Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File:                     lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier:          fOjCxy6WAt3QCIidS02QWoRzPXHbTyDSFVr79Bpouo0=
Subject key identifier:   6B:74:A7:FF:D3:17:87:8B:47:44:43:91:6D:65:7C:C1:30:15:91:71
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       01962E61D8D48BC274D35F1F856E45130A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number:          134A
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
                          2: GWunLY-bXSErZU3FWmnV4-5vVKY.roa (hash: xPAOKfueV0x+XEoysYucTWWsNf2sG+B7HRMkzQ4aBw8=)
                          3: UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa (hash: 1EAW6HIPjECH2TE4ZL4WUIb5JaVxWeaXeK/6ii8nmQQ=)
                          4: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: m5xcfOenxmyaKzdGzgtOFNzU8XlDwjLxn2WKWgC1o5w=)
                          5: qFlx1w2bk_8ZzG6kySrbr5Cw93c.roa (hash: Qx9Q5kDChlIU2guBfz5UZaBHybIZXsMnUw//pyzX4sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d8:d4:8b:c2:74:d3:5f:1f:85:6e:45:13:0a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=6b74a7ffd317878b474443916d657cc130159171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:e3:3e:a5:1a:2b:03:56:1c:cc:cf:c8:4a:
                    bb:24:a5:d9:85:36:80:81:24:72:f6:20:68:13:ff:
                    d8:49:c4:4b:40:bf:b4:c4:c0:de:14:c5:24:88:7f:
                    00:88:ed:11:78:f4:e6:b6:c1:cb:a9:30:c9:e5:7e:
                    97:ca:75:f9:bd:fb:92:f5:da:fd:c1:76:d2:e3:36:
                    fd:fb:e0:5d:1d:14:c0:be:14:b9:fa:39:8e:81:3c:
                    4e:8b:9a:9c:59:e6:0d:95:cf:69:55:69:d8:30:a9:
                    e8:21:d7:0d:af:96:e2:db:07:12:12:b3:77:d9:89:
                    6d:3d:e0:33:1f:47:9f:1a:75:8d:2d:68:57:0d:4e:
                    f8:4a:4d:9e:c4:96:b9:1f:dc:3a:67:1f:d2:b5:ab:
                    81:87:71:c6:31:4a:36:d2:b0:47:ab:dc:8f:ab:69:
                    d8:f5:78:81:5a:e0:6d:fc:e4:82:b6:45:fe:88:40:
                    b6:b7:5c:af:a9:ed:41:7d:85:0c:21:11:50:ee:d8:
                    27:59:ac:af:80:fc:29:fa:2b:82:a4:1a:5b:f2:b0:
                    fc:e0:d7:8b:15:3c:25:d1:4d:01:8d:fb:6c:df:b7:
                    23:b2:0e:0f:53:42:90:ed:69:81:6a:19:b5:d1:6c:
                    af:39:b2:ed:c2:22:c4:7a:50:15:45:18:a5:90:81:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:A7:FF:D3:17:87:8B:47:44:43:91:6D:65:7C:C1:30:15:91:71
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:08:aa:0b:e6:a8:43:a0:93:6f:08:c1:f5:61:1f:29:a2:8e:
         1d:30:5c:0c:78:d3:52:53:19:7f:05:5a:38:89:0b:e5:0d:6b:
         86:b2:bd:a0:fa:f9:69:c2:54:5d:05:a4:3f:15:4f:b0:73:8e:
         bc:89:38:63:9f:ae:8e:4e:23:37:e1:4f:b0:32:d3:18:f9:53:
         4c:c5:02:fd:5a:70:dc:06:1a:e0:36:80:90:45:a6:37:5d:a8:
         10:98:f8:56:38:4e:d0:5c:ed:c5:75:9d:6e:30:cf:fd:46:f0:
         cc:c8:08:93:73:5e:48:53:ce:4c:f9:8d:f1:6d:ed:c2:ee:f4:
         c1:79:07:40:31:59:29:f2:2b:c4:63:3a:99:c5:13:71:7e:25:
         49:95:e7:d6:57:9e:ab:b8:32:b7:41:39:d8:95:3c:c3:c6:47:
         9c:fe:1b:e9:87:e3:86:05:23:a7:fa:ec:e2:27:1d:e8:b8:ec:
         f8:6f:c6:3c:9e:f5:1d:33:cc:13:f9:be:bb:8d:46:37:27:64:
         1f:0f:63:81:8a:e4:a8:4f:b3:4b:3f:8d:8c:7f:a7:1e:ef:4b:
         96:68:fe:9d:8b:46:c7:f6:53:f3:fa:56:94:13:a7:7d:d0:dd:
         1b:f6:4e:e9:10:60:2f:e3:e2:a0:5f:46:b0:31:12:92:dd:85:
         c4:5d:dc:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdjUi8J0018fhW5FEwpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4
MWJhYmUwHhcNMjUwNDEzMDkwMTI2WhcNMjUwNDE0MDkwMTI2WjAzMTEwLwYDVQQD
Eyg2Yjc0YTdmZmQzMTc4NzhiNDc0NDQzOTE2ZDY1N2NjMTMwMTU5MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnLjPqUaKwNWHMzPyEq7JKXZhTaA
gSRy9iBoE//YScRLQL+0xMDeFMUkiH8AiO0RePTmtsHLqTDJ5X6XynX5vfuS9dr9
wXbS4zb9++BdHRTAvhS5+jmOgTxOi5qcWeYNlc9pVWnYMKnoIdcNr5bi2wcSErN3
2YltPeAzH0efGnWNLWhXDU74Sk2exJa5H9w6Zx/StauBh3HGMUo20rBHq9yPq2nY
9XiBWuBt/OSCtkX+iEC2t1yvqe1BfYUMIRFQ7tgnWayvgPwp+iuCpBpb8rD84NeL
FTwl0U0Bjfts37cjsg4PU0KQ7WmBahm10WyvObLtwiLEelAVRRilkIE2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt0p//TF4eLR0RDkW1lfMEwFZFxMB8GA1UdIwQY
MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt
YTQ4OGJkNDIwMjRmLzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm
LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7QiqC+ao
Q6CTbwjB9WEfKaKOHTBcDHjTUlMZfwVaOIkL5Q1rhrK9oPr5acJUXQWkPxVPsHOO
vIk4Y5+ujk4jN+FPsDLTGPlTTMUC/Vpw3AYa4DaAkEWmN12oEJj4VjhO0FztxXWd
bjDP/UbwzMgIk3NeSFPOTPmN8W3twu70wXkHQDFZKfIrxGM6mcUTcX4lSZXn1lee
q7gyt0E52JU8w8ZHnP4b6YfjhgUjp/rs4icd6Ljs+G/GPJ71HTPME/m+u41GNydk
Hw9jgYrkqE+zSz+NjH+nHu9Llmj+nYtGx/ZT8/pWlBOnfdDdG/ZO6RBgL+PioF9G
sDESkt2FxF3c2A==
-----END CERTIFICATE-----