Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          wwVzX8MvRbb5yjrojmCV1l7AgEIeorVwA6Yk33Oi/bs=
Subject key identifier:   CD:E4:A0:61:06:86:51:C6:54:17:B4:5A:C2:10:59:B4:C9:6E:13:A0
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       01962DF44532447138757DCD00E0969AB15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
                          2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
                          3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
                          4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
                          5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: Y5J47Y9F1hy1pNKQsEOhVgJWVblqohzHEY/253Xz/L0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:45:32:44:71:38:75:7d:cd:00:e0:96:9a:b1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=cde4a061068651c65417b45ac21059b4c96e13a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:bb:6c:0f:bf:d5:4a:1e:4a:b7:1a:b7:d1:
                    39:af:01:29:9a:2f:ca:f9:ff:2e:4e:a0:e4:6e:9c:
                    87:dd:ae:55:49:0f:24:1d:80:7a:d4:ea:44:27:2c:
                    93:87:a4:b3:44:63:73:d3:40:48:bb:ab:1a:07:16:
                    cf:70:c2:0e:e1:b6:12:68:40:b7:ff:ff:92:7f:92:
                    c4:cb:1b:6d:7b:56:6f:67:c5:1b:ca:ab:6e:53:00:
                    8b:a0:b0:3f:88:c4:f3:64:60:5e:c8:96:40:67:c9:
                    e9:a8:1f:58:4e:4b:55:09:da:29:4b:17:c6:b0:85:
                    ff:c8:b4:87:a9:64:62:33:e4:e8:1c:dd:48:ce:54:
                    9c:00:65:c8:28:56:6a:f9:8f:29:01:db:de:3b:76:
                    4d:5a:9e:d7:a1:30:3d:49:52:57:97:ca:6e:72:e5:
                    46:8c:66:a6:75:2b:32:08:c6:4a:40:68:fd:f6:b8:
                    e9:a3:a5:94:b4:a5:eb:8b:25:48:f9:41:71:16:ec:
                    4a:18:62:99:b6:64:9d:2c:03:50:dc:5f:ac:00:53:
                    82:87:51:1f:d3:f1:6b:0c:25:c2:bb:7f:a8:0a:a7:
                    b7:f1:1f:6a:33:4e:05:b6:8d:13:74:95:6a:18:00:
                    40:67:9f:fb:16:60:ab:89:61:ee:18:51:af:cc:a9:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:A0:61:06:86:51:C6:54:17:B4:5A:C2:10:59:B4:C9:6E:13:A0
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:ec:22:dc:5f:ee:1a:fd:db:33:6a:dc:56:88:83:0c:0b:
         18:9c:03:06:60:b7:a8:f1:91:3f:07:4c:91:30:ab:35:2a:e0:
         96:a9:55:0c:1c:d4:b6:9c:cd:49:ea:a0:6e:77:ad:f4:97:6f:
         4c:8b:45:ed:0b:98:cb:e8:47:03:64:f2:00:8d:a0:8a:c7:c3:
         c0:8f:4d:6f:38:72:60:a8:66:aa:26:fe:20:75:a0:79:d3:1d:
         64:4a:87:b1:53:eb:2a:f8:73:b2:f5:25:b2:69:f7:32:4d:fa:
         45:74:b7:76:c3:ea:bc:89:80:80:55:e3:5e:15:69:48:11:03:
         4e:17:ee:42:52:78:a0:e2:bf:a6:8d:e7:a9:d8:47:aa:8b:bb:
         4e:fd:58:b1:56:54:94:88:a3:97:ca:5d:01:8f:22:8d:32:6a:
         f9:df:73:21:c1:4a:35:e9:9d:ac:ae:76:fa:23:6c:f2:17:a0:
         52:23:a9:ba:78:84:87:06:55:3f:cf:cf:e4:67:18:3a:58:01:
         73:eb:7f:db:b9:71:ce:a1:77:13:74:a8:94:f7:4c:89:3a:bf:
         22:90:9a:65:b4:00:7b:24:c8:0b:e5:f6:50:a7:8d:ff:81:d2:
         48:8f:d1:c5:17:24:85:d8:31:05:ce:6b:49:57:52:a4:c5:a6:
         8f:03:84:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EUyRHE4dX3NAOCWmrFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw
Y2Q0NGEwHhcNMjUwNDEzMDcwMTQ1WhcNMjUwNDE0MDcwMTQ1WjAzMTEwLwYDVQQD
EyhjZGU0YTA2MTA2ODY1MWM2NTQxN2I0NWFjMjEwNTliNGM5NmUxM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2K7bA+/1UoeSrcat9E5rwEpmi/K
+f8uTqDkbpyH3a5VSQ8kHYB61OpEJyyTh6SzRGNz00BIu6saBxbPcMIO4bYSaEC3
//+Sf5LEyxtte1ZvZ8UbyqtuUwCLoLA/iMTzZGBeyJZAZ8npqB9YTktVCdopSxfG
sIX/yLSHqWRiM+ToHN1IzlScAGXIKFZq+Y8pAdveO3ZNWp7XoTA9SVJXl8pucuVG
jGamdSsyCMZKQGj99rjpo6WUtKXriyVI+UFxFuxKGGKZtmSdLANQ3F+sAFOCh1Ef
0/FrDCXCu3+oCqe38R9qM04Fto0TdJVqGABAZ5/7FmCriWHuGFGvzKl2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3koGEGhlHGVBe0WsIQWbTJbhOgMB8GA1UdIwQY
MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt
MTk2ZTZmMzc1ZmQ2LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2
LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJrsItxf
7hr92zNq3FaIgwwLGJwDBmC3qPGRPwdMkTCrNSrglqlVDBzUtpzNSeqgbnet9Jdv
TItF7QuYy+hHA2TyAI2gisfDwI9NbzhyYKhmqib+IHWgedMdZEqHsVPrKvhzsvUl
smn3Mk36RXS3dsPqvImAgFXjXhVpSBEDThfuQlJ4oOK/po3nqdhHqou7Tv1YsVZU
lIijl8pdAY8ijTJq+d9zIcFKNemdrK52+iNs8hegUiOpuniEhwZVP8/P5GcYOlgB
c+t/27lxzqF3E3SolPdMiTq/IpCaZbQAeyTIC+X2UKeN/4HSSI/RxRckhdgxBc5r
SVdSpMWmjwOE3Q==
-----END CERTIFICATE-----