Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File:                     8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier:          V3ogNOhgeSqpl74WB6/w2YNwF8xpVj/HS3FZ6FwBMww=
Subject key identifier:   28:C0:07:BB:C3:D1:79:1C:06:D8:04:12:F1:99:51:C6:98:A8:3E:00
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer:       /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial:       01962F0678675929F8B5EB1CFAE5B785F761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number:          0BE3
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
                          2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: nie9jz60MaC51cOCUrwpk5x4hq7ZA6k8UAg8oZ2XUDc=)
                          3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:78:67:59:29:f8:b5:eb:1c:fa:e5:b7:85:f7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=28c007bbc3d1791c06d80412f19951c698a83e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:6e:08:71:2c:89:45:76:7b:34:fd:64:8a:
                    e4:3a:e8:ad:7f:82:d8:00:7b:1a:5e:a0:1a:b0:8f:
                    fd:d1:ca:b7:f0:e9:eb:7d:77:ce:f6:bd:e8:b8:31:
                    84:0e:98:4a:e2:c7:83:57:06:98:9a:d5:31:fa:89:
                    ce:1d:aa:45:4f:5e:35:1d:09:ec:94:1e:56:a5:05:
                    5c:65:30:85:0f:ed:51:cc:5b:10:41:e2:f4:84:9f:
                    8e:e6:e8:4c:34:35:04:06:1e:8b:24:84:2d:0c:f2:
                    70:fe:5c:f2:71:98:40:07:6e:f2:d6:a4:aa:37:6c:
                    0d:3f:d9:be:0e:0b:30:8c:04:b0:4b:91:6a:77:05:
                    70:31:31:7a:e5:52:c1:9f:ff:f8:d1:74:ff:68:da:
                    63:c1:cb:c7:af:61:a7:55:02:59:27:cf:e9:02:ba:
                    ab:46:a0:ad:b8:46:8c:10:2c:06:1d:39:31:0d:3b:
                    e0:8a:ea:3a:5f:fa:82:bf:14:8e:43:68:b5:26:ca:
                    cb:f3:96:59:14:88:78:af:2a:05:13:0b:f3:2c:e6:
                    e9:43:c9:8b:98:4f:3f:68:5b:aa:1b:e9:c6:32:84:
                    d0:09:ab:a0:52:f6:1f:e7:e9:fb:11:de:68:d2:ea:
                    35:b3:50:94:96:da:2a:11:1f:d9:1c:57:ee:97:b3:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C0:07:BB:C3:D1:79:1C:06:D8:04:12:F1:99:51:C6:98:A8:3E:00
            X509v3 Authority Key Identifier:
                keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:a9:a2:c1:b9:c0:92:74:cc:9e:34:d2:05:73:ce:2d:26:
         eb:25:a1:ff:41:f3:85:63:92:b0:f4:52:31:8d:95:c4:af:33:
         b0:74:3c:5b:60:86:b7:a4:5d:a0:f7:0c:1c:4c:9f:13:9c:f7:
         e9:5e:6b:74:db:a5:b6:75:77:ef:74:82:79:fb:6d:91:c3:20:
         03:2d:aa:73:f7:3a:ec:c9:4d:2a:f4:0b:24:51:58:8c:3b:cc:
         e7:3a:d9:14:ab:c4:c4:60:08:b2:58:c2:98:62:d6:e9:67:a9:
         fb:a7:0d:a7:68:86:27:ad:7e:d2:55:df:75:bd:d3:28:36:23:
         41:1a:41:cc:e4:ca:14:a9:ac:83:cd:c8:34:42:6e:01:47:a9:
         51:61:37:2b:d7:3d:e8:63:4a:14:32:a9:cb:61:76:e8:9f:f5:
         af:73:40:d3:28:60:1b:45:46:f9:10:c1:a8:e9:be:38:d5:56:
         0f:02:80:cd:06:36:63:ef:11:97:86:d9:a4:92:30:ce:ff:70:
         c4:d2:d6:d3:24:da:43:06:40:88:74:65:ee:70:70:4c:2b:04:
         93:0f:e5:51:6b:3e:b2:fd:0a:35:df:b7:16:da:82:db:4c:7c:
         b0:61:a5:32:c7:7a:c8:6b:75:2e:d3:77:7f:98:b4:7e:ee:2e:
         a2:56:bb:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnhnWSn4tesc+uW3hfdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDg1ODc1Yzg0NzBlNmFhY2RjOTQ3NDIxMDVmMzBjNTk3
YWMyYmIwHhcNMjUwNDEzMTIwMTE1WhcNMjUwNDE0MTIwMTE1WjAzMTEwLwYDVQQD
EygyOGMwMDdiYmMzZDE3OTFjMDZkODA0MTJmMTk5NTFjNjk4YTgzZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK5uCHEsiUV2ezT9ZIrkOuitf4LY
AHsaXqAasI/90cq38OnrfXfO9r3ouDGEDphK4seDVwaYmtUx+onOHapFT141HQns
lB5WpQVcZTCFD+1RzFsQQeL0hJ+O5uhMNDUEBh6LJIQtDPJw/lzycZhAB27y1qSq
N2wNP9m+DgswjASwS5FqdwVwMTF65VLBn//40XT/aNpjwcvHr2GnVQJZJ8/pArqr
RqCtuEaMECwGHTkxDTvgiuo6X/qCvxSOQ2i1JsrL85ZZFIh4ryoFEwvzLObpQ8mL
mE8/aFuqG+nGMoTQCaugUvYf5+n7Ed5o0uo1s1CUltoqER/ZHFful7Om2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjAB7vD0XkcBtgEEvGZUcaYqD4AMB8GA1UdIwQY
MBaAFPJIWHXIRw5qrNyUdCEF8wxZesK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUt
OGZkNGMwMjQ0ODhlLzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUtOGZkNGMwMjQ0ODhl
LzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwaposG5
wJJ0zJ400gVzzi0m6yWh/0HzhWOSsPRSMY2VxK8zsHQ8W2CGt6RdoPcMHEyfE5z3
6V5rdNultnV373SCefttkcMgAy2qc/c67MlNKvQLJFFYjDvM5zrZFKvExGAIsljC
mGLW6Wep+6cNp2iGJ61+0lXfdb3TKDYjQRpBzOTKFKmsg83INEJuAUepUWE3K9c9
6GNKFDKpy2F26J/1r3NA0yhgG0VG+RDBqOm+ONVWDwKAzQY2Y+8Rl4bZpJIwzv9w
xNLW0yTaQwZAiHRl7nBwTCsEkw/lUWs+sv0KNd+3FtqC20x8sGGlMsd6yGt1LtN3
f5i0fu4uola7iA==
-----END CERTIFICATE-----