Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
File:                     PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json)
Hash identifier:          OZ7PiIa4vpB443NKvzdNQaoiY7BCOuPrllPoAvhiv/0=
Subject key identifier:   B7:FC:43:19:8E:D3:1E:A5:6E:2B:5D:CC:E6:09:55:F1:09:D4:16:BD
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Certificate issuer:       /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial:       01962F071E90E906E2B412A9E1A36AE5AA2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 2YadcCcrthTPeDDHEpW__8Qd9bs.roa (hash: OdnpX4OxWP0430jIZ65+bJ7XNUvVVpsmfscwz1Ws1zM=)
                          2: 5NVHCfMQ6W48yxlWBv3uWNtbJDs.roa (hash: xWoUftWDtv357JcFYDaq4ko62SbPA3ugAxMWTRo1aWY=)
                          3: CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa (hash: oCKOi7GJALUFPXeLK9MWcGccq1tZ9vcEgFN5xNZTkgo=)
                          4: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: DtVFrRcA23QPdZiWn7cPl6hdnY0SzMA4gngjziujg+I=)
                          5: UmpHN1dTZ2hpLcnnZpWS2Jt3BIg.roa (hash: PTvkuklKNLY3Mh0Z7gawtcDt9dMpbGsMOP+ydZCmFBk=)
                          6: puQ4Sk8pHIWfFKAYZzp1IAYEd0Q.roa (hash: tM5HP1N7Kc8KkaIaBlmp8d2jgH4OgbCHpaIgKSubYgE=)
                          7: zijtuBvUTHoACL0vLKqZfOgzwrA.roa (hash: /MUioQ1kaDrTgFZ5Z1TeKDrxhjrVzyNRI36qm2VszV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1e:90:e9:06:e2:b4:12:a9:e1:a3:6a:e5:aa:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=b7fc43198ed31ea56e2b5dcce60955f109d416bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:b7:9d:01:7c:39:82:06:5d:06:fa:ea:6e:
                    41:a2:b9:e1:8d:c1:44:7b:3f:00:63:df:37:13:6b:
                    df:82:c4:8e:e8:c4:d1:2c:61:12:9c:4d:30:b2:8f:
                    3f:cb:00:29:b0:ea:c4:a4:5e:6e:8b:06:a6:7f:5c:
                    b7:8d:2b:40:8a:c4:86:82:24:68:d2:78:6d:54:68:
                    4e:85:86:bd:7b:d2:c9:8a:67:bb:e8:90:bf:55:d8:
                    fd:74:61:87:0a:f1:a2:08:49:4c:60:4e:b9:b7:95:
                    da:3b:9c:54:c4:e3:a5:f3:71:30:b9:01:5f:ee:d1:
                    8d:88:69:90:47:95:a5:69:54:ab:97:63:9f:6e:0f:
                    ba:92:29:f2:21:9b:65:ef:bc:81:24:52:78:66:63:
                    48:82:71:82:35:f8:06:2a:bb:54:40:3a:69:ab:7a:
                    83:ed:d4:a8:69:20:14:0c:29:1c:fe:9e:35:54:e1:
                    ea:b8:70:bd:f7:a2:7a:51:ad:df:bc:4a:2a:28:3b:
                    f5:14:0c:a2:d3:5b:e4:ba:a7:24:3a:f4:6b:2a:32:
                    ee:10:e2:62:95:6a:66:39:be:63:be:08:cb:df:60:
                    e7:aa:a4:da:4e:a0:47:04:57:8f:eb:3a:36:4c:a2:
                    01:c0:45:79:c2:26:dd:a3:5f:4a:7c:5f:dd:31:72:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:43:19:8E:D3:1E:A5:6E:2B:5D:CC:E6:09:55:F1:09:D4:16:BD
            X509v3 Authority Key Identifier:
                keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:0a:b9:84:e5:81:92:89:8d:bb:35:f5:43:8b:d5:69:04:
         56:88:5e:78:79:e8:7a:21:95:05:68:e3:3f:f5:df:8b:99:fc:
         dd:4c:19:fe:73:aa:bc:74:55:32:af:cb:49:20:86:c2:23:7c:
         e8:a5:54:19:ab:fa:00:7c:7c:c0:16:d5:81:62:5e:22:7c:2b:
         88:4f:b8:4d:62:07:08:a2:51:11:70:61:81:8d:08:fd:cb:ae:
         0d:6e:5f:a0:a0:e1:45:da:63:b8:47:c8:b7:d6:86:ca:4d:a8:
         2c:92:58:cc:c1:38:b2:14:b6:09:92:a7:ab:2f:91:5c:d0:ef:
         e8:a5:b4:bc:cb:45:cf:d3:8b:53:b5:09:37:78:0f:cd:d6:70:
         c7:43:39:2d:75:d5:73:d6:74:ff:d6:67:77:ff:10:5c:dc:70:
         00:af:bd:af:15:ff:bd:40:1f:c5:83:29:e4:5b:d6:c1:e2:eb:
         aa:c1:db:47:17:da:a1:d1:c8:7b:65:e4:8e:1c:5c:29:24:94:
         33:c3:f2:a1:4e:ca:13:5c:49:65:97:7a:73:8c:c4:b1:8f:4c:
         0e:4d:ef:d3:54:44:af:d7:b3:26:32:83:6b:e5:e2:1a:97:fe:
         ad:57:1b:9a:f2:1e:dd:17:ec:a5:64:9a:a2:b4:84:7f:fe:60:
         56:93:10:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBx6Q6QbitBKp4aNq5aouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky
ZDc4ODgwHhcNMjUwNDEzMTIwMTU3WhcNMjUwNDE0MTIwMTU3WjAzMTEwLwYDVQQD
EyhiN2ZjNDMxOThlZDMxZWE1NmUyYjVkY2NlNjA5NTVmMTA5ZDQxNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUC3nQF8OYIGXQb66m5BornhjcFE
ez8AY983E2vfgsSO6MTRLGESnE0wso8/ywApsOrEpF5uiwamf1y3jStAisSGgiRo
0nhtVGhOhYa9e9LJime76JC/Vdj9dGGHCvGiCElMYE65t5XaO5xUxOOl83EwuQFf
7tGNiGmQR5WlaVSrl2Ofbg+6kinyIZtl77yBJFJ4ZmNIgnGCNfgGKrtUQDppq3qD
7dSoaSAUDCkc/p41VOHquHC996J6Ua3fvEoqKDv1FAyi01vkuqckOvRrKjLuEOJi
lWpmOb5jvgjL32DnqqTaTqBHBFeP6zo2TKIBwEV5wibdo19KfF/dMXJ0nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf8QxmO0x6lbitdzOYJVfEJ1Ba9MB8GA1UdIwQY
MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt
ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj
LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7gKuYTl
gZKJjbs19UOL1WkEVoheeHnoeiGVBWjjP/Xfi5n83UwZ/nOqvHRVMq/LSSCGwiN8
6KVUGav6AHx8wBbVgWJeInwriE+4TWIHCKJREXBhgY0I/cuuDW5foKDhRdpjuEfI
t9aGyk2oLJJYzME4shS2CZKnqy+RXNDv6KW0vMtFz9OLU7UJN3gPzdZwx0M5LXXV
c9Z0/9Znd/8QXNxwAK+9rxX/vUAfxYMp5FvWweLrqsHbRxfaodHIe2XkjhxcKSSU
M8PyoU7KE1xJZZd6c4zEsY9MDk3v01REr9ezJjKDa+XiGpf+rVcbmvIe3RfspWSa
orSEf/5gVpMQjg==
-----END CERTIFICATE-----