Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File:                     aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier:          f9TQCpvJ+jjWrLeH9XBHaDYP66FkDAekLj2L3uFv4tg=
Subject key identifier:   46:BF:03:88:EA:74:52:79:0F:E9:F9:60:A9:3F:D1:F5:25:82:AA:81
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer:       /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial:       01962F06B17A5D56D1D4515BAC7535385F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: ld+0a82xt9Yg6+MTzoLVFXfTIA3b9AdGh5GZi7UE2mI=)
                          2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
                          3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
                          4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
                          5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:7a:5d:56:d1:d4:51:5b:ac:75:35:38:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=46bf0388ea7452790fe9f960a93fd1f52582aa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d9:b9:c5:39:7f:44:f5:18:ce:55:1d:0d:42:
                    51:d0:f8:9a:86:79:9c:28:9f:de:65:82:ef:61:2e:
                    fe:ed:c5:60:f8:4c:3e:ac:9f:80:7c:b0:83:a1:31:
                    26:83:09:ec:2e:52:c1:78:9b:1d:ab:b3:69:14:80:
                    36:d7:b4:94:1a:f6:1c:bb:0d:26:5d:d4:e3:a1:57:
                    db:8a:23:b3:98:8f:d5:e0:a6:00:0f:c1:ca:85:47:
                    b3:46:47:e8:41:01:c2:64:b4:8a:f1:94:8d:6b:b8:
                    04:9a:99:8d:18:cf:7d:a3:29:45:0a:42:39:de:34:
                    42:31:b5:46:cd:df:7a:7c:57:d5:22:0a:6d:5e:02:
                    81:ac:a3:9e:46:33:79:a6:59:05:54:f3:a5:1c:2c:
                    70:89:fb:7e:12:54:cd:0e:ce:64:c6:f0:39:e0:90:
                    50:5e:23:51:23:60:e6:0f:c9:67:a5:3e:aa:58:60:
                    7d:00:f2:f3:79:58:b2:8d:89:eb:0a:cc:3c:c6:03:
                    3f:de:ce:0f:01:1d:72:68:19:3b:08:7a:94:28:37:
                    df:e8:dd:40:dd:ce:ba:16:91:50:58:d1:f4:0c:33:
                    a8:29:a8:ff:57:e5:12:45:a0:78:9b:3d:ee:a0:bc:
                    83:b8:3e:d8:64:ca:41:ee:6e:59:7a:6a:cf:ec:e0:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BF:03:88:EA:74:52:79:0F:E9:F9:60:A9:3F:D1:F5:25:82:AA:81
            X509v3 Authority Key Identifier:
                keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:2c:f6:11:60:57:96:74:95:d1:b3:b0:94:0a:8d:cd:1f:
         b7:ee:cd:45:c7:4e:b3:d5:73:47:10:7f:af:d2:e0:56:b8:97:
         cc:7c:74:14:d5:ba:1e:07:27:46:d9:21:5f:81:80:b5:89:ba:
         29:93:63:84:e6:3c:ed:27:d1:c4:8c:c4:35:34:80:89:38:ef:
         45:c3:de:67:55:bc:6b:89:79:5b:1f:65:0d:b0:df:b5:22:c3:
         3f:9b:78:57:94:5d:0a:36:f0:c4:b5:56:45:f3:df:36:f8:d4:
         01:58:e0:21:e0:79:66:11:2d:33:b4:01:0c:11:0e:eb:c6:12:
         15:c1:fc:b6:a8:44:47:e9:cc:cf:fd:a9:a9:ba:9f:26:af:37:
         a7:5a:d9:0f:a7:34:36:ce:9b:25:82:a5:c8:23:50:ee:d8:7c:
         86:8c:1c:d9:f1:fd:a6:16:57:f9:c5:78:54:37:66:02:ca:57:
         ce:05:8c:e0:e5:80:f1:5d:4b:90:80:c2:c9:59:1d:a1:d8:cf:
         71:f8:25:2f:62:88:a8:1a:b2:e4:39:ae:f9:18:8c:f8:94:e4:
         ed:1c:69:32:8b:0a:dd:7d:e7:3c:7e:cc:37:44:b4:a8:8f:22:
         04:60:aa:c0:28:dc:3c:71:d9:30:b7:ea:d0:fd:e2:a2:68:b0:
         2b:94:6b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrF6XVbR1FFbrHU1OF8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3
ODM0MTQwHhcNMjUwNDEzMTIwMTI5WhcNMjUwNDE0MTIwMTI5WjAzMTEwLwYDVQQD
Eyg0NmJmMDM4OGVhNzQ1Mjc5MGZlOWY5NjBhOTNmZDFmNTI1ODJhYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Nm5xTl/RPUYzlUdDUJR0Piahnmc
KJ/eZYLvYS7+7cVg+Ew+rJ+AfLCDoTEmgwnsLlLBeJsdq7NpFIA217SUGvYcuw0m
XdTjoVfbiiOzmI/V4KYAD8HKhUezRkfoQQHCZLSK8ZSNa7gEmpmNGM99oylFCkI5
3jRCMbVGzd96fFfVIgptXgKBrKOeRjN5plkFVPOlHCxwift+ElTNDs5kxvA54JBQ
XiNRI2DmD8lnpT6qWGB9APLzeViyjYnrCsw8xgM/3s4PAR1yaBk7CHqUKDff6N1A
3c66FpFQWNH0DDOoKaj/V+USRaB4mz3uoLyDuD7YZMpB7m5ZemrP7OBs+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa/A4jqdFJ5D+n5YKk/0fUlgqqBMB8GA1UdIwQY
MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt
MWY2ODk5MzViOTBmLzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm
LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITgs9hFg
V5Z0ldGzsJQKjc0ft+7NRcdOs9VzRxB/r9LgVriXzHx0FNW6HgcnRtkhX4GAtYm6
KZNjhOY87SfRxIzENTSAiTjvRcPeZ1W8a4l5Wx9lDbDftSLDP5t4V5RdCjbwxLVW
RfPfNvjUAVjgIeB5ZhEtM7QBDBEO68YSFcH8tqhER+nMz/2pqbqfJq83p1rZD6c0
Ns6bJYKlyCNQ7th8howc2fH9phZX+cV4VDdmAspXzgWM4OWA8V1LkIDCyVkdodjP
cfglL2KIqBqy5Dmu+RiM+JTk7RxpMosK3X3nPH7MN0S0qI8iBGCqwCjcPHHZMLfq
0P3iomiwK5Rrrg==
-----END CERTIFICATE-----