Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          v0QHQal8kGqkRXpC4LTMVIyeKvExVXzdLVjyG+X2N/s=
Subject key identifier:   57:FC:F0:AD:3F:92:12:D6:3C:45:76:75:F1:37:38:74:9E:54:87:DF
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       01962E99544BBC50291D1BA0F98E288D3FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          0DF4
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
                          2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
                          3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
                          4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: 84YA/1bVKOfBi1orueoO6V0Ez5m50XLmEFeBMQqjOiM=)
                          5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
                          6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
                          7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:54:4b:bc:50:29:1d:1b:a0:f9:8e:28:8d:3f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=57fcf0ad3f9212d63c457675f13738749e5487df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a0:ce:e4:30:e3:f9:2b:6f:fb:48:1c:6d:42:
                    90:11:ad:20:06:81:20:00:2e:21:1a:06:e8:ab:57:
                    de:a4:01:c7:65:c1:2e:0d:f6:61:a0:8e:4e:ae:6d:
                    b9:49:e6:17:64:5e:a2:7f:6a:22:9b:79:2f:70:34:
                    43:9f:d5:a5:f5:6b:f3:a3:3f:80:d4:6b:5e:33:29:
                    b3:c9:dd:9b:84:22:c0:f2:b7:90:a0:22:f3:b0:75:
                    7c:bc:ab:56:22:c9:39:49:fd:1c:67:b3:42:a6:ff:
                    f5:e3:4d:ef:76:d5:53:be:4a:dc:ae:ae:7f:7c:c7:
                    53:f4:1b:17:95:fa:e7:db:0b:87:f2:08:b6:b5:9e:
                    a3:80:dd:c2:56:4f:ca:91:e2:41:89:e5:77:a4:cf:
                    d5:3e:c6:fa:cc:79:75:98:97:6d:f7:93:eb:f7:db:
                    22:26:41:d9:f4:35:6c:7a:cc:f9:b6:bb:ee:95:6c:
                    a7:ae:4b:81:6f:69:49:b0:a4:20:12:54:04:e4:28:
                    bd:7e:78:1a:2b:79:e5:e7:e8:2c:6b:c8:fc:34:e7:
                    0a:20:ed:fb:49:b7:22:4d:3a:21:69:da:77:67:ef:
                    1b:6a:e3:53:43:ca:44:44:a2:a5:d8:3f:af:12:3b:
                    7d:a8:9a:90:03:59:e9:ff:36:2b:32:ea:b5:14:39:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:F0:AD:3F:92:12:D6:3C:45:76:75:F1:37:38:74:9E:54:87:DF
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:61:a9:58:7e:9d:68:66:24:3f:61:16:55:d6:2c:e9:75:
         c0:d8:20:60:17:2f:36:cf:1b:1e:ff:33:41:db:e9:e1:88:b4:
         b4:62:e4:f5:fd:02:a6:bc:27:81:b4:81:05:9c:d4:55:75:e9:
         9c:5d:18:86:76:d4:85:90:1e:d2:9b:8d:79:1f:b1:e6:7b:e0:
         45:7e:c4:e3:5e:ef:c5:43:53:3e:55:87:57:e2:a2:0f:a9:3e:
         16:e9:2a:4e:6c:4e:b5:3c:3b:18:e8:c5:23:f0:da:a2:00:43:
         a4:74:ea:14:ed:6b:7b:fb:d1:84:98:46:e7:74:4c:0b:de:d4:
         6f:5f:e0:71:be:ec:60:af:21:67:58:1f:ef:fd:32:62:f8:54:
         72:a8:93:dc:57:f1:42:23:94:79:05:08:bb:85:7e:9e:9c:2b:
         b6:2a:a4:4d:8f:1b:7b:36:f9:c1:39:6b:43:8d:87:91:ff:ae:
         9a:79:29:30:66:99:bc:bd:91:7f:37:3a:99:f9:e5:8f:7c:b0:
         00:8f:cb:a7:67:27:01:30:41:2d:b7:f3:88:67:b5:bd:d6:76:
         e1:72:64:2e:4f:7e:df:05:1b:c2:c0:8b:65:a1:0d:4e:69:9e:
         fd:bc:53:87:e2:87:43:1d:44:61:22:1d:be:e0:82:68:21:ff:
         9b:1e:56:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVRLvFApHRug+Y4ojT/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj
MTMxZjUwHhcNMjUwNDEzMTAwMjAyWhcNMjUwNDE0MTAwMjAyWjAzMTEwLwYDVQQD
Eyg1N2ZjZjBhZDNmOTIxMmQ2M2M0NTc2NzVmMTM3Mzg3NDllNTQ4N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKDO5DDj+Stv+0gcbUKQEa0gBoEg
AC4hGgboq1fepAHHZcEuDfZhoI5Orm25SeYXZF6if2oim3kvcDRDn9Wl9Wvzoz+A
1GteMymzyd2bhCLA8reQoCLzsHV8vKtWIsk5Sf0cZ7NCpv/1403vdtVTvkrcrq5/
fMdT9BsXlfrn2wuH8gi2tZ6jgN3CVk/KkeJBieV3pM/VPsb6zHl1mJdt95Pr99si
JkHZ9DVsesz5trvulWynrkuBb2lJsKQgElQE5Ci9fngaK3nl5+gsa8j8NOcKIO37
SbciTTohadp3Z+8bauNTQ8pERKKl2D+vEjt9qJqQA1np/zYrMuq1FDm+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf88K0/khLWPEV2dfE3OHSeVIffMB8GA1UdIwQY
MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt
NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5
LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPT5hqVh+
nWhmJD9hFlXWLOl1wNggYBcvNs8bHv8zQdvp4Yi0tGLk9f0CprwngbSBBZzUVXXp
nF0YhnbUhZAe0puNeR+x5nvgRX7E417vxUNTPlWHV+KiD6k+FukqTmxOtTw7GOjF
I/DaogBDpHTqFO1re/vRhJhG53RMC97Ub1/gcb7sYK8hZ1gf7/0yYvhUcqiT3Ffx
QiOUeQUIu4V+npwrtiqkTY8bezb5wTlrQ42Hkf+umnkpMGaZvL2Rfzc6mfnlj3yw
AI/Lp2cnATBBLbfziGe1vdZ24XJkLk9+3wUbwsCLZaENTmme/bxTh+KHQx1EYSId
vuCCaCH/mx5WYA==
-----END CERTIFICATE-----