Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File:                     J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier:          OdnLhbikHnjYgVLfykbnfNOwX3YbqHPQyFp6mc+E5rY=
Subject key identifier:   BC:4B:49:2F:EC:C0:9F:B7:FC:DD:FE:EB:F2:52:D6:07:27:43:94:D6
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       01962F3DCA7A38071A0E9A61A861D297F9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number:          0A3E
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 69H9nuaYzzRi_7MRSIl6AwfMEZ8.roa (hash: AKZV5AcjjaPBsRFuJ1owk+1YCbQLVZHHRJVdcXrDf9Q=)
                          2: Eqz6HqbOHRxUsIdz-CIFT589G8w.roa (hash: NYwF+vNi32nyXeOdW5n0mZaZ/W25jWq6A2FW0FtVszo=)
                          3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: Eme3/zhySQz0TPL2xqARssoFbwHkqcFNE25+JMRpxXk=)
                          4: QMgP50QUErIVfe6bHrHbEcBqS0o.roa (hash: SzUA4iffOvayoUI6Lybdi08Ue69lvJ7eeJxQaa9p+NY=)
                          5: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
                          6: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
                          7: nyvqaUD_bRXDtH3c7OYTpjxlOys.roa (hash: k9drrNKH0GhQKJ9+kAcGLCk8vj6djrK//GR8rC7ngYk=)
                          8: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
                          9: xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa (hash: v6JdlRVd2u7tIbRYZCLJ9Bn+UkQd4MO8kZwoWQAa+WM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:7a:38:07:1a:0e:9a:61:a8:61:d2:97:f9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=bc4b492fecc09fb7fcddfeebf252d607274394d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:ef:f9:db:81:35:1d:fa:d4:57:78:5f:3f:
                    ee:fd:32:4b:8b:2c:c6:09:7f:95:59:62:e4:3f:9d:
                    30:7d:9d:b4:11:db:ce:69:76:e1:f0:c0:69:43:24:
                    6b:ce:92:2c:14:f5:e2:1f:c0:3d:3e:68:d6:53:1e:
                    47:4c:7c:f9:f9:c9:1f:98:51:0b:96:c8:84:f4:a3:
                    d1:5a:1f:c0:00:d9:35:da:9a:0b:0b:77:1d:24:0c:
                    f2:2c:7e:92:e6:50:12:b0:6f:dd:97:af:5d:8e:96:
                    11:1f:75:31:b1:3a:c5:e0:c0:80:5e:a8:50:b7:27:
                    9a:b8:51:5a:3f:75:29:66:81:71:1e:67:34:44:0c:
                    76:d6:af:b2:5f:a8:13:2a:6d:dd:26:fe:61:c2:3e:
                    4d:40:aa:db:d2:a2:d7:0f:f2:73:42:cf:c6:cc:b5:
                    21:44:ed:a0:d6:0f:31:f7:00:3f:36:36:b9:84:24:
                    77:1d:88:85:6d:26:0d:6f:d4:35:ed:94:98:b7:34:
                    87:da:a3:0d:ee:45:0e:8a:ac:d1:cc:47:21:49:18:
                    a9:b8:3f:ae:df:e9:bc:0d:ec:1e:53:93:ba:83:93:
                    2a:4f:b3:34:9e:9f:23:cd:8c:cd:b4:2c:ef:4d:f7:
                    e7:39:f6:08:50:a5:ef:ae:a1:17:10:73:5c:95:af:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:49:2F:EC:C0:9F:B7:FC:DD:FE:EB:F2:52:D6:07:27:43:94:D6
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:96:b7:c8:f8:4b:21:c2:02:51:03:1a:e9:98:e0:a8:dd:
         c9:bb:f5:11:48:bc:c6:7a:46:5b:e8:a9:80:31:3f:dd:ee:17:
         12:c8:26:56:ff:e8:18:cf:0a:0d:d1:9a:14:38:fa:26:6c:28:
         1c:71:c9:3a:b1:91:b0:34:28:f8:70:1b:27:2f:d4:61:7a:33:
         2f:de:46:5f:28:39:23:32:1e:26:d8:28:71:05:b2:17:5b:59:
         ae:be:b0:d2:97:02:dd:1f:1d:fa:ae:b2:00:8e:c5:4f:37:a5:
         2c:6a:89:a4:1e:87:a2:0a:f8:45:10:d5:67:fe:3f:7b:a0:1e:
         90:7d:46:48:f2:e2:5f:60:1c:34:96:b5:e6:fa:bb:33:c2:44:
         69:12:8b:ef:e9:a0:3b:bb:3c:4c:53:b6:42:72:b5:d0:a4:03:
         b7:70:ee:f8:d9:aa:2b:91:43:cc:68:e4:c9:42:25:c9:f3:0c:
         b9:78:da:d4:cf:30:cf:e7:af:65:2b:b2:08:57:d7:42:a4:a9:
         b8:6c:c0:8a:75:19:ec:d5:d8:d8:d5:c2:47:1b:c5:47:72:32:
         f0:7e:73:9a:7c:73:c0:84:93:82:2d:46:e8:f5:31:91:dd:d0:
         8e:ef:7a:3c:3f:77:e2:d3:08:d0:60:06:11:c4:a3:2c:da:86:
         d7:ba:af:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcp6OAcaDpphqGHSl/mpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwNDEzMTMwMTQwWhcNMjUwNDE0MTMwMTQwWjAzMTEwLwYDVQQD
EyhiYzRiNDkyZmVjYzA5ZmI3ZmNkZGZlZWJmMjUyZDYwNzI3NDM5NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpTv+duBNR361Fd4Xz/u/TJLiyzG
CX+VWWLkP50wfZ20EdvOaXbh8MBpQyRrzpIsFPXiH8A9PmjWUx5HTHz5+ckfmFEL
lsiE9KPRWh/AANk12poLC3cdJAzyLH6S5lASsG/dl69djpYRH3UxsTrF4MCAXqhQ
tyeauFFaP3UpZoFxHmc0RAx21q+yX6gTKm3dJv5hwj5NQKrb0qLXD/JzQs/GzLUh
RO2g1g8x9wA/Nja5hCR3HYiFbSYNb9Q17ZSYtzSH2qMN7kUOiqzRzEchSRipuD+u
3+m8DeweU5O6g5MqT7M0np8jzYzNtCzvTffnOfYIUKXvrqEXEHNcla+cGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxLSS/swJ+3/N3+6/JS1gcnQ5TWMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjWWt8j4
SyHCAlEDGumY4Kjdybv1EUi8xnpGW+ipgDE/3e4XEsgmVv/oGM8KDdGaFDj6Jmwo
HHHJOrGRsDQo+HAbJy/UYXozL95GXyg5IzIeJtgocQWyF1tZrr6w0pcC3R8d+q6y
AI7FTzelLGqJpB6Hogr4RRDVZ/4/e6AekH1GSPLiX2AcNJa15vq7M8JEaRKL7+mg
O7s8TFO2QnK10KQDt3Du+NmqK5FDzGjkyUIlyfMMuXja1M8wz+evZSuyCFfXQqSp
uGzAinUZ7NXY2NXCRxvFR3Iy8H5zmnxzwISTgi1G6PUxkd3Qju96PD934tMI0GAG
EcSjLNqG17qvfA==
-----END CERTIFICATE-----