Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
File:                     W81A0QtW87Uy-g39AdgX75PaGjQ.mft (raw, json)
Hash identifier:          sFNn0ltroIJ8uPqR8FeHkYQta2VaWKeC02UAMYoBCmo=
Subject key identifier:   E2:67:C4:EB:BE:61:05:F8:8D:9F:B0:3A:8C:1B:00:1E:DB:B4:BF:1F
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Certificate issuer:       /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial:       01962E98D0E22C7F9C7E4BA117DD291B6C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: DVy9xxsaVAJcUU0BRfhNabOqMzk.roa (hash: C4OGc3b2gsAM2Wvi4DJ3HoKaAiDyltSi4czoAQFuPLg=)
                          2: OrKuFz27FK0P6O2bv_b1bL5Co9k.roa (hash: 8cEi5rfuQFGn6/7XwnoqTW0z0qfPYwGTHgFoatR1/Hk=)
                          3: W81A0QtW87Uy-g39AdgX75PaGjQ.crl (hash: +/X8Yh3yeTS3IR9+sayvWXs4QBCMllxmxw3OUW6hDhc=)
                          4: Xx29scVdCmRD00pM8gqZEG2S1V4.roa (hash: feKngEcDxdbtaZY/ULJeMiuTCLcr3i9MmDhJ5JXWDaA=)
                          5: cOdMT1vBakCVhXnPerLROe0CFnU.roa (hash: CSnBhh/tdtgz5OXvaaCBm6nd3YW23jsTZHsuFLrW+tw=)
                          6: s4w35wVjXE8sREZK7Oyh4IavL0g.roa (hash: TceK26zqEtmgDQ2uUNpaKfjQftmmHU4UqyAVULIuK4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:e2:2c:7f:9c:7e:4b:a1:17:dd:29:1b:6c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=e267c4ebbe6105f88d9fb03a8c1b001edbb4bf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:23:a1:19:bc:35:f2:ea:1f:5a:14:f5:26:
                    0c:1a:0c:1e:bb:7f:b0:9c:95:ee:58:66:79:13:ea:
                    e1:7c:9e:00:22:4b:e6:c6:35:6c:31:d9:d3:73:7b:
                    bf:1c:de:49:09:d5:b1:21:dd:d2:2d:43:d0:ba:ad:
                    b9:ed:49:5f:71:dc:b6:16:4b:28:0d:25:ab:97:b1:
                    69:59:74:79:47:08:bf:19:74:16:4c:12:61:91:66:
                    20:c2:38:1c:1d:1a:36:94:f6:d3:a5:65:22:6a:5c:
                    a5:b6:1b:10:19:70:ed:d4:67:90:04:2e:7e:63:f9:
                    51:da:95:c0:09:b5:eb:09:a3:f6:da:39:bb:c4:5f:
                    34:1e:40:22:49:56:1e:ec:41:72:50:e4:82:9e:f7:
                    66:b7:c4:22:ad:6f:d4:12:e5:a6:d2:cf:91:f8:d0:
                    91:8b:bf:8c:1a:c1:93:b3:a4:56:ae:bf:a9:02:38:
                    9c:47:8a:9c:08:f3:d8:af:0a:ea:5c:95:f4:57:9b:
                    79:00:c8:4f:b8:d3:55:c5:cd:c0:c3:8d:26:3d:ff:
                    a8:4c:1e:02:d4:74:ed:50:ae:ac:f3:24:4f:6f:01:
                    78:e2:70:af:2b:13:c7:a0:21:37:62:f5:02:36:08:
