Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File:                     j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier:          +X9Q2/GtRFcB/0C8lkrlbS7c87lJnCOZim+1C7OwHW0=
Subject key identifier:   46:5B:C7:F4:E5:FA:FE:82:4B:E9:54:BB:BA:6E:A8:1C:0F:0A:8C:8E
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer:       /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial:       01962F741F751D4A48EDB3EE401061D2B65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
                          2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
                          3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: +dRn4tYiYHkF/dDoQHM5T65uMNNVKfilD3L+JwqUybs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1f:75:1d:4a:48:ed:b3:ee:40:10:61:d2:b6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=465bc7f4e5fafe824be954bbba6ea81c0f0a8c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:54:5b:04:14:ba:0c:27:75:be:49:6b:dc:
                    15:a7:d6:12:cf:92:9d:0f:1a:be:ac:e6:6f:2e:87:
                    84:3c:e6:2c:a2:06:59:7b:bf:b0:cd:c6:66:5c:95:
                    ee:de:88:8c:f2:f3:ed:d5:7e:40:93:30:71:c5:9f:
                    b0:f0:e4:85:17:90:2f:c8:59:44:04:3e:48:50:02:
                    be:71:89:33:cb:be:08:00:5a:e8:1c:3a:e8:8c:65:
                    70:e1:48:d9:ac:43:0e:9a:30:39:e4:5d:7c:07:50:
                    27:3e:fd:87:a5:97:12:61:96:96:e6:1a:2b:36:2b:
                    41:e2:0b:86:b7:48:a3:77:fb:7c:b3:e9:42:2d:56:
                    91:c9:4a:bf:da:bc:c1:85:9c:4d:9a:ca:79:05:5d:
                    c9:ae:30:8c:97:00:bb:8f:53:e2:6e:85:b1:dd:11:
                    a5:a6:86:9b:9a:f9:d2:8a:81:d0:8a:51:59:32:eb:
                    c8:12:c0:89:d1:f3:a6:6a:6a:a5:bf:42:39:a9:04:
                    40:0e:19:27:b6:6c:ec:74:1d:24:04:b0:ba:af:27:
                    3a:29:db:f5:06:14:5f:3e:36:24:1f:8d:f5:bd:f9:
                    f2:57:4c:04:48:e4:22:b2:ce:61:f6:0c:35:97:07:
                    b7:87:b7:24:a5:da:4c:5b:5a:02:7a:47:a5:a8:53:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:C7:F4:E5:FA:FE:82:4B:E9:54:BB:BA:6E:A8:1C:0F:0A:8C:8E
            X509v3 Authority Key Identifier:
                keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7e:55:10:4f:bb:37:87:68:ab:50:f1:a7:4c:e4:34:9f:9b:
         af:49:5a:86:f7:98:2f:92:32:36:55:52:e7:75:de:b6:6e:65:
         6e:b1:3a:34:0c:7f:74:c1:e4:26:67:a1:e5:c9:2b:27:f7:45:
         3b:63:61:d0:ae:06:49:da:60:dd:5b:6f:44:28:d1:d0:c5:bc:
         39:c0:33:1f:57:05:2c:e3:3d:f9:35:7e:79:a3:c6:b5:a3:9e:
         8a:a2:21:c9:33:1b:35:79:e0:e0:ad:c2:a3:d1:2d:cd:58:e5:
         49:9b:5a:78:fe:c7:ce:09:ff:da:12:4c:dc:20:b7:c4:cd:07:
         0d:cd:29:6b:4b:fd:13:84:a0:65:9c:f2:99:7e:62:ba:c3:38:
         60:2d:46:7e:bd:b2:42:b6:21:cb:f6:1a:bd:52:ae:e4:db:8f:
         ac:87:fd:6f:40:0b:56:95:2e:b1:c1:5f:91:d1:cc:8f:50:7f:
         86:8e:97:94:6a:8d:11:65:f9:5a:e4:f4:79:0d:d7:2f:f8:4d:
         63:5c:93:a5:7c:d9:3a:a4:c0:f0:c5:7b:3a:c9:bd:d9:a4:37:
         c5:3c:f4:12:c5:8c:50:6f:d1:f6:9b:a6:ea:14:22:0b:36:66:
         2a:bd:c3:41:72:5d:37:a0:93:45:58:8c:25:0c:fd:62:b2:44:
         7a:f2:a1:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdB91HUpI7bPuQBBh0rZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh
MjdiMTIwHhcNMjUwNDEzMTQwMTAxWhcNMjUwNDE0MTQwMTAxWjAzMTEwLwYDVQQD
Eyg0NjViYzdmNGU1ZmFmZTgyNGJlOTU0YmJiYTZlYTgxYzBmMGE4YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApldUWwQUugwndb5Ja9wVp9YSz5Kd
Dxq+rOZvLoeEPOYsogZZe7+wzcZmXJXu3oiM8vPt1X5AkzBxxZ+w8OSFF5AvyFlE
BD5IUAK+cYkzy74IAFroHDrojGVw4UjZrEMOmjA55F18B1AnPv2HpZcSYZaW5hor
NitB4guGt0ijd/t8s+lCLVaRyUq/2rzBhZxNmsp5BV3JrjCMlwC7j1PiboWx3RGl
poabmvnSioHQilFZMuvIEsCJ0fOmamqlv0I5qQRADhkntmzsdB0kBLC6ryc6Kdv1
BhRfPjYkH431vfnyV0wESOQiss5h9gw1lwe3h7ckpdpMW1oCekelqFPu8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZbx/Tl+v6CS+lUu7puqBwPCoyOMB8GA1UdIwQY
MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt
ZWNiYjk0NDJmNTg5LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5
LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn5VEE+7
N4doq1Dxp0zkNJ+br0lahveYL5IyNlVS53Xetm5lbrE6NAx/dMHkJmeh5ckrJ/dF
O2Nh0K4GSdpg3VtvRCjR0MW8OcAzH1cFLOM9+TV+eaPGtaOeiqIhyTMbNXng4K3C
o9EtzVjlSZtaeP7Hzgn/2hJM3CC3xM0HDc0pa0v9E4SgZZzymX5iusM4YC1Gfr2y
QrYhy/YavVKu5NuPrIf9b0ALVpUuscFfkdHMj1B/ho6XlGqNEWX5WuT0eQ3XL/hN
Y1yTpXzZOqTA8MV7Osm92aQ3xTz0EsWMUG/R9pum6hQiCzZmKr3DQXJdN6CTRViM
JQz9YrJEevKhjQ==
-----END CERTIFICATE-----