Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          pdI8AI99vxlKU1w9vzkq7d4/ORAQU+WHtk5fkdmqkYA=
Subject key identifier:   2C:4F:11:5A:75:31:DA:9C:33:28:25:92:49:9B:21:AC:E9:DF:5B:B7
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       01962DF3C7C7F4CA943DDDF9E781C4168C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          137E
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: sc43ZOfybP5ttIJZzQk8WMSefAtTNypi3XXYkId9R6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c7:c7:f4:ca:94:3d:dd:f9:e7:81:c4:16:8c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=2c4f115a7531da9c33282592499b21ace9df5bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:c0:cb:74:f8:7d:0f:c9:87:74:b4:d0:b7:
                    51:67:4e:02:99:bb:cc:4c:24:a8:d0:32:8d:c3:ae:
                    28:5e:56:59:24:64:f0:7a:1e:92:5d:91:8b:18:5b:
                    fb:39:3a:fb:57:bb:c1:c3:c6:d4:44:7c:aa:79:16:
                    b6:dc:71:c6:e4:65:69:3a:ec:e2:47:b6:c6:58:0b:
                    0c:ec:b8:16:d9:d9:77:6a:94:ee:b6:c5:d5:6f:5c:
                    f3:a6:22:55:d5:d4:f8:2f:c6:50:99:5f:c7:0f:b5:
                    4f:11:3d:a4:17:ba:69:c9:0e:c9:fb:83:10:53:b1:
                    ff:95:4b:30:c9:f8:d6:49:67:f5:16:82:1b:55:c4:
                    2e:e4:9b:28:4d:89:9f:e6:fe:64:97:2e:0f:cb:c5:
                    cc:ae:c4:04:f8:0d:a6:e6:a9:21:8d:19:72:c0:e1:
                    09:fc:96:f3:93:13:21:9c:de:79:91:00:89:f9:63:
                    66:60:f2:92:8f:2e:ed:c5:fa:a0:a5:bc:c9:58:59:
                    6b:e5:6e:81:98:06:58:a8:8f:a5:19:11:f2:dc:e5:
                    ba:14:64:74:ca:06:eb:23:74:c9:f6:a3:33:47:82:
                    b2:90:77:10:dc:76:45:c8:7e:e1:a1:2f:e8:c2:2e:
                    f4:28:d2:d2:62:fb:9c:c1:fd:44:29:0e:d6:33:af:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4F:11:5A:75:31:DA:9C:33:28:25:92:49:9B:21:AC:E9:DF:5B:B7
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:86:f9:ac:57:a7:eb:2d:81:81:72:43:66:c0:83:f3:8b:bd:
         28:af:69:a1:6c:05:e5:af:2d:70:75:7c:30:0a:6a:a5:6f:47:
         5c:68:60:28:a6:96:98:41:f2:dd:0c:97:29:43:bf:c8:cf:50:
         ba:10:d6:35:75:e4:d6:5f:2f:cc:a8:0c:68:a0:fc:ac:7f:9b:
         93:a8:1c:72:f0:9a:1a:29:35:12:0f:32:fa:46:3b:16:dd:5a:
         ca:f0:d7:c0:ae:0f:76:7a:0b:33:a6:e2:05:1d:1b:63:d7:3b:
         b6:9b:ef:8a:fe:ee:cc:90:64:c6:02:d9:2f:ff:39:30:a5:f4:
         82:35:b8:fc:ed:74:31:68:82:94:17:7b:1f:54:ed:de:2e:be:
         9f:09:a1:74:91:43:a9:fe:1e:f6:0d:32:27:0e:80:1d:56:ba:
         f1:8f:42:ee:83:4f:5f:0b:60:b2:2a:8e:15:1a:f6:8a:bc:c8:
         55:39:7b:3c:de:01:55:35:92:5d:19:66:40:58:b1:ec:97:f0:
         82:80:9a:27:7d:b6:bb:67:59:55:7f:9e:b3:37:ba:7f:fc:67:
         64:f8:75:a6:e9:cf:29:eb:2d:c3:1b:d0:f8:e5:df:83:35:67:
         f8:8b:db:ba:1e:5a:6d:89:d4:0d:03:1f:cf:2c:ad:52:73:31:
         f3:57:3c:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88fH9MqUPd3554HEFowdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWZmZmY1MDMzYTc5MDFhM2U5ZjI3NWY2ZGM2ZThlYTBm
OTNiOGEwHhcNMjUwNDEzMDcwMTEzWhcNMjUwNDE0MDcwMTEzWjAzMTEwLwYDVQQD
EygyYzRmMTE1YTc1MzFkYTljMzMyODI1OTI0OTliMjFhY2U5ZGY1YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxHAy3T4fQ/Jh3S00LdRZ04CmbvM
TCSo0DKNw64oXlZZJGTweh6SXZGLGFv7OTr7V7vBw8bURHyqeRa23HHG5GVpOuzi
R7bGWAsM7LgW2dl3apTutsXVb1zzpiJV1dT4L8ZQmV/HD7VPET2kF7ppyQ7J+4MQ
U7H/lUswyfjWSWf1FoIbVcQu5JsoTYmf5v5kly4Py8XMrsQE+A2m5qkhjRlywOEJ
/JbzkxMhnN55kQCJ+WNmYPKSjy7txfqgpbzJWFlr5W6BmAZYqI+lGRHy3OW6FGR0
ygbrI3TJ9qMzR4KykHcQ3HZFyH7hoS/owi70KNLSYvucwf1EKQ7WM6/GJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxPEVp1MdqcMyglkkmbIazp31u3MB8GA1UdIwQY
MBaAFDIf//UDOnkBo+nydfbcbo6g+TuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQt
ZDFlMzBhNWNhYzg4LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQtZDFlMzBhNWNhYzg4
LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4b5rFen
6y2BgXJDZsCD84u9KK9poWwF5a8tcHV8MApqpW9HXGhgKKaWmEHy3QyXKUO/yM9Q
uhDWNXXk1l8vzKgMaKD8rH+bk6gccvCaGik1Eg8y+kY7Ft1ayvDXwK4PdnoLM6bi
BR0bY9c7tpvviv7uzJBkxgLZL/85MKX0gjW4/O10MWiClBd7H1Tt3i6+nwmhdJFD
qf4e9g0yJw6AHVa68Y9C7oNPXwtgsiqOFRr2irzIVTl7PN4BVTWSXRlmQFix7Jfw
goCaJ322u2dZVX+esze6f/xnZPh1punPKestwxvQ+OXfgzVn+Ivbuh5abYnUDQMf
zyytUnMx81c8Ng==
-----END CERTIFICATE-----