Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          F8RPVb1KzSRguR793JB9jY5tXLjjvoDsgGtu+aRMnOg=
Subject key identifier:   63:93:CB:CA:43:3D:7D:A2:41:65:DD:D4:5B:7E:72:1F:F0:14:75:B6
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       01962E61C391CEE241C6C7FB04DF039ED2F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
                          2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
                          3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
                          4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
                          5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
                          6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
                          7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: sWvnHAov2MT5/Dr20NsNv4K6VYzaD1Hcjw2HLXVkJco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:91:ce:e2:41:c6:c7:fb:04:df:03:9e:d2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=6393cbca433d7da24165ddd45b7e721ff01475b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:49:f3:5b:ed:91:3f:a2:8f:9b:fb:b1:ec:
                    c6:0e:1a:04:97:38:ac:91:15:67:86:90:23:be:c7:
                    84:7c:fb:92:02:fb:c3:47:df:17:3d:b2:ba:2c:8f:
                    8c:5b:27:6d:a2:87:20:02:ec:6a:1b:ab:05:31:46:
                    ae:a1:69:fc:2a:19:6f:a4:b3:e2:0f:b8:38:74:65:
                    1d:c7:4c:44:58:a3:2d:22:aa:a3:21:9f:39:3c:97:
                    c6:72:dd:89:b5:c7:a0:e1:d8:46:7c:33:67:c9:04:
                    92:bd:13:63:17:4f:e8:23:34:5e:60:0e:4c:47:1c:
                    92:bc:05:52:e0:8a:78:4f:a2:6f:4d:1d:36:df:78:
                    f3:9b:b1:02:ec:6b:65:17:c7:46:41:86:3d:b5:e5:
                    a1:33:49:1c:bf:68:ce:e0:27:1e:af:0d:e2:2d:c0:
                    5b:5f:01:11:12:1f:d3:2c:62:88:82:c5:e0:10:98:
                    5e:3c:5d:6a:ce:fa:9d:24:39:ed:a5:4c:14:99:5f:
                    eb:85:67:de:8a:94:54:58:6a:c8:50:d5:01:ed:54:
                    f9:60:49:1d:19:60:44:b2:49:55:d9:c7:ca:f7:ae:
                    fe:9c:c1:9b:45:fb:69:42:be:8b:f6:d8:5d:28:1e:
                    29:0b:6f:47:75:96:04:10:4c:0e:b8:94:f0:9e:23:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:CB:CA:43:3D:7D:A2:41:65:DD:D4:5B:7E:72:1F:F0:14:75:B6
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cf:a4:6d:85:55:f3:76:e5:05:8b:05:08:3f:b4:7c:b6:56:
         f0:bc:02:e7:df:b0:f7:9e:df:5f:95:d4:e4:f9:1a:d8:ee:3c:
         6e:b9:a7:f7:bc:d7:d1:38:98:6b:1a:f6:26:56:d9:b7:a1:ca:
         10:57:e8:17:65:b2:32:f5:e0:f6:6e:20:e8:e6:d4:75:f5:60:
         53:9c:63:c3:74:8a:74:bb:6c:43:0b:d3:c5:ab:a4:ce:d7:e2:
         aa:45:96:0f:42:24:5c:7d:71:ea:a2:b2:c4:af:d9:b1:8d:dd:
         1d:8b:03:e1:e2:ed:07:06:a2:f0:4c:10:e4:61:f0:5d:0c:a6:
         63:86:cd:b2:eb:c4:07:76:48:70:35:7d:03:99:6c:03:34:81:
         1d:a6:5f:27:19:40:b6:94:e3:47:3c:87:73:21:45:4e:94:61:
         de:14:6e:aa:e5:0f:91:02:d2:10:4c:e6:eb:01:db:7f:e5:82:
         b3:1f:a9:ad:f6:1f:f7:89:a6:b6:42:b4:b1:9d:b6:9e:b0:a9:
         65:49:ed:d0:9e:78:29:0b:ba:64:57:14:cf:36:6d:70:d7:08:
         15:43:15:a4:6e:c4:fd:0d:09:4b:43:2f:96:14:91:72:5f:2b:
         be:4c:50:40:e3:ea:33:24:00:a1:ba:ed:9b:41:77:46:37:ae:
         f5:3e:a3:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcORzuJBxsf7BN8DntL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
Eyg2MzkzY2JjYTQzM2Q3ZGEyNDE2NWRkZDQ1YjdlNzIxZmYwMTQ3NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotBJ81vtkT+ij5v7sezGDhoElzis
kRVnhpAjvseEfPuSAvvDR98XPbK6LI+MWydtoocgAuxqG6sFMUauoWn8KhlvpLPi
D7g4dGUdx0xEWKMtIqqjIZ85PJfGct2Jtceg4dhGfDNnyQSSvRNjF0/oIzReYA5M
RxySvAVS4Ip4T6JvTR0233jzm7EC7GtlF8dGQYY9teWhM0kcv2jO4Ccerw3iLcBb
XwEREh/TLGKIgsXgEJhePF1qzvqdJDntpUwUmV/rhWfeipRUWGrIUNUB7VT5YEkd
GWBEsklV2cfK967+nMGbRftpQr6L9thdKB4pC29HdZYEEEwOuJTwniMlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOTy8pDPX2iQWXd1Ft+ch/wFHW2MB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc+kbYVV
83blBYsFCD+0fLZW8LwC59+w957fX5XU5Pka2O48brmn97zX0TiYaxr2JlbZt6HK
EFfoF2WyMvXg9m4g6ObUdfVgU5xjw3SKdLtsQwvTxaukztfiqkWWD0IkXH1x6qKy
xK/ZsY3dHYsD4eLtBwai8EwQ5GHwXQymY4bNsuvEB3ZIcDV9A5lsAzSBHaZfJxlA
tpTjRzyHcyFFTpRh3hRuquUPkQLSEEzm6wHbf+WCsx+prfYf94mmtkK0sZ22nrCp
ZUnt0J54KQu6ZFcUzzZtcNcIFUMVpG7E/Q0JS0MvlhSRcl8rvkxQQOPqMyQAobrt
m0F3Rjeu9T6j6g==
-----END CERTIFICATE-----