Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File:                     sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier:          DHw0qjlzhK4DfhBHFX/Vx4r0mZD4hWlD0VsiguyEztw=
Subject key identifier:   06:F8:0F:0C:AA:1D:53:60:43:99:1F:D2:72:F3:6E:41:4B:55:A1:3D
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer:       /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial:       01962F3D594DA0C45A02B2F7556620DD3D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (hash: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=)
                          2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: wA2E10A4zPCq0ncjQ1ouOJC75vnehQCKYS1XY00vj2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:59:4d:a0:c4:5a:02:b2:f7:55:66:20:dd:3d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=06f80f0caa1d536043991fd272f36e414b55a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:59:c2:ec:66:68:1a:5e:09:4f:ac:95:4b:be:
                    80:8e:82:a7:92:14:8c:71:ec:21:01:bd:c1:6f:ff:
                    14:fc:65:36:ce:2b:1f:6c:71:50:bd:3e:cd:b4:52:
                    3d:7f:1b:b3:fa:3d:93:a8:5c:c7:38:91:f6:ff:ac:
                    9a:b1:02:a6:4b:80:de:a9:77:e3:64:3c:78:97:75:
                    65:5d:97:6b:17:2c:b7:7f:a8:d2:20:0a:f1:3f:78:
                    0d:54:f6:c9:93:6d:2b:3a:78:d9:65:d4:8b:b9:0d:
                    98:87:05:59:a8:97:3b:c9:c2:ea:e0:79:84:9a:e8:
                    92:68:1e:e7:56:95:07:f0:30:15:95:12:35:36:82:
                    ea:60:09:0e:45:5a:91:42:42:e9:71:ed:23:20:c1:
                    db:b3:6d:79:06:79:49:9c:52:2a:55:3a:31:15:03:
                    31:fc:24:0c:68:ca:1b:e9:38:00:8f:72:16:d2:06:
                    a2:3f:62:d9:a2:ca:6a:e6:58:50:94:0d:14:9e:38:
                    a8:f7:38:8f:af:3f:ff:cb:e9:39:6a:2a:86:56:53:
                    c2:0e:eb:c9:2a:f3:3e:45:14:3a:a5:66:f8:e9:f7:
                    e2:2a:d8:cf:62:26:4b:4a:98:ea:13:41:fc:31:cb:
                    c6:21:8b:ad:bd:2b:60:c3:db:df:12:06:65:74:c2:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F8:0F:0C:AA:1D:53:60:43:99:1F:D2:72:F3:6E:41:4B:55:A1:3D
            X509v3 Authority Key Identifier:
                keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9a:46:e9:a2:c1:6f:5b:74:dc:95:3a:78:6f:f4:e6:cc:7c:
         05:fa:a9:b2:7c:0b:9d:08:01:25:c3:0d:a3:28:a6:39:fe:53:
         d2:75:7c:1f:75:45:2e:d4:0c:f4:12:bb:2f:00:ee:98:b8:fe:
         b7:36:fe:c1:e1:07:ac:bd:52:14:75:01:7a:da:21:84:36:70:
         66:23:c3:9a:b6:a8:a1:b1:0a:72:23:b6:3f:af:1a:98:bb:77:
         ae:b8:c3:8d:1b:01:48:f9:f5:bd:fe:77:8a:06:49:98:e5:08:
         06:d1:54:1d:16:67:0f:e7:43:48:90:9f:e6:3d:30:63:52:3d:
         90:28:39:cc:2d:e1:7c:90:51:ee:ce:8b:b4:af:b8:60:54:e4:
         16:1e:e9:a8:4e:c2:89:e1:65:28:de:2e:c0:ee:b1:a5:cd:b9:
         0f:bf:54:0c:7c:85:45:94:66:80:56:e8:00:91:b8:0c:4e:bd:
         53:8f:2d:4e:93:9d:da:af:b0:2f:80:ba:cb:ef:4c:5a:22:eb:
         94:36:b8:ec:53:33:7a:67:a6:69:b3:c5:0a:10:8b:d2:36:76:
         97:8e:a6:e0:08:cd:ab:0e:0a:59:aa:d6:7e:96:cc:af:ec:98:
         1e:76:34:92:58:21:21:e9:8a:41:6f:01:f2:88:b9:03:ab:3d:
         8c:c5:21:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVlNoMRaArL3VWYg3T1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzU4ZTg4YzIwNzAyMTMxYjkxN2E0ZGZkYjIzNzRiYzM2
NTU1ODcwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EygwNmY4MGYwY2FhMWQ1MzYwNDM5OTFmZDI3MmYzNmU0MTRiNTVhMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlnC7GZoGl4JT6yVS76AjoKnkhSM
cewhAb3Bb/8U/GU2zisfbHFQvT7NtFI9fxuz+j2TqFzHOJH2/6yasQKmS4DeqXfj
ZDx4l3VlXZdrFyy3f6jSIArxP3gNVPbJk20rOnjZZdSLuQ2YhwVZqJc7ycLq4HmE
muiSaB7nVpUH8DAVlRI1NoLqYAkORVqRQkLpce0jIMHbs215BnlJnFIqVToxFQMx
/CQMaMob6TgAj3IW0gaiP2LZospq5lhQlA0Unjio9ziPrz//y+k5aiqGVlPCDuvJ
KvM+RRQ6pWb46ffiKtjPYiZLSpjqE0H8McvGIYutvStgw9vfEgZldMIq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb4DwyqHVNgQ5kf0nLzbkFLVaE9MB8GA1UdIwQY
MBaAFLB1jojCBwITG5F6Tf2yN0vDZVWHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2It
NjM4NzNlODg0NDEzLzEvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2ItNjM4NzNlODg0NDEz
LzEvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbppG6aLB
b1t03JU6eG/05sx8BfqpsnwLnQgBJcMNoyimOf5T0nV8H3VFLtQM9BK7LwDumLj+
tzb+weEHrL1SFHUBetohhDZwZiPDmraoobEKciO2P68amLt3rrjDjRsBSPn1vf53
igZJmOUIBtFUHRZnD+dDSJCf5j0wY1I9kCg5zC3hfJBR7s6LtK+4YFTkFh7pqE7C
ieFlKN4uwO6xpc25D79UDHyFRZRmgFboAJG4DE69U48tTpOd2q+wL4C6y+9MWiLr
lDa47FMzememabPFChCL0jZ2l46m4AjNqw4KWarWfpbMr+yYHnY0klghIemKQW8B
8oi5A6s9jMUh4g==
-----END CERTIFICATE-----