Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File:                     Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier:          Gz2joRcfgMGbx8CdORSX8/0I6QSmnam3+JhbgcQQ/1Q=
Subject key identifier:   BE:B9:C3:DD:D7:1B:54:F5:A3:8C:2A:99:8F:2F:2D:DC:B4:C3:A4:02
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       01962F3D9C659EBE715D111D44ADCD5B6601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: Axhuv-vSYllpuU-14IugpstzqWE.roa (hash: /Ord+e8QnPH5LGTzpUgmYsFuHyPV/bxgYVJqRNe2PIA=)
                          2: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (hash: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=)
                          3: INSqWlHflpOidRP2Z0zkE0RFoZM.roa (hash: UYyBIx3hFm38d0qCAb7SJuuzgZHuKn0sxA5Yj+GvQrY=)
                          4: KlHNG1wkVyOFx-j7DYZVfmh5bYE.roa (hash: L5JYU64abXKhXkIrpf3gdfvIS55/epAy6+ULSIZ/xw8=)
                          5: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: qm5EpBQpr5LiDc0/euPPCATRj95s+gtF7123KK3D8ak=)
                          6: XBUDByF8di0OovXdvsIAPmD8oI8.roa (hash: QKkt6zof2ioYKcO5/osSYc20Y4gabGbrulwMZuT72/Y=)
                          7: eAIf5pwwtS5DMcRXjingbijYa6I.roa (hash: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=)
                          8: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (hash: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:65:9e:be:71:5d:11:1d:44:ad:cd:5b:66:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=beb9c3ddd71b54f5a38c2a998f2f2ddcb4c3a402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:35:57:1a:e6:c1:aa:54:8d:4f:b1:1a:23:
                    e3:d6:87:0d:cc:5e:e8:91:59:d2:2c:39:18:b1:f4:
                    a8:72:85:2f:ee:64:06:ff:ca:b6:c0:21:05:8f:d9:
                    ce:84:59:67:3f:7b:3d:f9:a9:7a:6b:8e:a4:f2:77:
                    bf:42:71:1a:e1:d2:2e:05:e7:57:27:59:a6:7e:ca:
                    a7:68:d1:92:db:ee:e5:39:4a:f6:93:80:a7:0d:cd:
                    36:c1:c8:b5:52:17:f4:3c:25:83:78:cb:ec:1f:cd:
                    9b:19:82:b8:82:c0:51:46:b2:78:5e:f7:47:22:da:
                    00:43:18:85:eb:02:b0:18:12:f2:c2:8c:05:d0:9c:
                    ff:a5:48:50:cd:1c:dc:7b:86:fb:e8:26:15:46:76:
                    0e:9c:b0:88:0c:da:a8:6e:4d:44:07:7e:92:c4:03:
                    c2:3c:b9:36:5d:2d:c2:77:a1:94:8d:52:5a:55:1e:
                    dc:cd:69:9a:6b:26:33:59:6a:62:60:a7:39:a8:ad:
                    a2:29:49:a0:ea:25:2c:e7:44:22:32:60:bc:b8:e4:
                    8b:ce:61:e7:29:6c:64:49:79:25:d9:b2:b3:1c:f3:
                    6f:15:53:60:1d:62:94:9c:3a:4c:5f:2c:42:89:ca:
                    69:87:dd:7f:d1:88:55:db:11:0d:8f:9e:0f:f7:d2:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B9:C3:DD:D7:1B:54:F5:A3:8C:2A:99:8F:2F:2D:DC:B4:C3:A4:02
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:6d:0d:ee:c3:cd:a5:3c:ff:d2:33:36:c2:26:9e:82:61:df:
         e6:62:19:1a:0b:d5:e8:ea:70:d1:ff:68:8f:a3:62:09:50:b9:
         da:3e:3d:a5:86:cc:7e:d8:46:22:6a:8b:a8:08:14:68:c6:24:
         f1:c4:ae:45:51:5e:bc:1f:61:44:79:80:27:ec:4f:87:63:8c:
         20:06:35:75:6e:ce:1f:7b:13:7e:c0:05:7d:91:9e:17:e2:cb:
         3d:8e:80:57:35:ae:84:9a:93:9c:b4:14:da:eb:6b:04:ce:23:
         cb:b0:18:35:db:2d:2a:8f:9f:de:b5:f1:7d:fc:bb:bd:e4:de:
         05:27:bb:88:b9:f3:32:62:b0:41:17:6f:60:f2:45:7b:39:c7:
         0e:cb:92:05:ec:8f:7b:2a:cb:1f:c6:55:75:d6:65:e4:09:57:
         98:8b:4d:fc:3d:c5:6c:26:e1:f4:2e:17:86:e9:9d:d9:0a:00:
         e1:40:a9:02:8a:61:3d:49:23:67:5b:d6:71:67:be:09:14:17:
         e6:ee:cf:74:6a:cc:48:41:1c:78:2a:2b:19:f4:74:c2:66:d4:
         4e:1e:c4:65:73:55:9c:95:2e:1b:83:6b:6e:f2:9f:83:8d:d5:
         02:27:eb:6d:a4:db:a6:cb:f5:97:af:bf:c7:af:72:9d:d6:1f:
         c0:c6:08:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZxlnr5xXREdRK3NW2YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2
OGI4NjQwHhcNMjUwNDEzMTMwMTI4WhcNMjUwNDE0MTMwMTI4WjAzMTEwLwYDVQQD
EyhiZWI5YzNkZGQ3MWI1NGY1YTM4YzJhOTk4ZjJmMmRkY2I0YzNhNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEg1VxrmwapUjU+xGiPj1ocNzF7o
kVnSLDkYsfSocoUv7mQG/8q2wCEFj9nOhFlnP3s9+al6a46k8ne/QnEa4dIuBedX
J1mmfsqnaNGS2+7lOUr2k4CnDc02wci1Uhf0PCWDeMvsH82bGYK4gsBRRrJ4XvdH
ItoAQxiF6wKwGBLywowF0Jz/pUhQzRzce4b76CYVRnYOnLCIDNqobk1EB36SxAPC
PLk2XS3Cd6GUjVJaVR7czWmaayYzWWpiYKc5qK2iKUmg6iUs50QiMmC8uOSLzmHn
KWxkSXkl2bKzHPNvFVNgHWKUnDpMXyxCicpph91/0YhV2xENj54P99LJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL65w93XG1T1o4wqmY8vLdy0w6QCMB8GA1UdIwQY
MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt
MTFlOWU5ZjAxMzQzLzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz
LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0G0N7sPN
pTz/0jM2wiaegmHf5mIZGgvV6Opw0f9oj6NiCVC52j49pYbMfthGImqLqAgUaMYk
8cSuRVFevB9hRHmAJ+xPh2OMIAY1dW7OH3sTfsAFfZGeF+LLPY6AVzWuhJqTnLQU
2utrBM4jy7AYNdstKo+f3rXxffy7veTeBSe7iLnzMmKwQRdvYPJFeznHDsuSBeyP
eyrLH8ZVddZl5AlXmItN/D3FbCbh9C4Xhumd2QoA4UCpAophPUkjZ1vWcWe+CRQX
5u7PdGrMSEEceCorGfR0wmbUTh7EZXNVnJUuG4NrbvKfg43VAifrbaTbpsv1l6+/
x69yndYfwMYI7w==
-----END CERTIFICATE-----