Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File:                     1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier:          5JkjxPqKMhvrgY1HqyGu7cCkFJqnLl4i560dAK6htno=
Subject key identifier:   CC:CA:C8:A6:12:3A:D7:98:9E:46:02:4F:F4:33:7C:67:D7:EB:57:CA
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       01962F06A55AA04B4EC8594269BA338E96D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: lUk6elaGEIygStyW8hVBzB8C1vXb9PvRLqQG1dUKNxQ=)
                          2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
                          3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
                          4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
                          5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
                          6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
                          7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
                          8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:5a:a0:4b:4e:c8:59:42:69:ba:33:8e:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=cccac8a6123ad7989e46024ff4337c67d7eb57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:b3:48:c7:0e:bc:af:1d:b1:a5:24:96:5e:
                    aa:b2:4a:db:dc:83:d1:55:05:01:34:40:05:3e:5c:
                    d2:4d:3f:df:91:63:15:1b:f4:13:33:21:6f:05:b9:
                    4c:6e:3c:7e:20:b4:84:1b:67:cc:e7:0a:23:66:2f:
                    53:f6:9a:a3:1c:4f:81:08:98:8c:00:5b:b3:2c:f2:
                    d4:90:b9:fe:f2:cf:a4:c6:3a:66:b7:c2:19:a3:c0:
                    ed:8b:59:d9:44:b6:11:4c:2f:60:e9:9f:75:80:c0:
                    23:6c:1f:31:3c:f1:60:d3:74:93:5f:30:67:38:b6:
                    27:e9:2e:3e:b2:a3:dc:50:38:dd:27:03:c9:ed:be:
                    82:4c:e0:a0:1d:80:a5:04:b8:d6:69:a0:52:a3:27:
                    d7:06:f0:2c:e9:ad:c4:52:b4:c0:7e:3a:6d:8a:eb:
                    bf:51:e4:a9:02:f6:d2:8a:f5:22:73:d3:0b:ef:38:
                    85:fa:5a:05:6f:17:fd:99:fa:d4:ca:88:be:b1:fe:
                    26:5b:b3:20:0a:23:a1:ba:b9:93:12:1e:d8:77:b1:
                    7f:1e:15:8f:e9:5c:98:b8:ba:b4:48:12:d7:03:a0:
                    e6:d1:30:d4:4f:67:c9:0e:26:e7:29:8c:77:06:c6:
                    b5:02:f3:52:8c:20:fc:af:4f:b0:5c:0a:b5:7d:1d:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CA:C8:A6:12:3A:D7:98:9E:46:02:4F:F4:33:7C:67:D7:EB:57:CA
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:93:67:40:d5:0f:c5:d2:51:0c:cd:00:1b:3e:1d:9e:e7:
         7d:10:d7:d2:10:e7:29:85:90:01:47:b8:f7:8e:06:40:46:1e:
         d9:dc:89:77:2d:55:e2:1b:fb:c3:e4:68:00:f3:6c:34:f7:ef:
         66:c6:24:3b:b1:36:c3:3b:fb:61:8c:a3:f0:ed:1c:0e:91:b6:
         a6:4c:4d:35:86:fa:62:a8:c2:af:44:49:e6:07:4e:7a:19:9f:
         33:2c:1b:e9:e6:c2:68:24:85:67:03:39:87:60:e4:c2:1e:0f:
         d2:cf:9e:4a:a9:fd:8d:07:63:74:b0:14:02:42:6e:31:41:13:
         fd:6b:c6:0a:93:e3:96:0e:35:33:ef:b5:6a:b6:dd:e2:b5:6b:
         bf:a3:9d:3a:7f:6a:5b:fe:4e:21:e8:7a:d5:4b:fb:e1:6e:02:
         6f:8f:e3:c4:7b:c1:80:e3:a3:b0:de:6f:1f:1f:94:c4:80:e6:
         62:9a:cb:92:9c:20:eb:ee:00:0c:0a:6a:1f:a0:af:70:e0:7e:
         bf:be:97:8d:fd:3e:2f:40:22:6c:35:66:05:25:18:66:b5:cb:
         a4:d4:ea:5e:c5:a0:21:92:6b:36:6a:bb:2a:44:0c:45:96:f2:
         39:dd:01:9e:70:8d:db:8a:a7:8b:5e:79:6d:50:06:53:28:d7:
         42:2f:9a:47
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvBqVaoEtOyFlCabozjpbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjUwNDEzMTIwMTI2WhcNMjUwNDE0MTIwMTI2WjAzMTEwLwYDVQQD
EyhjY2NhYzhhNjEyM2FkNzk4OWU0NjAyNGZmNDMzN2M2N2Q3ZWI1N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkqzSMcOvK8dsaUkll6qskrb3IPR
VQUBNEAFPlzSTT/fkWMVG/QTMyFvBblMbjx+ILSEG2fM5wojZi9T9pqjHE+BCJiM
AFuzLPLUkLn+8s+kxjpmt8IZo8Dti1nZRLYRTC9g6Z91gMAjbB8xPPFg03STXzBn
OLYn6S4+sqPcUDjdJwPJ7b6CTOCgHYClBLjWaaBSoyfXBvAs6a3EUrTAfjptiuu/
UeSpAvbSivUic9ML7ziF+loFbxf9mfrUyoi+sf4mW7MgCiOhurmTEh7Yd7F/HhWP
6VyYuLq0SBLXA6Dm0TDUT2fJDibnKYx3Bsa1AvNSjCD8r0+wXAq1fR3hWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMzKyKYSOteYnkYCT/QzfGfX61fKMB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc3L2Y0MDQ4Ni0yY2Q5LTQ3NWItYmJlMS0xNmNkOGY0ZmI0
YjkvMS8xLVBHZUlreHotRHhQM1JsdEJtQ0s2enFJR0FRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG02T
Z0DVD8XSUQzNABs+HZ7nfRDX0hDnKYWQAUe4944GQEYe2dyJdy1V4hv7w+RoAPNs
NPfvZsYkO7E2wzv7YYyj8O0cDpG2pkxNNYb6YqjCr0RJ5gdOehmfMywb6ebCaCSF
ZwM5h2Dkwh4P0s+eSqn9jQdjdLAUAkJuMUET/WvGCpPjlg41M++1arbd4rVrv6Od
On9qW/5OIeh61Uv74W4Cb4/jxHvBgOOjsN5vHx+UxIDmYprLkpwg6+4ADApqH6Cv
cOB+v76Xjf0+L0AibDVmBSUYZrXLpNTqXsWgIZJrNmq7KkQMRZbyOd0BnnCN24qn
i155bVAGUyjXQi+aRw==
-----END CERTIFICATE-----