Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File:                     xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier:          Ymg7TbSVI0dWDz6N+Xdj8eQgEB80308W/DvpW736UW8=
Subject key identifier:   B1:8D:5A:14:17:98:5B:88:B9:1D:F0:0F:1E:EB:2B:A6:2A:C7:BB:F6
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer:       /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial:       01962ECFD45726EBFA149CB0EF9A6A383533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number:          137B
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
                          2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
                          3: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
                          4: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
                          5: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
                          6: xNpETnG4xYSKenzmRRS7lJxILiU.roa (hash: rysXDGRcpk/iACSksmScnaHoO7AcY/3D8XpcuXaPuwI=)
                          7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: pEwWkP01ahJ5dRktGpBVVLVLeq2NfxPsTzHxLZiKE/g=)
                          8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d4:57:26:eb:fa:14:9c:b0:ef:9a:6a:38:35:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=b18d5a1417985b88b91df00f1eeb2ba62ac7bbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:23:bf:e0:38:9b:01:ea:c2:fb:60:c1:9b:
                    0e:eb:65:3c:67:af:fe:cc:70:87:07:d6:8b:86:13:
                    8e:5a:07:ce:ff:59:ea:99:b9:5c:e8:2a:1e:a1:20:
                    d4:c3:8b:f2:3f:bd:af:a9:bf:4a:a0:54:13:12:ae:
                    08:62:79:ab:75:ba:c9:ed:e4:2f:22:07:44:76:ae:
                    6d:0b:dc:3a:a0:18:9e:c2:4d:74:9c:92:5e:0e:8b:
                    1f:23:54:64:26:13:fb:10:33:f8:33:b1:5d:aa:8a:
                    52:af:32:93:70:68:9a:a5:a5:7a:c6:73:33:9c:4f:
                    c5:36:b8:a1:03:df:fc:32:14:fa:20:d5:ab:9c:32:
                    9a:66:fa:f8:6c:77:98:2d:6a:11:68:a4:d0:5e:42:
                    8c:3d:54:be:ed:ef:dd:54:1d:4f:ae:f6:e2:c3:29:
                    5a:ec:e9:f4:c4:28:4c:f0:5b:64:6c:25:de:78:40:
                    cb:d8:88:c1:54:b8:54:c7:9d:cc:70:eb:5b:51:84:
                    df:5c:73:3c:03:b5:85:c1:f3:9e:b0:81:5e:5a:d6:
                    d4:84:b8:3d:4f:4d:b3:7b:ee:17:28:b2:dc:84:77:
                    06:86:b4:4f:02:b3:db:3b:57:80:e8:97:6e:3c:e7:
                    20:46:f7:87:20:91:dc:54:ba:e2:2e:cd:6d:d1:5f:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:5A:14:17:98:5B:88:B9:1D:F0:0F:1E:EB:2B:A6:2A:C7:BB:F6
            X509v3 Authority Key Identifier:
                keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:39:59:2a:23:90:38:bf:ec:b3:ed:aa:25:d2:1b:41:55:
         9d:95:3c:bd:f0:d4:96:a3:48:85:a6:f8:76:ce:ac:3d:70:4a:
         3e:82:96:7c:4e:c8:b2:aa:c7:78:73:b8:87:ea:8d:94:71:74:
         04:68:4e:c2:41:35:a3:ad:06:e6:a4:9e:08:94:21:62:df:92:
         92:4d:22:c5:cc:25:b7:80:90:0d:f1:72:ea:e6:94:f2:fd:bb:
         34:7a:51:0c:e1:6d:d2:e4:e2:0e:2a:e5:62:28:cc:21:53:ad:
         95:56:ae:3e:f3:3c:b3:bd:0f:8e:f0:14:6c:c1:18:c5:a7:c3:
         5e:23:cf:d1:d3:58:6a:93:7f:1d:76:30:c9:79:c4:2e:51:e6:
         80:e5:e2:a0:65:e5:60:62:21:5a:a7:e6:65:69:0e:8b:7c:6b:
         be:d8:a0:6d:c7:0b:10:1f:c3:5e:e1:fc:77:5a:56:10:d1:19:
         02:42:af:19:7f:7c:58:11:8d:24:53:90:04:ea:b9:18:18:a2:
         88:49:9b:6a:80:d1:26:d2:af:e3:e8:41:e1:64:d5:a3:a9:b3:
         1f:f9:3d:1a:d1:3e:7f:f4:56:70:d5:8a:8a:b8:99:35:a5:df:
         81:3c:c5:47:7c:d6:e0:0d:75:0e:32:b3:6a:98:ff:c0:5a:c9:
         0e:45:cc:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9RXJuv6FJyw75pqODUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjUwNDEzMTEwMTM0WhcNMjUwNDE0MTEwMTM0WjAzMTEwLwYDVQQD
EyhiMThkNWExNDE3OTg1Yjg4YjkxZGYwMGYxZWViMmJhNjJhYzdiYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yEjv+A4mwHqwvtgwZsO62U8Z6/+
zHCHB9aLhhOOWgfO/1nqmblc6CoeoSDUw4vyP72vqb9KoFQTEq4IYnmrdbrJ7eQv
IgdEdq5tC9w6oBiewk10nJJeDosfI1RkJhP7EDP4M7FdqopSrzKTcGiapaV6xnMz
nE/FNrihA9/8MhT6INWrnDKaZvr4bHeYLWoRaKTQXkKMPVS+7e/dVB1Prvbiwyla
7On0xChM8FtkbCXeeEDL2IjBVLhUx53McOtbUYTfXHM8A7WFwfOesIFeWtbUhLg9
T02ze+4XKLLchHcGhrRPArPbO1eA6JduPOcgRveHIJHcVLriLs1t0V8KywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGNWhQXmFuIuR3wDx7rK6Yqx7v2MB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwI5WSoj
kDi/7LPtqiXSG0FVnZU8vfDUlqNIhab4ds6sPXBKPoKWfE7IsqrHeHO4h+qNlHF0
BGhOwkE1o60G5qSeCJQhYt+Skk0ixcwlt4CQDfFy6uaU8v27NHpRDOFt0uTiDirl
YijMIVOtlVauPvM8s70PjvAUbMEYxafDXiPP0dNYapN/HXYwyXnELlHmgOXioGXl
YGIhWqfmZWkOi3xrvtigbccLEB/DXuH8d1pWENEZAkKvGX98WBGNJFOQBOq5GBii
iEmbaoDRJtKv4+hB4WTVo6mzH/k9GtE+f/RWcNWKiriZNaXfgTzFR3zW4A11DjKz
apj/wFrJDkXMxA==
-----END CERTIFICATE-----