Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File:                     XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier:          Id/rdKoNME0AvIF8p0sl1FXv4Qn0x0L2TbkuW4wCH2U=
Subject key identifier:   5F:AD:63:FB:E7:7B:A6:79:46:39:30:40:40:CE:5F:AE:EE:36:8B:28
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer:       /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial:       01962F3D6016DF1BDE67644C627684882100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number:          09D3
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
                          2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
                          3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: KssgFSR0AqiIt2kw4QEmDPoZX9H+wDa1XOOJpwBHbAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:16:df:1b:de:67:64:4c:62:76:84:88:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=5fad63fbe77ba6794639304040ce5faeee368b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:c5:f2:bc:26:e3:c3:67:9b:a2:5b:79:00:
                    21:38:b5:15:f1:18:b5:46:dd:88:c1:1f:b5:58:c1:
                    ff:f5:f5:16:c3:b0:11:21:7b:5e:a7:ee:80:d0:f1:
                    1e:01:e2:cc:a9:9a:9b:93:9e:24:fc:53:20:bf:36:
                    0f:fc:ad:58:9a:ec:5b:07:40:20:1f:08:6b:89:73:
                    de:ec:11:64:5c:ab:68:ac:0c:91:a9:05:bb:1e:54:
                    f5:91:28:4d:42:27:ac:b1:6d:db:d9:12:a7:4c:ce:
                    76:cc:24:8a:4d:86:98:90:e8:0c:5a:a2:88:34:87:
                    67:32:e4:ea:06:ea:e9:dd:0f:ce:5b:95:b9:09:f3:
                    00:dd:c0:5a:f1:8e:53:38:9f:0e:e0:53:72:3e:d1:
                    53:23:56:e4:52:04:20:8d:12:73:9c:08:6a:91:d9:
                    d9:13:54:68:17:3c:af:cc:e8:6f:52:e4:e9:49:05:
                    34:04:d5:ca:d4:f7:78:f6:8f:20:e8:0a:ac:25:41:
                    32:b5:37:29:f7:7e:bc:44:48:44:c4:55:40:cc:62:
                    77:88:e5:98:89:80:53:9f:85:cb:f6:b5:0d:9c:10:
                    ab:ab:3b:92:2c:fb:40:62:8d:ce:34:b5:df:6c:d4:
                    b0:8c:eb:d2:c8:49:00:08:ee:d6:3a:11:a4:29:da:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AD:63:FB:E7:7B:A6:79:46:39:30:40:40:CE:5F:AE:EE:36:8B:28
            X509v3 Authority Key Identifier:
                keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:93:ec:03:ef:b9:a7:4a:eb:6c:72:6e:f1:5c:23:7c:ec:09:
         8a:e3:8a:04:d7:fd:1a:16:23:a5:73:6c:44:76:6f:9a:fa:34:
         d2:80:bf:1b:d3:43:56:b2:ae:20:eb:a8:56:29:db:c9:3b:67:
         c6:8d:57:b2:1a:0f:3c:5f:6f:29:31:a8:db:00:fb:85:57:1a:
         8b:e8:c2:4a:36:8e:e3:09:c3:d7:22:40:a0:c7:fa:c6:46:e1:
         32:67:a1:83:82:20:4e:88:9d:04:8a:0a:90:fd:54:06:ed:2b:
         18:57:85:c9:9d:70:64:43:52:48:85:7e:da:17:da:04:14:43:
         c9:a0:cf:2c:5e:dc:22:76:63:7e:7f:d2:75:bb:01:f1:8e:a9:
         a2:6b:89:00:74:1d:48:3b:71:8f:c0:f0:4e:a6:27:bc:d9:3c:
         00:05:d0:a3:0a:42:d2:d8:47:a3:ea:29:0d:87:b7:c9:de:c5:
         d0:ec:ee:17:c3:a5:d0:7e:db:34:14:74:4b:ad:21:41:ca:c7:
         33:cc:c6:57:88:8f:4a:06:dc:43:f0:e3:77:da:50:51:49:14:
         e1:18:37:89:94:e5:70:de:1d:eb:23:4f:49:9e:7e:55:22:fb:
         af:4c:82:ba:09:a1:2d:b0:dc:33:f2:12:82:8a:aa:35:3e:8d:
         9a:4a:cb:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWAW3xveZ2RMYnaEiCEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg1ZmFkNjNmYmU3N2JhNjc5NDYzOTMwNDA0MGNlNWZhZWVlMzY4YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudbF8rwm48Nnm6JbeQAhOLUV8Ri1
Rt2IwR+1WMH/9fUWw7ARIXtep+6A0PEeAeLMqZqbk54k/FMgvzYP/K1YmuxbB0Ag
HwhriXPe7BFkXKtorAyRqQW7HlT1kShNQiessW3b2RKnTM52zCSKTYaYkOgMWqKI
NIdnMuTqBurp3Q/OW5W5CfMA3cBa8Y5TOJ8O4FNyPtFTI1bkUgQgjRJznAhqkdnZ
E1RoFzyvzOhvUuTpSQU0BNXK1Pd49o8g6AqsJUEytTcp9368REhExFVAzGJ3iOWY
iYBTn4XL9rUNnBCrqzuSLPtAYo3ONLXfbNSwjOvSyEkACO7WOhGkKdrafwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+tY/vne6Z5RjkwQEDOX67uNosoMB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJPsA++5
p0rrbHJu8VwjfOwJiuOKBNf9GhYjpXNsRHZvmvo00oC/G9NDVrKuIOuoVinbyTtn
xo1XshoPPF9vKTGo2wD7hVcai+jCSjaO4wnD1yJAoMf6xkbhMmehg4IgToidBIoK
kP1UBu0rGFeFyZ1wZENSSIV+2hfaBBRDyaDPLF7cInZjfn/SdbsB8Y6pomuJAHQd
SDtxj8DwTqYnvNk8AAXQowpC0thHo+opDYe3yd7F0OzuF8Ol0H7bNBR0S60hQcrH
M8zGV4iPSgbcQ/Djd9pQUUkU4Rg3iZTlcN4d6yNPSZ5+VSL7r0yCugmhLbDcM/IS
goqqNT6NmkrL/Q==
-----END CERTIFICATE-----