Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          YDGQ5sdeuHsYTyS8DxZmfZduDOopx19EfY4R7BQbTXQ=
Subject key identifier:   E0:47:DE:85:80:6C:A1:B1:49:4E:B2:CF:F1:0F:D7:5A:4E:C2:7A:DB
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       01962FAB59321CE270AE35FE37080A11EFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          1237
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=)
                          2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: UYuaNJBa+6MtMqOnx9gZLijOfwNvFTlfZnKQZ/aMphM=)
                          4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=)
                          5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=)
                          6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=)
                          7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:59:32:1c:e2:70:ae:35:fe:37:08:0a:11:ef:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=e047de85806ca1b1494eb2cff10fd75a4ec27adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:da:07:1c:05:96:08:ea:30:2e:68:ab:58:
                    de:e9:f4:68:5f:1e:3c:c5:09:70:90:43:54:b1:e4:
                    58:91:bd:76:bf:cb:29:9e:10:0a:68:dd:a9:90:aa:
                    0c:7e:a7:ea:7a:f4:ca:11:eb:50:5e:d9:11:09:8d:
                    9c:ab:d6:f4:76:db:0a:ad:39:df:bf:3c:79:2b:1b:
                    38:42:ce:93:e4:35:3c:81:21:aa:b0:af:b9:e2:63:
                    5a:b0:54:78:97:6b:96:49:08:34:3f:ad:78:d6:81:
                    53:0d:2d:45:f7:be:09:ba:95:45:59:db:ea:4f:f1:
                    7b:e8:cf:46:68:99:40:ac:d7:92:e0:e6:0a:88:e4:
                    d3:e7:a6:83:b5:24:b8:df:cf:37:94:a6:92:08:80:
                    5c:8a:f1:a1:67:83:5f:78:f4:0a:84:4b:ab:33:08:
                    00:e9:a5:a3:12:de:b3:bd:14:7c:e5:26:a8:a3:35:
                    52:a3:3c:9f:f4:57:95:00:94:bc:12:32:bf:aa:87:
                    5e:cd:31:58:b3:65:7b:4f:73:9d:56:7b:46:70:80:
                    da:ac:32:38:7a:94:44:30:52:07:e7:44:eb:03:d7:
                    19:82:8a:20:00:5a:66:60:66:b2:39:ba:61:9c:0a:
                    41:15:85:4d:8f:65:ca:4c:ab:96:1f:75:f8:05:c9:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:47:DE:85:80:6C:A1:B1:49:4E:B2:CF:F1:0F:D7:5A:4E:C2:7A:DB
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:85:25:de:fa:9b:e3:54:2c:3e:60:a3:96:0a:59:2a:7a:53:
         25:a1:90:44:d7:e8:c2:b3:7a:3b:47:ee:40:48:27:b0:59:54:
         ae:e5:4c:89:7b:1f:21:63:d1:f8:3b:10:31:77:70:fe:83:5a:
         ce:37:da:a8:5c:58:48:76:b1:9d:2b:c9:50:6f:0b:a2:b8:1b:
         1f:18:6d:e4:5b:89:d6:c4:34:d4:25:a4:46:48:12:76:a6:89:
         e9:53:f2:ec:6a:25:d0:01:05:ef:4e:fa:da:69:06:07:72:28:
         fd:77:14:c4:fd:b5:22:29:7f:4e:48:b0:c4:ab:bd:df:28:84:
         77:fe:f6:0f:eb:df:ad:df:61:54:86:63:3d:4b:97:c5:4d:7c:
         27:61:40:72:80:19:3a:11:46:18:0e:bb:cd:37:0a:84:ad:40:
         fe:65:ea:8b:0f:b6:e1:4b:a7:19:8d:e3:ab:59:c2:48:5a:d0:
         27:20:37:c9:05:1b:a6:d1:1a:c1:c6:01:e9:4f:4c:7d:4d:5a:
         b1:d2:83:5a:43:7e:86:bb:79:a6:1d:a3:4f:6a:6f:f8:f4:77:
         9b:91:03:e2:f3:39:51:d3:10:f3:16:38:30:51:2f:a5:2b:21:
         35:8c:3d:e6:8f:6a:c9:80:0a:1d:0c:e4:eb:a9:4e:90:2a:cf:
         63:3f:8f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1kyHOJwrjX+NwgKEe/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5
YmViYTEwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
EyhlMDQ3ZGU4NTgwNmNhMWIxNDk0ZWIyY2ZmMTBmZDc1YTRlYzI3YWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDaBxwFlgjqMC5oq1je6fRoXx48
xQlwkENUseRYkb12v8spnhAKaN2pkKoMfqfqevTKEetQXtkRCY2cq9b0dtsKrTnf
vzx5Kxs4Qs6T5DU8gSGqsK+54mNasFR4l2uWSQg0P6141oFTDS1F974JupVFWdvq
T/F76M9GaJlArNeS4OYKiOTT56aDtSS43883lKaSCIBcivGhZ4NfePQKhEurMwgA
6aWjEt6zvRR85SaoozVSozyf9FeVAJS8EjK/qodezTFYs2V7T3OdVntGcIDarDI4
epREMFIH50TrA9cZgoogAFpmYGayObphnApBFYVNj2XKTKuWH3X4BcmsHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBH3oWAbKGxSU6yz/EP11pOwnrbMB8GA1UdIwQY
MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt
YjY5ZGNlNzU0N2ExLzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex
LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoUl3vqb
41QsPmCjlgpZKnpTJaGQRNfowrN6O0fuQEgnsFlUruVMiXsfIWPR+DsQMXdw/oNa
zjfaqFxYSHaxnSvJUG8LorgbHxht5FuJ1sQ01CWkRkgSdqaJ6VPy7Gol0AEF7076
2mkGB3Io/XcUxP21Iil/TkiwxKu93yiEd/72D+vfrd9hVIZjPUuXxU18J2FAcoAZ
OhFGGA67zTcKhK1A/mXqiw+24UunGY3jq1nCSFrQJyA3yQUbptEawcYB6U9MfU1a
sdKDWkN+hrt5ph2jT2pv+PR3m5ED4vM5UdMQ8xY4MFEvpSshNYw95o9qyYAKHQzk
66lOkCrPYz+PMQ==
-----END CERTIFICATE-----