Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File:                     iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier:          qxnlu02xBzBmZIwd0Z+tNlsNzeGsr4wO0kCvVEivCOQ=
Subject key identifier:   E3:32:9A:42:C8:C3:39:D1:57:37:51:6E:51:29:1A:AA:A5:F6:74:DE
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       01962F06618C2B5C88F5EDF4172E1547A1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
                          2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: V+OcL3jSQOsyAa3UKwZFNwnPhfjhEBQcP83beH3ft7Y=)
                          3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
                          4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
                          5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:61:8c:2b:5c:88:f5:ed:f4:17:2e:15:47:a1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=e3329a42c8c339d15737516e51291aaaa5f674de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:f4:8b:6e:41:59:c0:bd:ba:a5:09:7e:b5:
                    90:d7:c2:25:a8:56:a4:e3:8e:0a:b9:74:63:53:ed:
                    8b:a1:b3:87:f5:04:75:65:56:f4:2a:c3:68:83:f3:
                    b6:5d:aa:cf:3c:95:c8:a7:ac:7e:67:44:94:de:09:
                    16:81:81:e1:e1:83:37:e4:81:e9:da:1d:bc:23:84:
                    8b:b9:50:7a:c4:3a:c1:27:b7:69:ac:40:d0:92:6b:
                    fd:6f:23:63:9d:93:54:4a:42:cb:72:66:fe:35:bf:
                    f7:8a:01:0b:7e:23:4c:53:24:ad:3c:5d:3c:0a:ad:
                    7f:e3:28:2e:2e:e5:6c:4c:05:3b:6e:24:35:04:68:
                    a1:bc:d4:e3:e5:0d:33:3d:ca:c3:9a:9a:be:1a:92:
                    58:02:4e:65:b5:37:3c:d6:56:6f:9a:83:b4:08:c7:
                    46:9a:32:55:1d:d7:0b:5e:8c:e3:63:60:a0:d1:9b:
                    fe:66:a9:f4:61:76:1c:1b:03:3c:93:87:28:b6:63:
                    30:a9:e1:07:a0:a8:e6:8c:c8:6a:6c:98:51:a2:33:
                    bc:f1:9d:69:ee:bd:05:1e:c6:7d:6c:72:94:b8:d2:
                    9a:20:1d:dc:f1:21:73:bc:12:f6:a3:61:74:92:dd:
                    b3:74:c9:3f:f9:4d:29:2f:f0:48:c3:0c:6d:d2:bd:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:32:9A:42:C8:C3:39:D1:57:37:51:6E:51:29:1A:AA:A5:F6:74:DE
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:f7:af:24:5a:ee:dc:e0:bf:5b:5b:90:70:b5:91:04:e5:
         68:9d:7f:12:6b:c7:23:7b:b0:70:3e:59:8c:ad:6e:31:0c:46:
         2b:db:2c:40:71:16:e5:4e:9b:42:0e:ed:c6:f3:75:6b:c3:12:
         09:f5:05:3d:27:44:7c:fd:e2:f1:7a:a5:37:aa:15:4b:74:f8:
         10:b9:40:73:18:b0:82:14:f0:48:ea:a5:4a:cc:af:13:4e:a3:
         8e:3a:ba:98:8f:ec:10:c5:e5:72:d9:cb:4c:ae:bc:c3:31:db:
         89:fd:ad:d5:68:05:84:2d:88:c3:c3:aa:fb:df:00:56:b9:ab:
         eb:2f:cc:5f:92:31:28:2b:ef:7b:ea:96:be:d9:af:05:cc:c3:
         95:3a:8a:1f:9b:db:9f:53:59:e7:ea:b0:29:36:fe:ac:f7:fe:
         43:b8:58:ee:3c:dc:3c:ae:39:e2:8d:bf:44:3e:dc:7a:20:99:
         96:33:f8:a6:2f:25:b8:f6:fe:66:be:e1:44:a2:56:8d:26:fc:
         88:95:3b:6f:d7:74:b6:a7:a1:ec:fc:e8:5a:81:0b:cf:48:58:
         53:e9:d6:44:e5:bc:e8:6f:5b:28:94:5e:6c:dc:f2:42:3f:3b:
         9b:05:4d:9a:78:03:dc:6f:e5:c5:a2:63:b0:35:09:72:0f:95:
         a7:f9:a8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmGMK1yI9e30Fy4VR6HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh
ZTA4N2MwHhcNMjUwNDEzMTIwMTA5WhcNMjUwNDE0MTIwMTA5WjAzMTEwLwYDVQQD
EyhlMzMyOWE0MmM4YzMzOWQxNTczNzUxNmU1MTI5MWFhYWE1ZjY3NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDX0i25BWcC9uqUJfrWQ18IlqFak
444KuXRjU+2LobOH9QR1ZVb0KsNog/O2XarPPJXIp6x+Z0SU3gkWgYHh4YM35IHp
2h28I4SLuVB6xDrBJ7dprEDQkmv9byNjnZNUSkLLcmb+Nb/3igELfiNMUyStPF08
Cq1/4yguLuVsTAU7biQ1BGihvNTj5Q0zPcrDmpq+GpJYAk5ltTc81lZvmoO0CMdG
mjJVHdcLXozjY2Cg0Zv+Zqn0YXYcGwM8k4cotmMwqeEHoKjmjMhqbJhRojO88Z1p
7r0FHsZ9bHKUuNKaIB3c8SFzvBL2o2F0kt2zdMk/+U0pL/BIwwxt0r1woQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMymkLIwznRVzdRblEpGqql9nTeMB8GA1UdIwQY
MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt
ZTAxNjI0MDFmZjdhLzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh
LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr33ryRa
7tzgv1tbkHC1kQTlaJ1/EmvHI3uwcD5ZjK1uMQxGK9ssQHEW5U6bQg7txvN1a8MS
CfUFPSdEfP3i8XqlN6oVS3T4ELlAcxiwghTwSOqlSsyvE06jjjq6mI/sEMXlctnL
TK68wzHbif2t1WgFhC2Iw8Oq+98AVrmr6y/MX5IxKCvve+qWvtmvBczDlTqKH5vb
n1NZ5+qwKTb+rPf+Q7hY7jzcPK454o2/RD7ceiCZljP4pi8luPb+Zr7hRKJWjSb8
iJU7b9d0tqeh7PzoWoELz0hYU+nWROW86G9bKJRebNzyQj87mwVNmngD3G/lxaJj
sDUJcg+Vp/moUQ==
-----END CERTIFICATE-----