Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File:                     r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier:          J9S3ZUennLFXLiRAU+ElhKC/unT74/4yRf9wfNldH4I=
Subject key identifier:   6C:89:6B:DA:34:D9:5F:1D:82:CD:E2:65:89:19:B9:5E:88:19:1B:5E
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer:       /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial:       01962E2B3CE433015E12E3D17B69C73B8720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
                          2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
                          3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: Ev9VoN5I1B17Gsc+REzCM2HA5BQGAOQEm8Wb2WClZLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3c:e4:33:01:5e:12:e3:d1:7b:69:c7:3b:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=6c896bda34d95f1d82cde2658919b95e88191b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:97:80:9d:14:5c:0d:28:e8:c2:3f:17:3c:
                    e0:90:19:d0:41:7b:d7:39:a8:4d:7c:38:d2:a7:85:
                    8e:b1:97:fc:d8:68:94:af:bf:c2:b7:57:34:bb:57:
                    4e:57:6b:6d:6d:3e:3b:8d:c1:b9:d3:4f:92:fe:dc:
                    4c:34:f6:df:92:4f:0f:7c:be:ba:b3:b4:81:e6:c9:
                    ad:81:d1:6b:12:95:0b:8b:4f:01:e3:94:58:6b:cb:
                    3e:c3:e7:f8:88:f1:b1:b3:7d:62:e9:6b:30:57:6d:
                    d8:5e:6b:72:51:81:d3:54:43:5f:35:f2:66:2c:9a:
                    c1:af:7a:2b:69:12:84:84:d8:5a:29:62:0f:3d:94:
                    f4:f6:70:56:be:90:fd:95:ae:04:b9:cd:90:9c:a0:
                    b6:81:4a:c9:a5:9e:ad:11:56:9b:60:61:e5:c0:0c:
                    85:16:33:73:d1:f6:7e:b9:e4:52:56:1b:01:82:40:
                    cb:4f:1f:9e:f8:db:09:b8:4b:d8:05:7d:3c:47:64:
                    06:35:24:89:3d:1a:db:21:5c:48:33:48:d0:b6:0a:
                    25:91:f2:12:f5:1e:1e:1f:38:09:bc:6f:ed:51:3b:
                    25:de:29:39:ec:bf:84:29:3f:a9:6d:72:5a:b1:dc:
                    ce:84:d4:13:21:3d:26:21:df:97:5e:5f:c0:91:df:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:89:6B:DA:34:D9:5F:1D:82:CD:E2:65:89:19:B9:5E:88:19:1B:5E
            X509v3 Authority Key Identifier:
                keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:87:47:82:08:d9:8b:07:20:f2:57:d9:99:49:38:51:a6:
         24:26:bd:4d:cf:17:cf:de:a4:e1:d7:bd:10:33:9d:1d:e0:42:
         b2:d4:49:43:14:36:54:ed:8b:57:07:d2:d9:bf:6c:a7:69:b7:
         c1:2d:06:96:d7:3d:32:3c:c4:10:5d:e1:a5:ce:3b:e4:e3:a7:
         b0:82:d9:5e:72:0d:23:77:f0:d3:25:f4:01:21:3c:da:9d:0b:
         ba:9a:99:71:b6:1b:b4:93:fb:81:55:a5:bf:d6:7a:e1:29:24:
         68:1d:6b:45:7d:1c:8b:44:7a:90:ee:4b:76:e4:23:36:92:eb:
         53:bb:c8:ce:43:b9:77:95:38:3e:54:0b:8c:92:d7:91:5d:eb:
         cf:5a:0b:9c:f3:07:7d:eb:9d:00:98:ef:3e:92:3f:7e:23:bd:
         85:80:9d:a2:b6:61:df:17:aa:39:21:46:07:b1:32:a6:c5:bb:
         1d:02:b5:b9:c1:61:38:0b:38:5e:7f:df:f8:f7:39:1c:6c:dc:
         51:07:d1:9a:25:f9:ac:86:24:e4:1c:29:ca:f7:86:c3:db:e5:
         e1:d7:07:7a:f0:3e:1c:f8:58:77:aa:31:aa:8f:ed:0f:75:81:
         d6:bb:75:c6:8d:e2:db:58:30:3f:0d:62:82:73:1e:fb:4c:88:
         d5:ba:3d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzzkMwFeEuPRe2nHO4cgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDhmNjdmNTNmY2U5ODkxZDQxNTkzYWM4NGNhZTMwNGFi
ZmNiY2YwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
Eyg2Yzg5NmJkYTM0ZDk1ZjFkODJjZGUyNjU4OTE5Yjk1ZTg4MTkxYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LuXgJ0UXA0o6MI/FzzgkBnQQXvX
OahNfDjSp4WOsZf82GiUr7/Ct1c0u1dOV2ttbT47jcG500+S/txMNPbfkk8PfL66
s7SB5smtgdFrEpULi08B45RYa8s+w+f4iPGxs31i6WswV23YXmtyUYHTVENfNfJm
LJrBr3oraRKEhNhaKWIPPZT09nBWvpD9la4Euc2QnKC2gUrJpZ6tEVabYGHlwAyF
FjNz0fZ+ueRSVhsBgkDLTx+e+NsJuEvYBX08R2QGNSSJPRrbIVxIM0jQtgolkfIS
9R4eHzgJvG/tUTsl3ik57L+EKT+pbXJasdzOhNQTIT0mId+XXl/Akd9E5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyJa9o02V8dgs3iZYkZuV6IGRteMB8GA1UdIwQY
MBaAFK9I9n9T/OmJHUFZOshMrjBKv8vPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMTU0NWItZmM1Mi00NGMwLThmNTct
Mjg4NGRkODI0OGQ2LzEvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMTU0NWItZmM1Mi00NGMwLThmNTctMjg4NGRkODI0OGQ2
LzEvcjBqMmYxUDg2WWtkUVZrNnlFeXVNRXFfeTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPGHR4II
2YsHIPJX2ZlJOFGmJCa9Tc8Xz96k4de9EDOdHeBCstRJQxQ2VO2LVwfS2b9sp2m3
wS0Gltc9MjzEEF3hpc475OOnsILZXnINI3fw0yX0ASE82p0LupqZcbYbtJP7gVWl
v9Z64SkkaB1rRX0ci0R6kO5LduQjNpLrU7vIzkO5d5U4PlQLjJLXkV3rz1oLnPMH
feudAJjvPpI/fiO9hYCdorZh3xeqOSFGB7EypsW7HQK1ucFhOAs4Xn/f+Pc5HGzc
UQfRmiX5rIYk5BwpyveGw9vl4dcHevA+HPhYd6oxqo/tD3WB1rt1xo3i21gwPw1i
gnMe+0yI1bo9HA==
-----END CERTIFICATE-----