f:98:7c:49:85:84:e9:92:c0:
                    d5:f2:ba:00:cf:72:78:53:3c:12:5a:07:5a:ed:5f:
                    04:1d:2c:c5:39:19:1b:dd:ce:57:f0:51:04:86:2f:
                    f5:9a:5f:0e:6b:d1:ac:2d:69:a1:63:1a:35:87:ef:
                    e7:6e:5d:0d:d1:00:61:d5:d4:1c:04:82:33:99:0c:
                    d5:be:ed:05:82:9a:24:06:e0:f0:90:1c:de:90:bc:
                    df:11:8d:5f:67:d4:0e:b0:1a:55:8f:68:3c:eb:e6:
                    be:66:19:65:92:42:1e:38:df:5f:40:39:68:86:3c:
                    3a:c8:80:c1:b0:f1:27:9e:2d:44:33:ce:c3:1f:47:
                    a6:0d:98:f4:29:d1:0d:58:94:9c:04:37:c4:b5:f9:
                    9e:4d:3b:0f:f3:ae:ac:77:d1:c0:29:45:1c:76:92:
                    0f:f0:52:b0:a3:4c:88:9e:6f:3d:ae:7f:f5:4b:85:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:D4:D3:F4:81:3A:FB:39:A1:1F:E1:3E:DB:F4:C1:00:6A:FF:AF
            X509v3 Authority Key Identifier:
                keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:c2:c1:41:1a:7b:35:73:60:ad:eb:33:25:00:90:2d:e8:
         7e:a1:3e:f9:bd:d3:f4:6d:6a:58:61:24:bc:fd:e8:7b:b6:8f:
         17:87:5a:fe:6a:59:b3:bc:9d:1e:44:31:82:15:45:2f:22:e6:
         5b:48:55:5a:2c:df:f7:3e:18:2c:83:31:19:e0:14:41:e0:19:
         99:45:f8:ee:c9:67:81:58:fe:0b:8d:cf:34:63:27:a4:e8:12:
         a5:53:21:20:9a:63:c4:c1:31:97:08:73:c5:3b:49:46:83:ea:
         31:45:d0:ff:91:61:bd:29:4c:b6:d6:35:bf:57:cd:f7:6d:8f:
         a8:07:2e:a7:ff:7d:6c:d7:ad:27:b5:02:cf:3a:ea:10:6e:2f:
         be:cc:7a:9c:f7:0d:40:a6:c8:7e:dd:c3:d6:48:e3:fd:66:90:
         85:9d:c8:88:19:ae:8f:01:31:fe:93:97:9a:4b:7d:8a:3c:1b:
         3d:e8:7d:9f:83:e0:1c:69:5d:89:52:b7:10:38:66:12:db:75:
         48:86:f5:8e:bd:34:b7:16:26:3d:3b:32:aa:e9:c7:6c:56:7c:
         2c:71:61:fc:a0:57:ce:e3:0f:a6:8a:26:60:0e:4e:57:7e:4b:
         35:7a:2f:9d:80:aa:02:36:36:ce:fd:6d:f9:a0:11:15:10:75:
         e8:94:bd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumV22m0qNixNH+XUmMuZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy
MDdmZDIwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
EyhkMDFmZDRkM2Y0ODEzYWZiMzlhMTFmZTEzZWRiZjRjMTAwNmFmZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucDxQec10JLxSx1RKfMfN5Gkrj/f
NeV02rxAW4m0u3Oyr4CyBXfMzO9INDhTbOayCETOu4m//36gusjUAFjHz0UGtnEc
p7NP9EBq3Htw9rcfmHxJhYTpksDV8roAz3J4UzwSWgda7V8EHSzFORkb3c5X8FEE
hi/1ml8Oa9GsLWmhYxo1h+/nbl0N0QBh1dQcBIIzmQzVvu0FgpokBuDwkBzekLzf
EY1fZ9QOsBpVj2g86+a+ZhllkkIeON9fQDlohjw6yIDBsPEnni1EM87DH0emDZj0
KdENWJScBDfEtfmeTTsP866sd9HAKUUcdpIP8FKwo0yInm89rn/1S4WTfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAf1NP0gTr7OaEf4T7b9MEAav+vMB8GA1UdIwQY
MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt
MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1
LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYrCwUEa
ezVzYK3rMyUAkC3ofqE++b3T9G1qWGEkvP3oe7aPF4da/mpZs7ydHkQxghVFLyLm
W0hVWizf9z4YLIMxGeAUQeAZmUX47slngVj+C43PNGMnpOgSpVMhIJpjxMExlwhz
xTtJRoPqMUXQ/5FhvSlMttY1v1fN922PqAcup/99bNetJ7UCzzrqEG4vvsx6nPcN
QKbIft3D1kjj/WaQhZ3IiBmujwEx/pOXmkt9ijwbPeh9n4PgHGldiVK3EDhmEtt1
SIb1jr00txYmPTsyqunHbFZ8LHFh/KBXzuMPpoomYA5OV35LNXovnYCqAjY2zv1t
+aARFRB16JS91w==
-----END CERTIFICATE-----