Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          dSej1Lk9GeXew74kcNpcZKDZi8bDq0/hwRCTeQhWUxs=
Subject key identifier:   41:F3:47:9A:0C:01:F6:C1:93:9D:75:91:46:38:AB:A7:E5:F7:2F:DF
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       01962E99BD3F0070D2D8CF45B78545F87239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          144A
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: DCNKSj1_5YHNKhsqvaqolZH_B60.roa (hash: TXy+j47cDCmczgpA/MrIE9kmjblkjLGkgY8O20y42aY=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: jU8HNK9P8iFazTLQZUX2ZX9YY0uPXCPKFz/FTmhzv78=)
                          3: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (hash: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=)
                          4: O-lMv2utgSL0sF15RsiGk9rGqhU.roa (hash: 4uJaHT6rWS3qzpOxWgNId7Ke0ps1U1qLVv6t8Kfw/Vs=)
                          5: gJdvURE1CiuF2RTlrllA5EaJUA0.roa (hash: QQc8DdjtzLaI++nEpaA6R37pPd4UQFAmh/VqOKkxVE0=)
                          6: sPgmpLyF_PKafpXcgtR7FvsC9bY.roa (hash: sMp8sjJ9YjMshoV/D5bSKKVpPxzHt4F0frkmzXOCA3k=)
                          7: vWaOyyAnVx7B4tIZA5kY-cS2BzI.roa (hash: eaazpxj2ANXN1fDw5hHKWOdZyal6Udm1AqCua9Ig+GU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bd:3f:00:70:d2:d8:cf:45:b7:85:45:f8:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=41f3479a0c01f6c1939d75914638aba7e5f72fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:8c:d5:ef:ce:89:6a:6e:48:05:f1:ad:a4:
                    51:79:80:09:5c:a8:07:c5:88:b7:ec:7d:f3:60:0b:
                    ce:3c:78:06:f9:5d:97:86:ab:ce:35:aa:38:ed:75:
                    f9:13:8c:56:a3:f7:5e:bd:de:f8:b1:2c:fa:ba:33:
                    c8:de:44:79:87:88:34:a7:b0:04:42:5c:ed:b1:2f:
                    5f:c3:8c:73:c9:0d:22:a1:e5:e7:78:94:82:d8:ad:
                    63:76:d7:a5:a1:4e:fb:e1:44:76:7d:b5:b4:d1:7d:
                    b4:23:88:ab:8b:8b:76:2f:48:49:8e:9c:a0:db:81:
                    bb:57:14:50:a7:fb:e9:9c:da:b7:19:c3:65:72:31:
                    02:50:ae:a3:45:f1:63:7b:09:f9:b3:c9:d7:06:bb:
                    fa:32:b5:7d:11:88:91:7f:7d:2f:1a:73:ef:e7:90:
                    21:b2:34:bc:09:cd:66:30:7c:de:9a:03:20:bb:b3:
                    9f:3d:29:cb:5d:a1:54:27:41:86:7b:31:40:b5:cf:
                    35:88:58:da:d2:a7:30:ab:71:24:96:a3:69:ae:11:
                    b9:ce:87:78:75:50:25:64:05:f2:04:29:1f:b3:4f:
                    69:c1:6e:e1:e1:62:05:82:23:a0:ae:30:3b:cc:27:
                    09:25:25:1b:7e:9a:02:81:90:8e:af:30:7e:cd:d4:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F3:47:9A:0C:01:F6:C1:93:9D:75:91:46:38:AB:A7:E5:F7:2F:DF
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e5:3a:ec:90:aa:49:e3:a9:4a:04:15:22:19:e0:ca:3c:92:
         8d:69:76:24:25:a6:fa:f2:cf:ac:15:ec:ec:2d:e8:f6:5f:91:
         32:94:8b:1d:df:62:9a:9e:25:aa:11:ca:f2:ef:61:93:9d:9a:
         cb:09:38:db:e1:34:73:7d:b7:aa:24:0c:e5:81:e2:6b:25:9d:
         9b:fc:ca:ed:04:17:f6:df:dd:6c:14:c2:de:4b:82:68:8e:7d:
         eb:10:69:09:f6:3a:f2:b1:d6:b2:01:58:16:28:ef:e4:f6:a3:
         da:cb:b2:1c:58:36:57:72:5d:34:ae:1e:af:fa:21:f6:72:47:
         c0:e1:0f:f0:43:2d:31:10:4e:3c:45:73:11:d6:72:84:93:ab:
         02:c2:72:ab:53:0c:6b:89:0c:0b:ec:00:a3:9d:29:7d:10:7f:
         9e:9f:7d:4d:78:ce:8e:da:04:3e:70:5c:77:a8:28:a2:7e:bd:
         47:89:78:b7:59:f4:6d:f6:fb:e2:15:61:27:6a:f2:92:ce:93:
         e1:f9:be:6c:99:ec:a1:60:97:57:b4:0d:fe:e8:27:8a:a7:81:
         6b:16:5c:1b:a1:fc:a6:9a:da:6e:c3:69:a9:01:46:53:0a:91:
         2a:ab:f7:36:d7:34:33:0e:4e:6f:5d:29:15:63:d1:c5:44:ba:
         ef:fa:19:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumb0/AHDS2M9Ft4VF+HI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz
NTc1MzUwHhcNMjUwNDEzMTAwMjI5WhcNMjUwNDE0MTAwMjI5WjAzMTEwLwYDVQQD
Eyg0MWYzNDc5YTBjMDFmNmMxOTM5ZDc1OTE0NjM4YWJhN2U1ZjcyZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu+M1e/OiWpuSAXxraRReYAJXKgH
xYi37H3zYAvOPHgG+V2XhqvONao47XX5E4xWo/devd74sSz6ujPI3kR5h4g0p7AE
QlztsS9fw4xzyQ0ioeXneJSC2K1jdteloU774UR2fbW00X20I4iri4t2L0hJjpyg
24G7VxRQp/vpnNq3GcNlcjECUK6jRfFjewn5s8nXBrv6MrV9EYiRf30vGnPv55Ah
sjS8Cc1mMHzemgMgu7OfPSnLXaFUJ0GGezFAtc81iFja0qcwq3EklqNprhG5zod4
dVAlZAXyBCkfs09pwW7h4WIFgiOgrjA7zCcJJSUbfpoCgZCOrzB+zdSiowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHzR5oMAfbBk511kUY4q6fl9y/fMB8GA1UdIwQY
MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt
YjcyMzE5NDFmYzNhLzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh
LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreU67JCq
SeOpSgQVIhngyjySjWl2JCWm+vLPrBXs7C3o9l+RMpSLHd9imp4lqhHK8u9hk52a
ywk42+E0c323qiQM5YHiayWdm/zK7QQX9t/dbBTC3kuCaI596xBpCfY68rHWsgFY
Fijv5Paj2suyHFg2V3JdNK4er/oh9nJHwOEP8EMtMRBOPEVzEdZyhJOrAsJyq1MM
a4kMC+wAo50pfRB/np99TXjOjtoEPnBcd6goon69R4l4t1n0bfb74hVhJ2ryks6T
4fm+bJnsoWCXV7QN/ugniqeBaxZcG6H8pprabsNpqQFGUwqRKqv3Ntc0Mw5Ob10p
FWPRxUS67/oZbw==
-----END CERTIFICATE-----