Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File:                     sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier:          40BX9V0LrqpxuZ5I+7uPcqzXAKqnBear6VgBvQ2h81E=
Subject key identifier:   30:8D:ED:70:EC:89:29:DB:53:5F:7F:C5:69:7C:2D:75:3C:77:86:88
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer:       /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial:       01962F74AEBBD3B74EE7ABF07A710F7ECD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
                          2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
                          3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: C2lD6mU/BGsNbIzVmApjvGlUw0YUCHh+/gJgx+nIqcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ae:bb:d3:b7:4e:e7:ab:f0:7a:71:0f:7e:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=308ded70ec8929db535f7fc5697c2d753c778688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:ef:ce:15:2f:2a:94:10:d6:03:b7:82:59:
                    ed:eb:a4:fd:cf:ce:67:c4:17:0c:b8:3c:a1:4d:27:
                    f4:19:21:af:be:33:bf:0c:bc:af:b6:f2:a9:98:c9:
                    e7:80:7c:1f:49:71:ef:86:4e:03:9e:b6:f0:22:41:
                    20:08:1c:d7:b5:4b:f3:58:e2:19:84:bc:6a:3c:b5:
                    df:f6:94:ea:d5:81:2c:27:4f:af:b5:a8:28:25:d4:
                    01:5b:27:ff:e8:b3:3b:ea:25:62:06:f9:72:92:66:
                    1d:47:9c:d0:fa:d5:0e:29:7b:6b:96:ec:16:a7:53:
                    cf:84:2f:6c:24:e0:36:7d:c3:78:f5:6a:c6:c5:4a:
                    cc:b4:76:9f:68:1a:aa:ff:84:d7:dd:1c:77:f2:92:
                    56:7a:91:f5:6a:a5:21:05:22:4a:31:d1:6d:35:85:
                    8c:09:72:08:53:c9:b4:19:5a:0e:e1:e1:76:09:b3:
                    5c:c6:ae:7a:e5:7d:cf:15:0a:38:f2:92:a3:57:31:
                    14:1e:b6:c1:f8:56:c6:78:67:8e:21:81:e9:31:8d:
                    25:6b:0f:49:fb:8f:8c:c0:18:d4:bd:a0:0b:31:e7:
                    30:48:f2:64:69:74:56:fa:8b:f9:ee:5d:05:29:b2:
                    5c:c1:d7:d6:ab:93:d8:69:d5:a3:cf:3b:cd:30:84:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8D:ED:70:EC:89:29:DB:53:5F:7F:C5:69:7C:2D:75:3C:77:86:88
            X509v3 Authority Key Identifier:
                keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:cc:d4:a6:f1:14:4f:7a:89:de:0a:62:10:9d:d6:84:f8:
         19:82:bd:b7:20:97:b2:46:7a:22:61:ca:02:2f:df:86:3a:66:
         23:bc:bd:44:62:bd:f8:4a:b4:30:3f:8e:0e:c2:23:49:72:ed:
         6c:37:05:a0:41:c5:2a:e1:c1:62:a3:10:4a:af:01:ec:c6:b9:
         ec:f0:a5:17:dd:34:19:8a:0c:97:77:a6:46:4e:3a:2d:c1:27:
         9e:1b:27:00:91:60:1d:ef:7b:f8:ad:2b:0c:e7:58:96:37:da:
         a8:e1:2a:39:60:e6:b0:e0:fc:f0:f5:ca:24:aa:a2:9d:59:d6:
         9b:a5:c3:f3:f7:26:36:b7:ab:9b:da:00:d2:b6:40:1f:97:35:
         48:b0:15:fb:ce:71:8a:9f:2a:0b:11:3b:98:c0:52:06:4e:0c:
         4a:50:22:db:7e:ea:da:47:6e:66:31:70:2c:62:e9:1c:72:55:
         a4:8c:fe:29:f8:c1:e7:02:ed:d3:93:34:78:3a:3b:56:7a:de:
         96:b6:bd:27:89:3b:66:10:93:fb:ad:bb:57:56:0c:75:ab:3a:
         8c:20:b1:c0:41:32:e1:87:46:60:89:ce:df:58:78:4b:b3:3b:
         63:a3:9b:94:e8:fd:73:db:92:be:1d:c8:28:19:4b:c7:a5:66:
         8d:b3:6b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdK6707dO56vwenEPfs1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex
NDI1ZDgwHhcNMjUwNDEzMTQwMTM3WhcNMjUwNDE0MTQwMTM3WjAzMTEwLwYDVQQD
EygzMDhkZWQ3MGVjODkyOWRiNTM1ZjdmYzU2OTdjMmQ3NTNjNzc4Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8fvzhUvKpQQ1gO3glnt66T9z85n
xBcMuDyhTSf0GSGvvjO/DLyvtvKpmMnngHwfSXHvhk4DnrbwIkEgCBzXtUvzWOIZ
hLxqPLXf9pTq1YEsJ0+vtagoJdQBWyf/6LM76iViBvlykmYdR5zQ+tUOKXtrluwW
p1PPhC9sJOA2fcN49WrGxUrMtHafaBqq/4TX3Rx38pJWepH1aqUhBSJKMdFtNYWM
CXIIU8m0GVoO4eF2CbNcxq565X3PFQo48pKjVzEUHrbB+FbGeGeOIYHpMY0law9J
+4+MwBjUvaALMecwSPJkaXRW+ov57l0FKbJcwdfWq5PYadWjzzvNMIQ1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCN7XDsiSnbU19/xWl8LXU8d4aIMB8GA1UdIwQY
MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE7M1Kbx
FE96id4KYhCd1oT4GYK9tyCXskZ6ImHKAi/fhjpmI7y9RGK9+Eq0MD+ODsIjSXLt
bDcFoEHFKuHBYqMQSq8B7Ma57PClF900GYoMl3emRk46LcEnnhsnAJFgHe97+K0r
DOdYljfaqOEqOWDmsOD88PXKJKqinVnWm6XD8/cmNrerm9oA0rZAH5c1SLAV+85x
ip8qCxE7mMBSBk4MSlAi237q2kduZjFwLGLpHHJVpIz+KfjB5wLt05M0eDo7Vnre
lra9J4k7ZhCT+627V1YMdas6jCCxwEEy4YdGYInO31h4S7M7Y6OblOj9c9uSvh3I
KBlLx6VmjbNrdA==
-----END CERTIFICATE-----