                    27:53:8b:b2:1c:9e:3f:e6:c9:e7:3c:86:fd:71:5f:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:67:C4:EB:BE:61:05:F8:8D:9F:B0:3A:8C:1B:00:1E:DB:B4:BF:1F
            X509v3 Authority Key Identifier:
                keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:da:ba:14:54:61:a0:37:62:a0:06:9f:07:65:18:ec:1f:
         37:c8:69:2b:fe:41:a0:a5:1a:e7:5d:93:ab:f2:f9:79:18:56:
         84:f2:90:40:eb:45:00:db:cd:3f:26:65:89:66:03:4e:26:89:
         47:e1:33:27:4d:69:4a:93:91:a1:dd:b8:66:9a:b0:30:0b:f3:
         eb:1f:3c:ab:71:28:cd:e9:0d:43:39:8f:19:4e:a5:1f:73:d2:
         d2:39:57:de:87:21:e8:24:20:e7:ac:db:c4:d9:0c:7d:b7:e4:
         d2:b3:9c:1d:a5:46:d0:1c:cf:d9:7e:36:84:2f:19:a7:f6:4b:
         e3:f6:c1:9e:4a:97:b6:9a:9e:55:a4:1c:18:b1:35:4a:76:95:
         b2:f6:3b:33:aa:aa:d1:8e:45:79:60:f6:e6:b8:32:6e:06:c3:
         9a:b2:f7:5f:37:5d:40:1c:f0:0a:6a:95:55:e5:38:15:03:ad:
         e3:ce:fa:a1:45:4e:f7:a5:96:ee:f4:22:5d:be:b1:80:60:59:
         bb:c7:b0:e2:90:93:6a:9c:3e:88:61:8d:ba:69:c7:76:4f:cd:
         56:7b:ce:c2:bb:29:97:5e:7b:d8:82:72:43:dd:35:f5:6c:21:
         f4:7e:1e:1d:88:d6:e7:f5:ee:06:d7:1f:75:5b:cf:93:41:09:
         38:d3:4f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNDiLH+cfkuhF90pG2wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViY2Q0MGQxMGI1NmYzYjUzMmZhMGRmZDAxZDgxN2VmOTNk
YTFhMzQwHhcNMjUwNDEzMTAwMTI4WhcNMjUwNDE0MTAwMTI4WjAzMTEwLwYDVQQD
EyhlMjY3YzRlYmJlNjEwNWY4OGQ5ZmIwM2E4YzFiMDAxZWRiYjRiZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrYjoRm8NfLqH1oU9SYMGgweu3+w
nJXuWGZ5E+rhfJ4AIkvmxjVsMdnTc3u/HN5JCdWxId3SLUPQuq257Ulfcdy2Fkso
DSWrl7FpWXR5Rwi/GXQWTBJhkWYgwjgcHRo2lPbTpWUialylthsQGXDt1GeQBC5+
Y/lR2pXACbXrCaP22jm7xF80HkAiSVYe7EFyUOSCnvdmt8QirW/UEuWm0s+R+NCR
i7+MGsGTs6RWrr+pAjicR4qcCPPYrwrqXJX0V5t5AMhPuNNVxc3Aw40mPf+oTB4C
1HTtUK6s8yRPbwF44nCvKxPHoCE3YvUCNggnU4uyHJ4/5snnPIb9cV89EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJnxOu+YQX4jZ+wOowbAB7btL8fMB8GA1UdIwQY
MBaAFFvNQNELVvO1MvoN/QHYF++T2ho0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzIt
YTJjZTFjYzhiODdmLzEvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzItYTJjZTFjYzhiODdm
LzEvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9XauhRU
YaA3YqAGnwdlGOwfN8hpK/5BoKUa512Tq/L5eRhWhPKQQOtFANvNPyZliWYDTiaJ
R+EzJ01pSpORod24ZpqwMAvz6x88q3EozekNQzmPGU6lH3PS0jlX3och6CQg56zb
xNkMfbfk0rOcHaVG0BzP2X42hC8Zp/ZL4/bBnkqXtpqeVaQcGLE1SnaVsvY7M6qq
0Y5FeWD25rgybgbDmrL3XzddQBzwCmqVVeU4FQOt4876oUVO96WW7vQiXb6xgGBZ
u8ew4pCTapw+iGGNumnHdk/NVnvOwrspl1572IJyQ9019Wwh9H4eHYjW5/XuBtcf
dVvPk0EJONNPVw==
-----END CERTIFICATE-----