Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
File:                     CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json)
Hash identifier:          ommzKCyHwz1dBPI33EDF9aP0LhfWvgkIpgzi3T8SPtQ=
Subject key identifier:   A2:BD:9D:68:2F:51:29:83:61:08:39:1B:AB:CF:70:53:94:EE:E7:D6
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Certificate issuer:       /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial:       01962ECF86601C17D9CA663C8E942BAFD176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
Manifest number:          084B
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=)
                          2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=)
                          3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: 65XelJQGnYI4JsY9ACx0imhhtm8CyNNf0OuQ+5DFdDg=)
                          4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=)
                          5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=)
                          6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=)
                          7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=)
                          8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=)
                          9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=)
                          10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=)
                          11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=)
                          12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=)
                          13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=)
                          14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:60:1c:17:d9:ca:66:3c:8e:94:2b:af:d1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=a2bd9d682f5129836108391babcf705394eee7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:70:a6:52:f8:74:25:64:b5:ec:7c:3b:f6:
                    a1:aa:91:9e:89:80:31:98:6d:6b:5b:a5:a6:b8:9f:
                    55:3c:ef:80:ef:70:35:8b:07:38:34:ba:3e:ad:29:
                    cb:86:d9:17:cd:f5:ed:7e:21:73:99:85:96:32:f1:
                    56:27:2f:15:d0:31:38:37:8e:1c:92:39:77:0d:f8:
                    9c:47:8c:dc:e6:57:ee:df:15:29:c7:f6:d1:0d:0e:
                    5d:17:59:a5:eb:20:0e:e6:26:b3:f3:83:2f:22:ad:
                    8b:51:16:6d:78:1e:ad:cb:9b:6b:81:61:4c:77:31:
                    fc:44:ff:a5:65:39:87:ef:5a:5e:e2:74:3d:92:a6:
                    21:4f:fa:23:be:2a:1a:8b:3a:bf:58:7c:d0:f4:c0:
                    5f:2e:b5:77:18:13:09:80:33:c4:55:8d:91:d0:03:
                    68:b2:c6:0f:f7:16:e2:4c:b3:94:3f:fd:63:92:a5:
                    a8:e2:2a:5d:f0:21:de:cb:44:e1:1b:fc:c8:d5:ab:
                    6b:a9:18:5a:99:bb:87:0e:01:e9:55:9e:2c:8a:b5:
                    86:50:17:5c:d1:a5:81:cf:bd:d5:70:9e:e7:f9:34:
                    95:ff:ee:31:30:a5:b3:81:96:03:bb:c9:01:ae:3f:
                    d9:6a:67:dd:85:f3:e7:ec:f2:47:bb:38:4c:18:27:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BD:9D:68:2F:51:29:83:61:08:39:1B:AB:CF:70:53:94:EE:E7:D6
            X509v3 Authority Key Identifier:
                keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:c6:3c:f3:42:1d:cb:03:f3:26:57:6b:bd:d8:5f:00:32:
         4e:95:8a:70:52:a8:44:5a:e5:00:47:ae:d8:da:e9:bd:6b:6c:
         d1:4d:b8:a6:c5:a7:71:34:d9:1d:c0:9c:8b:57:8c:b9:07:eb:
         aa:6c:bb:3b:cf:86:18:fb:21:f9:a7:ec:23:17:3f:33:db:11:
         21:90:67:29:4c:d6:33:17:65:7c:0a:ab:e5:55:f7:8d:72:10:
         8e:7a:5f:24:dd:5f:fd:f5:69:8a:47:5d:e7:8e:c6:4e:d8:95:
         ae:19:d6:e4:5b:4d:90:0c:9a:83:68:74:d8:fb:7d:c8:61:b4:
         0a:5f:05:4e:f3:95:a4:62:79:8d:1f:c9:98:64:01:9d:93:df:
         28:56:9a:66:a7:55:00:e0:53:63:ca:7a:c6:a7:c4:cc:97:0c:
         af:49:62:3f:1e:cd:b9:ff:15:6d:4a:7a:22:b8:e2:65:69:4d:
         3f:7e:a0:6f:33:da:aa:ac:1a:d9:1e:15:58:de:6f:c0:94:62:
         2b:14:4a:4d:ac:9a:b0:c5:0e:cf:77:4d:50:33:4f:f7:b9:d9:
         ad:b4:fd:af:8c:31:84:87:4e:5b:fc:fd:42:33:8e:f3:be:8f:
         f3:b7:0e:fa:07:ec:af:d1:a2:7c:45:ac:29:3d:47:c5:c3:7a:
         6a:e6:15:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4ZgHBfZymY8jpQrr9F2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk
MjU0YjcwHhcNMjUwNDEzMTEwMTE0WhcNMjUwNDE0MTEwMTE0WjAzMTEwLwYDVQQD
EyhhMmJkOWQ2ODJmNTEyOTgzNjEwODM5MWJhYmNmNzA1Mzk0ZWVlN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40NwplL4dCVktex8O/ahqpGeiYAx
mG1rW6WmuJ9VPO+A73A1iwc4NLo+rSnLhtkXzfXtfiFzmYWWMvFWJy8V0DE4N44c
kjl3DficR4zc5lfu3xUpx/bRDQ5dF1ml6yAO5iaz84MvIq2LURZteB6ty5trgWFM
dzH8RP+lZTmH71pe4nQ9kqYhT/ojvioaizq/WHzQ9MBfLrV3GBMJgDPEVY2R0ANo
ssYP9xbiTLOUP/1jkqWo4ipd8CHey0ThG/zI1atrqRhambuHDgHpVZ4sirWGUBdc
0aWBz73VcJ7n+TSV/+4xMKWzgZYDu8kBrj/ZamfdhfPn7PJHuzhMGCc+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK9nWgvUSmDYQg5G6vPcFOU7ufWMB8GA1UdIwQY
MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt
YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx
LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG77GPPNC
HcsD8yZXa73YXwAyTpWKcFKoRFrlAEeu2NrpvWts0U24psWncTTZHcCci1eMuQfr
qmy7O8+GGPsh+afsIxc/M9sRIZBnKUzWMxdlfAqr5VX3jXIQjnpfJN1f/fVpikdd
547GTtiVrhnW5FtNkAyag2h02Pt9yGG0Cl8FTvOVpGJ5jR/JmGQBnZPfKFaaZqdV
AOBTY8p6xqfEzJcMr0liPx7Nuf8VbUp6IrjiZWlNP36gbzPaqqwa2R4VWN5vwJRi
KxRKTayasMUOz3dNUDNP97nZrbT9r4wxhIdOW/z9QjOO876P87cO+gfsr9GifEWs
KT1HxcN6auYVug==
-----END CERTIFICATE-----